last executing test programs:

4m16.140065158s ago: executing program 2 (id=680):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8c3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000040))
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000004200000074ecac21ad6fd8cb5d4cae185921d69b4d22203b9c994b03883d26e7a0dc64faa7d826adc8e74e42ebc944b85e8413ec3a7fa0f3a2095c7ab0f4a2d755cb655d1942ec5109f846cc7573424984011bab281b8168546a47e196298ee9d084a2153c80454dd3593261cb26f35a7f34bc8a76b2da7a408eb7a8c580fe3d80a4e70d6927e0b8c261e6be9d88a1e57270433e91abbc235052b63d3d4c582905a0b2000000000000000000"], 0x20}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4m15.235931359s ago: executing program 2 (id=681):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x208840)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0xff36)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0)
syz_io_uring_setup(0x4aec, &(0x7f0000000180)={0x0, 0x36a0, 0x20, 0xfffffffd, 0xfffffffe}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180))
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r4, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400000000000000000000000000000000000100"/600], 0x258)
close(r4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)

4m14.295841677s ago: executing program 2 (id=687):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x60)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
socket(0xa, 0x3, 0x1003a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socket$netlink(0x10, 0x3, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f00000003c0)={0x19980330, r4}, &(0x7f0000000400)={0x4, 0x14, 0x9, 0x8, 0x2, 0xfffffff7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c070000000000202020d0034891d60548d4bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003c0007867e8457127f973bdc010000000000000000017c00000400fc800c0001800800060009000c0000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

4m13.202064152s ago: executing program 2 (id=692):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES16=0x0], 0x31) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
io_setup(0x3fe, &(0x7f00000001c0)=<r3=>0x0)
io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) (async)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
unshare(0x400) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000800)={'sit0\x00', &(0x7f00000007c0)={@remote, @remote, 0xe, 0xe}}) (async)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
dup2(r6, r6) (async)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84000}, 0x95)
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async)
setreuid(0xee01, 0xee01)
write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x2}, {}, @addr={0xf, 0x7}}, {0x0, 0x0, 0x0, 0x0, @time={0x1}, {}, {0x0, 0x3}, @result={0x80000000, 0xcd}}, {0x10, 0xfd, 0x86, 0x3, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time=@time={0xfffff74e, 0x1758}}], 0x70) (async)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000006200)={r8}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xc308, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) (async)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x101100, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000006c0), 0x1000000, &(0x7f0000000700)=ANY=[@ANYBLOB="74ffffff7f000000007266646e6f3d", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6e6f6465766d61702c726f6f74636f6e746578743d757365725f752c6673757569643d39373536383661322d393162362d306265382d566161342d643363310e0f30362c6f626a5f747970653d2b2c2e2c00"]) (async)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0)

4m13.016615237s ago: executing program 2 (id=693):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace(0x10, 0x1)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0)
setpgid(0x0, r4)
chdir(&(0x7f0000000200)='./file0\x00')
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000240)=""/49, 0x106000, 0x800, 0x200000, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
renameat2(r6, &(0x7f0000000040)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x1)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
fsync(r7)

4m9.637738768s ago: executing program 2 (id=701):
r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f00006e4000/0x2000)=nil, 0x2000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095000000020000004ed41602d0809d00419e1629f9ee69ca0a647042e16a03f115c01234e0f6e6d418436fdad800b0b63fb07a1645cf8ba551e62be7874fc3951d186d8eb5f3669d40dc9db1c77f14873d7511e3e418e1d84c84014e2e8b90ce421597f7a893c42d8ba9c9ad461da906c9bb6d07b2c33b37713273ac43479bd95a033c8c0b57e87ee2c2e04ad080da99006115616ae03d5fd9f830faa97ec1069b60ff72c397ee961abb50347fb9b31953e0acbd0b545fe34179a768a48e9f88cc0047da683889f04857c4b5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r8}, 0x18)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x58, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8f, 0x0, 0x0, {0x0, r10}})
io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m54.504372004s ago: executing program 32 (id=701):
r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f00006e4000/0x2000)=nil, 0x2000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095000000020000004ed41602d0809d00419e1629f9ee69ca0a647042e16a03f115c01234e0f6e6d418436fdad800b0b63fb07a1645cf8ba551e62be7874fc3951d186d8eb5f3669d40dc9db1c77f14873d7511e3e418e1d84c84014e2e8b90ce421597f7a893c42d8ba9c9ad461da906c9bb6d07b2c33b37713273ac43479bd95a033c8c0b57e87ee2c2e04ad080da99006115616ae03d5fd9f830faa97ec1069b60ff72c397ee961abb50347fb9b31953e0acbd0b545fe34179a768a48e9f88cc0047da683889f04857c4b5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r8}, 0x18)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x58, 0x0, r9, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8f, 0x0, 0x0, {0x0, r10}})
io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m35.406010648s ago: executing program 1 (id=951):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'syzkaller1\x00', &(0x7f0000000a40)=@ethtool_drvinfo={0x3, "5cb4bb75d2a2270818daa01d481d5591890000e5b9554ba2e029a1930c00", "1b4fe6cdfa42f817c42bd4bba023fae174c6c5e1af894affffffffffffffff42", "39f6c09a363c27f764130250199924895052a25a250456b9e1b9413d3e6b1a48", "82406dca40dd8b2da19f2098854e8a301a70544257b7bfbfcc0b1996d668e587", "a8d64afe90a1e2dfceb00b98faafbf706f831fc23f50705c924a9b5e7ba30e76", "faa894f280cb3fae829b4a54", 0x2, 0x0, 0x2, 0x2}})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022050000948a9e46610f30a043cc0ba4f5de42a8f4edddc8d2b7dc5ba1e0847de29f21041309fb79d4"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000006700)={0x4e, &(0x7f0000000100)={0x40, 0x16, 0x5, '\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m32.637977929s ago: executing program 1 (id=965):
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x4000}, 0x10}}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x84081, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r4)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c980)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4)

2m31.620866264s ago: executing program 1 (id=969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe3, 0xb3, &(0x7f00000002c0)="ab6b865b17cbcd0ee58fdfa93e3e9266d4c7048c0fbee7a0c0404e338822b2f7381345a0ae852a8f388e67a6be911bc17cfa08df43ab4e7bec0fa6f6847b5b4901d4d13495ff2ae5ee27939f87a931f4468ab08e3b5b5ffc65e5324ced757ff49c1e3a92c5e7b666a562965c63e4d8d7c3a13aa5e1876966b1b147ced5d256679bd0c1fd0f974d891eba415c693476fb052e82b464b8e0062ff77f2044ba800adaccc2c1d933b3b2e3c367d7a5885fda61729635acc1dcab0f87e633a804a92a842a5955e996ac9a5302907b4d4313ae128f9b731c80415622e5fd2f246dccef6c2d10", &(0x7f0000000400)=""/179, 0x2, 0x0, 0x67, 0x7f, &(0x7f00000004c0)="93bdc69a9bf4bb2c47c7adc12b8f1871e8bc3c735ba54135b9ad93b3454a7ad65a93b172814f47e53506ccfa49d49b14a7a08cbd27013e7e04ff8f5c34492ccc9a776883fd890d1e46401cdbd23052e90229896bc6e6967446196f72425246f2270eda83ec03d3", &(0x7f0000000540)="b9556cb09f25cddfb82ab9725522da979314655a6f25308e6ffde31486095d2fe54c6c158471d79a66b58c9804744f6091cb9225ec25ab43af8b5bb21db30e31bf01ec8e894b9cb12dfcd7118c64d2bef0aea67a39ad88d614e13f6dbb63befbaeaa79f0d6e5e818f31bbbff54e9bcbf333943ec7518c2fa10cfcd16e3543a", 0x6, 0x0, 0xa301}, 0x50)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = dup3(0xffffffffffffffff, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000002440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, 0x0}}], 0x2, 0x4004000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r8, 0x301, 0x20800000, 0x25dfdb7b, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x27, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

2m29.736687308s ago: executing program 1 (id=980):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800000000000000feffffff00", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32], 0x44}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000031423df250900020073797a3100000000080041007369770014003300766972745f77696669300000000000000900020073797a320000800008004100727865001400330073797a5f74756e000000000000000000"], 0xa}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e000000180002"], 0x48}}, 0x0)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000))
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
sendto$inet6(r5, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0)
sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="ebe3a0e9796cfd1647e299f4084bfdba128280b372219d205e81f4a7f71c1926aae1efd7e0053912f398af3f2af0d02078e9e4f0cbb02b2c7998877013e60ebb01918fd5a528f3630509b366a1f81607477f4ce761a0ee29a70239bfba8b3b3cf3b890802c9793e8f99d5192a435f71c15a8998c75d2ead637575442c5e5f38bef1c137dc4ef1fd6d916c9256d27c27324128f78307078a28a99f1e92554f262c41f1112f48ada8f3b3b0d070000049e99683290ab5aa9982b6c18fd5ec56bf43bcbc097a99f05e664e722998ddb32ff0f5ccd3bf6a6d23fd3c88458c0bc0df139d5421a894a78f883a403", 0xeb}], 0x1, 0x0, 0x0, 0x4040044}], 0x1, 0x4000)
recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1}, 0x10041)
r6 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000140))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)

2m28.473757941s ago: executing program 1 (id=989):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
r1 = socket(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r6, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x10000000, 0xffffffff00772d46, 0x0, 0x400, 0x200, 0x0, 0x0, 0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [], {0x10, 0x2}}, 0x24, 0x2)
syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000000740)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17c22, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2c000804}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0xd3a, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x3f, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m28.151833233s ago: executing program 1 (id=991):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x2, &(0x7f0000000000))
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="09b3be99c4b51f6045a46e3cc68921e590deeec0268b7ba14651a48e4f9a9f9591ffa400779befee9f72fb6b4d5d57552ed0d8bf39a2b86e2fe6998bf6513275f16b25c9687ba54e6dd1bcb50edd368577dbe4fa571ea58c7cf897ef33380d83b4c404b2423515c312db84d268e0893d6b3190d2df2745189f3858fb1d4a08bd3006e3dde72ffd6ec66359f21b07040c936004168cc581d37495cd6b9709", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000300)=""/146, &(0x7f0000000100)=0x92)
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
open(0x0, 0xc00, 0x48)

2m12.997408356s ago: executing program 33 (id=991):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x2, &(0x7f0000000000))
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="09b3be99c4b51f6045a46e3cc68921e590deeec0268b7ba14651a48e4f9a9f9591ffa400779befee9f72fb6b4d5d57552ed0d8bf39a2b86e2fe6998bf6513275f16b25c9687ba54e6dd1bcb50edd368577dbe4fa571ea58c7cf897ef33380d83b4c404b2423515c312db84d268e0893d6b3190d2df2745189f3858fb1d4a08bd3006e3dde72ffd6ec66359f21b07040c936004168cc581d37495cd6b9709", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000300)=""/146, &(0x7f0000000100)=0x92)
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
open(0x0, 0xc00, 0x48)

7.704972812s ago: executing program 6 (id=1429):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0)
syz_usb_connect$uac1(0x1, 0x9c, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x80, 0x40, 0xc0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xc}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x7, 0x7, "d8a8"}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x40, "ed6e0e"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x6, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x1, '.'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x0, 0x3, {0x7, 0x25, 0x1, 0x81, 0x8}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0xd3, 0x7, 0xff}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x91, 0xe, 0x0, 0x7f, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fcae71ea4542707d8b254ae96ca7c1ae"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xd, 0xce}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x439}}]})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
sync()
sync()
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) (async)
syz_usb_connect$uac1(0x1, 0x9c, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x80, 0x40, 0xc0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xc}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x7, 0x7, "d8a8"}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x40, "ed6e0e"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x6, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x1, '.'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x0, 0x3, {0x7, 0x25, 0x1, 0x81, 0x8}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0xd3, 0x7, 0xff}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x91, 0xe, 0x0, 0x7f, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fcae71ea4542707d8b254ae96ca7c1ae"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xd, 0xce}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x439}}]}) (async)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) (async)
sync() (async)
sync() (async)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

6.567222689s ago: executing program 0 (id=1433):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f00000018c0)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fe, &(0x7f0000000000)="ff866fd1d1bfd55d1931521e555b85b6aff75905fcb6332116acba04fa627da6d4132f091b3670168c2ad6347176067f80821a38944b23d4bf964918773ab5")
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240))

6.290902307s ago: executing program 0 (id=1434):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6e, <r1=>r0, {0x8000}}, './file0\x00'})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50)
r3 = dup(r0)
r4 = syz_io_uring_setup(0x4de, &(0x7f0000000380)={0x0, 0xb91d, 0x10100}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1})
io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x7fffffffffffffff, 0x1dd423)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)

5.352802532s ago: executing program 0 (id=1439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), 0x0, 0x0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
pipe2(&(0x7f0000000000), 0x4080)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0)
recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0)

5.286342575s ago: executing program 5 (id=1440):
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0)
r6 = syz_pidfd_open(r0, 0x0)
process_madvise(r6, 0x0, 0x0, 0xf, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r7, 0x0, 0x0, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000b40)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x8518, 0x0, 0xffffffff, 0x2, 0x4000000000000000, 0xe, 0xe}})
sendmsg$NFT_BATCH(r8, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

4.580182091s ago: executing program 6 (id=1441):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(r3, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x24, 0x0, 0x43}, 0x9ad0904d10eb83a2)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, 0xfffffffffffffffe, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x4}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x0, 0x2, 0x0)

4.313232031s ago: executing program 5 (id=1444):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x400, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000852}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r2, 0xffff8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x48091}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)

3.499758791s ago: executing program 4 (id=1446):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x8, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x8, 0x0, {0x0, 0x101}, {}, {}, {}, 0x0, 0x40, 0x0, 0x2, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa})
r7 = socket$l2tp6(0xa, 0x2, 0x73)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0xa9) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000004de6ac96e8403b30d745af9270206dc90000b705000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000280)={@remote, 0x1f, r10})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2590], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4) (async)
sendto$inet(r0, &(0x7f0000000480)="8b1b0f3eb22f93fbf7ab232eaffdd3d54ff0555bdac6950d9046a1ce519a8ef7faae57d19ef11ecf1246d4a0dc1bcbe57b4bf9b1d9006dbfcb2218f61b4a13d99012a2b95f3c8ac254a90da25b82d5ae4fda1fa05d5f43bd26823a383f31be6c4c5fa77bde893e8b6885e1e78e7d03191daa34d3bc1563c74ac31cbbc5bc68afd30ebb8e68b349c22cc391f7bc59d09330e36de23db0f8c1b02be1d0e891a2de88a48112f0e2cd924114706d0e1a8a408ff01efc0e1ed1c9a6d8b71ea409218217bf38bd2ac9c21d10a2736cf1", 0xcd, 0x8000, &(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10)

3.431592806s ago: executing program 3 (id=1447):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

3.307697053s ago: executing program 3 (id=1448):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r1, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1800000058000d03000000000000000004000080040003"], 0x18}], 0x1}, 0x40040)

3.303908698s ago: executing program 5 (id=1449):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x1})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
sendto$packet(r6, &(0x7f0000000180)="ca5be29961bcfb6a05ba9f9416fdcd2ccc7879c6adf8b3b12d658080ac8b2029838f23edd383022c45752c9d765c800999c0ccb422cc262e32df3fdf2fb7ef4d4e8b9d86a7c018b20000000000", 0x4d, 0x4, 0x0, 0x0) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='syscall\x00')
lseek(r7, 0x9, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000300)) (async)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, 0x0) (async)
syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000008aaaa480008050301f3000000000000"], 0x0) (async)
setgroups(0x0, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async)
setregid(0xffffffffffffffff, 0x0) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0xc, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, r1, 0x0, r8})

3.22595906s ago: executing program 4 (id=1450):
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)="7d8f064f4916381dde1325bffaa0c21c9603039d01c0b71129291d92abc3859683692528f6181bb3fa4acf8d13f2f4014ca8fe60e5d3a94d7d884fac534823c13e091d30196341f1496f12b5e3d03572fad40966823af2e80665d932299f099edf6342b454576b053e8c441c774b2f76bf15d149dd9bf6af137637bc17491f6087297beecb53f6644abb2af37dd71d4aadbf73994f89a5bcc3faff62ba4238fca2b007aebcf943cb0923fda22d83d377c498e1db5813777ba70ceaaafaf56176e4c50a9fec236febe5b778ef5623d0d4bc0c4ece7f957541a15f4edb10b611e2cb74ab5de5cf03a5bfd391", 0xeb}], 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0xfffffff9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x0)

3.225073243s ago: executing program 3 (id=1451):
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async)
r5 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0) (async)
r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async)
r7 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xf, 0x80102)
write$snddsp(r7, &(0x7f0000000340)="552bef14b6dd6e7e437bf9f1a83f64867a1ddaca9cfc21e9c2f857d129e37228ca95f51890bc28b6d7f3a606a8ab15a45a613551a82d5eff3ddcbb946a81545ab0e6bd17cd16afdbe27aedde0289eb347dbaccfb52fa9f1273c04815e62461784a2f25b627b971777621d1c922b95ba91db707c5f3", 0x75) (async)
finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

3.149448056s ago: executing program 5 (id=1452):
r0 = socket$inet6(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xc0000000, @private1, 0x1000}, 0x1c)
shutdown(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c)
close(r0)
socket$inet6(0xa, 0x5, 0x84) (async)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xc0000000, @private1, 0x1000}, 0x1c) (async)
shutdown(r0, 0x0) (async)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async)
sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) (async)
close(r0) (async)

3.123534371s ago: executing program 4 (id=1453):
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0)
r6 = syz_pidfd_open(r0, 0x0)
process_madvise(r6, 0x0, 0x0, 0xf, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000b40)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x8518, 0x0, 0xffffffff, 0x2, 0x4000000000000000, 0xe, 0xe}})
sendmsg$NFT_BATCH(r8, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

2.266015525s ago: executing program 5 (id=1454):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x78)
close(r0)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
ioctl$COMEDI_SETRSUBD(r0, 0x6410)

2.263271812s ago: executing program 0 (id=1455):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1})
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="00000000a2f64710f73fa97b4056a5da24f8754506b8e68945d5477ac9d95afe76fa509089699af759759f1bc3b9d91b6217fc90edd2cae74539463bb3d6dc8baba664104986be073797c8750e134233b0847665676aeb7196c1cad7906c3f5cea6b202784f13fff5647e6d56c6ee3d05261c4326bae14d35c2592e26c111ecfb8eea566e4b5010b6893022451259fd1c09f578a1db28cd039e6163a3ffd3e51c60ebe64158d7d5b56", @ANYRES16, @ANYBLOB="000227bd7000fcdbdf250400000005000500040000000800040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
socket(0x10, 0x80002, 0x0)

2.188041675s ago: executing program 5 (id=1456):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x4}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r3, 0xbffff000, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
syz_clone(0x2020100, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x2)
sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x7, 0x4)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x80e00)
ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000080)={0x0, 0xfffeffff, 0x2, 0x8001, 0x2000008, 0x3, 0x1})
socket$netlink(0x10, 0x3, 0x8000000004)
r7 = memfd_secret(0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r8, r7, 0x2e, 0x4608, @val=@netkit}, 0x1c)

2.123073632s ago: executing program 4 (id=1457):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c851"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ']'}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x90, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x61, 0x8, "31f0bb6a257fa500d70f0c3909b44e4c1b399a8f1557af663161137fb0e808c2bb606df397eac66c823eb97bfbb7a034969c92f51cddaa387cb22ccfc7dc6c7909c7c6ab62bcfa9d7fd3d4f49a2ec016c9dedc9143c1efacfc88ab8234"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x100, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x22, 0xc, "2bc6d5928ba6c587413c0f92c610e4288aa077f8eaa5105d47a2bff5a523"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x1bc}, 0x1, 0x0, 0x0, 0xc001}, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c000080"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x30)

1.950951442s ago: executing program 4 (id=1458):
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@workdir}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.804567338s ago: executing program 4 (id=1459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)

1.760919004s ago: executing program 6 (id=1460):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7)
timer_create(0x1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7})

1.617888637s ago: executing program 3 (id=1461):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000180))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.474433696s ago: executing program 3 (id=1462):
setpriority(0x1, 0x0, 0x0)
r0 = gettid()
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x4, &(0x7f0000000040)=""/106)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_gettime(r2, &(0x7f0000000000))
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.053231426s ago: executing program 0 (id=1463):
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffd})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000280)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, &(0x7f0000000340)}, 0x2}, {{&(0x7f0000000440)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)=""/81, 0x51}, {&(0x7f0000000640)=""/7, 0x7}], 0x5, &(0x7f0000000d40)=""/191, 0xbf}, 0x5}], 0x2, 0x122, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000540)="cad78f87fb0f6109f24d1edd828d5a8103c213b70de9767ff2f893d294e834aaa24e3c0fe7332cb94770838ff4390e72ebf6d5a96e8d927110045705756fff760ce41cbcb713205e493efe93bdc35557e5b50dc62f98848eb712ee245f8d0eea1dbaedb8cc9a05504033086c0642289e92be8109d9c1858407d4e075345be995ea910fd2158c0b17a53f376954bc729e8d95f33eea9a88374e16afa36657280de194a86730008b3466008261c7ee8c27d30eb02a40ec36ca6b96a499401ae63dd35ecad164f8971926806422a3e9e3dd7d8cb0987573188a77fa21302475c7cc1ff067fd4e6de0", &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000000000400000001b0a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a30"], 0xd0}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000000000400000001b0a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a30"], 0xd0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

680.927981ms ago: executing program 6 (id=1464):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0), 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) (async)
write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000400)={0x4, &(0x7f0000000380)=[{}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]})
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="3f000000010005", 0x7)
r5 = fsopen(&(0x7f0000000300)='reiserfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000340)='async\x00', 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

467.298476ms ago: executing program 6 (id=1465):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff7}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xe}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}}, 0x4044000)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x3}})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, &(0x7f0000000040))

233.441487ms ago: executing program 6 (id=1466):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201070000000020030430600000000000010902240001000000000904000001030000000921000000012202000905810300"], 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x0)
ptrace$setregs(0xd, r5, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29")
ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={0x0, 0x30})
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1b}}, 0x26)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0xb, 0x81, 0x9, 0x7, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0xa, 0xf7, 0x7}})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r10, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r9, @ANYBLOB="2d799dd0d147b5ab38c0915ce2b3d7b436e4aceb59babbb6ccb43fc518ad4e6d2a9f42c560878bb0d0814166eab89f47145d0c32d894a82d489f7b28df1c03999deeb05637c35f74fbb3090fb64b03007c0e0000dc4516145cacb02b6a96eec4c80db9d6012167cf79977ae30a7841e7a57b6688602cadfc3f98d428257943d04f3032b298aab9750101f60e28fa6528f599ae4e17e38afb3c15070ed98ff7ff96cce0f9", @ANYRESDEC=r0, @ANYRES8=r2, @ANYRES64=r4, @ANYRES16=r9], 0x15)

1.248298ms ago: executing program 3 (id=1467):
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2})
creat(&(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0xfffffffff12bd390, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c706f73697861636c2c00a9bd010dce6c04e29163580f0d5c6d0321d0a9bb79aff7521fac7de58765ac6ac0e58398b93a8f3acf0c74f291c382030a771b6a10f6421362c7d1fc810ce43c752ac38d903d8ea3afad10afd1bece2d656e6ef07d33bc211dc715b6709d37b9c3ce3989ed4e0bf344fad2e2e681c5231e8806531e16d57badba04636e2204b175e93983bf8e0940d2aabcf0bf9b3cb6abf08546d5da6362c7a354aa8f31ac8fd3"])

0s ago: executing program 0 (id=1468):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x98, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x98}}, 0x24000040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0xa0, 0xbbba, 0xfffffffe, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x8}, {0x1000001, 0x9, 0x8}, 0x0, 0x3f0, 0x1, 0x100003, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9})

kernel console output (not intermixed with test programs):

er after parsing attributes in process `syz.1.969'.
[  423.165433][T10276] netlink: 'syz.4.981': attribute type 10 has an invalid length.
[  423.180202][T10276] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  423.190196][T10279] netlink: 'syz.3.979': attribute type 10 has an invalid length.
[  423.201610][T10279] veth0_vlan: left promiscuous mode
[  423.212445][T10279] veth0_vlan: entered promiscuous mode
[  423.224558][T10279] team0: Device veth0_vlan failed to register rx_handler
[  423.277761][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.579446][T10292] SELinux:  policydb magic number 0x5890328c does not match expected magic number 0xf97cff8c
[  423.592242][T10292] SELinux: failed to load policy
[  423.631722][   T30] audit: type=1400 audit(1757524108.107:887): avc:  denied  { ioctl } for  pid=10288 comm="syz.5.984" path="socket:[27010]" dev="sockfs" ino=27010 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  423.840654][   T30] audit: type=1400 audit(1757524108.297:888): avc:  denied  { remount } for  pid=10290 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  424.632117][   T30] audit: type=1400 audit(1757524109.077:889): avc:  denied  { setattr } for  pid=5846 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  425.702903][   T30] audit: type=1400 audit(1757524110.187:890): avc:  denied  { write } for  pid=10326 comm="syz.5.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  425.813758][T10336] input: syz0 as /devices/virtual/input/input15
[  425.835331][   T30] audit: type=1400 audit(1757524110.317:891): avc:  denied  { setopt } for  pid=10326 comm="syz.5.992" lport=38579 faddr=::ffff:100.1.1.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  425.890100][T10337] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  425.905632][T10337] netlink: 'syz.0.994': attribute type 2 has an invalid length.
[  425.933686][T10340] netlink: 260 bytes leftover after parsing attributes in process `syz.4.995'.
[  425.947537][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'.
[  426.020369][T10341] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  426.575915][ T5965] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  426.735971][ T5965] usb 4-1: Using ep0 maxpacket: 16
[  426.754336][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  426.817792][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  426.879131][ T5965] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  426.982264][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.991547][ T5965] usb 4-1: Product: syz
[  426.999075][ T5965] usb 4-1: Manufacturer: syz
[  427.005975][ T5965] usb 4-1: SerialNumber: syz
[  427.033292][ T5965] usb 4-1: config 0 descriptor??
[  427.052061][ T5965] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  427.069122][ T5965] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  427.481217][   T30] audit: type=1400 audit(1757524111.967:892): avc:  denied  { append } for  pid=10367 comm="syz.0.1003" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  427.927268][ T5965] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  427.950833][ T5965] em28xx 4-1:0.0: Config register raw data: 0x41
[  428.378499][   T30] audit: type=1400 audit(1757524112.867:893): avc:  denied  { ioctl } for  pid=10381 comm="syz.4.1007" path="socket:[26249]" dev="sockfs" ino=26249 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  428.406191][ T5913] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  428.741517][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'.
[  429.060150][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  429.107088][   T30] audit: type=1400 audit(1757524113.577:894): avc:  denied  { name_connect } for  pid=10375 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  429.244632][  T978] usb 4-1: USB disconnect, device number 29
[  429.280309][   T30] audit: type=1400 audit(1757524113.587:895): avc:  denied  { write } for  pid=10375 comm="syz.0.1005" lport=55735 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  429.915051][  T978] em28xx 4-1:0.0: Disconnecting em28xx
[  430.009475][  T978] em28xx 4-1:0.0: Freeing device
[  430.256815][   T30] audit: type=1400 audit(1757524114.747:896): avc:  denied  { write } for  pid=10395 comm="syz.3.1011" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  430.442645][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short
[  430.486728][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -71
[  430.504538][ T5913] usb 1-1: can't read configurations, error -71
[  430.747616][ T5993] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  430.826407][  T978] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  430.905867][ T5993] usb 5-1: Using ep0 maxpacket: 32
[  430.918288][ T5993] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  430.928360][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.938640][ T5993] usb 5-1: config 0 descriptor??
[  431.005756][  T978] usb 4-1: Using ep0 maxpacket: 16
[  431.012680][  T978] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  431.029018][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.048017][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'.
[  431.073637][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.083921][  T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  431.097348][  T978] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  431.107314][  T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.130525][  T978] usb 4-1: config 0 descriptor??
[  431.143300][   T30] audit: type=1400 audit(1757524115.627:897): avc:  denied  { ioctl } for  pid=10412 comm="syz.0.1016" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  431.155341][  T978] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16
[  431.183171][ T5993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  431.211667][ T5993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  431.233024][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.245121][ T5993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  431.258040][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.266301][ T5993] usb 5-1: media controller created
[  431.275643][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.298516][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  431.309293][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.325172][ T7496] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.357455][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.389813][T10403] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.400229][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.415438][ T5205] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  431.449344][T10415] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1010'.
[  431.459991][T10415] 0�X��D: renamed from macvtap0 (while UP)
[  431.474546][T10415] 0�X��D: entered allmulticast mode
[  431.480368][T10415] veth0_macvtap: entered allmulticast mode
[  431.487017][T10415] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  431.592801][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.601411][ T5913] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  431.610373][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.745745][ T5913] usb 1-1: device descriptor read/64, error -71
[  431.856040][ T5913] usb usb1-port1: attempt power cycle
[  432.205851][ T5913] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  432.236728][ T5913] usb 1-1: device descriptor read/8, error -71
[  432.295917][ T5965] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  432.455893][ T5965] usb 6-1: Using ep0 maxpacket: 16
[  432.464995][ T5965] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  432.476020][ T5913] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  432.484724][ T5965] usb 6-1: config 0 has no interface number 0
[  432.491770][ T5965] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  432.507826][ T5913] usb 1-1: device descriptor read/8, error -71
[  432.509650][ T5965] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  432.523961][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.534105][ T5965] usb 6-1: Product: syz
[  432.542397][ T5965] usb 6-1: Manufacturer: syz
[  432.549184][ T5965] usb 6-1: SerialNumber: syz
[  432.559339][ T5965] usb 6-1: config 0 descriptor??
[  432.629656][ T5913] usb usb1-port1: unable to enumerate USB device
[  432.765948][ T5913] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  432.916009][ T5913] usb 1-1: device descriptor read/64, error -71
[  433.165746][ T5913] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  433.189219][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.203172][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.229320][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.240428][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.251095][ T5965] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  433.277918][ T5965] usb 6-1: USB disconnect, device number 5
[  433.306086][ T5913] usb 1-1: device descriptor read/64, error -71
[  433.426930][ T5913] usb usb1-port1: attempt power cycle
[  433.456802][ T5993] az6027: usb out operation failed. (-110)
[  433.474725][ T5993] az6027: usb out operation failed. (-32)
[  433.481957][ T5993] stb0899_attach: Driver disabled by Kconfig
[  433.492072][ T5993] az6027: no front-end attached
[  433.492072][ T5993] 
[  433.504713][ T5993] az6027: usb out operation failed. (-32)
[  433.512621][ T5993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  433.523514][  T978] usb 4-1: USB disconnect, device number 30
[  433.554380][ T5993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  433.594855][ T5993] dvb-usb: schedule remote query interval to 400 msecs.
[  433.603601][ T5993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  433.686743][   T30] audit: type=1400 audit(1757524118.177:898): avc:  denied  { map } for  pid=10424 comm="syz.3.1019" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  433.778421][ T5913] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  433.826045][ T5913] usb 1-1: device descriptor read/8, error -71
[  434.065761][ T5913] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  434.087604][ T5913] usb 1-1: device descriptor read/8, error -71
[  434.196131][ T5993] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  434.199913][ T5913] usb usb1-port1: unable to enumerate USB device
[  434.219028][   T30] audit: type=1400 audit(1757524118.707:899): avc:  denied  { append } for  pid=10437 comm="syz.0.1022" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  434.385138][   T30] audit: type=1400 audit(1757524118.757:900): avc:  denied  { ioctl } for  pid=10437 comm="syz.0.1022" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  434.577347][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1023'.
[  434.918375][  T978] usb 5-1: USB disconnect, device number 44
[  434.963462][   T30] audit: type=1400 audit(1757524119.437:901): avc:  denied  { ioctl } for  pid=10437 comm="syz.0.1022" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  435.009214][T10442] lo speed is unknown, defaulting to 1000
[  435.213547][  T978] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  435.366262][T10454] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1025'.
[  435.799460][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1027'.
[  435.824543][T10454] syz.3.1025 (10454) used greatest stack depth: 18504 bytes left
[  435.870770][   T30] audit: type=1400 audit(1757524120.337:902): avc:  denied  { setopt } for  pid=10461 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  436.240870][   T30] audit: type=1400 audit(1757524120.717:903): avc:  denied  { map } for  pid=10469 comm="syz.4.1029" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  436.366679][T10470] overlayfs: missing 'lowerdir'
[  436.985807][ T5993] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  437.398456][T10483] ucma_write: process 213 (syz.5.1033) changed security contexts after opening file descriptor, this is not allowed.
[  437.419465][   T30] audit: type=1800 audit(1757524121.907:904): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1034" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  437.521524][ T5993] usb 4-1: Using ep0 maxpacket: 8
[  437.571795][ T5993] usb 4-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00
[  437.611216][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.642702][ T5993] usb 4-1: config 0 descriptor??
[  438.085304][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.257722][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.312946][ T5913] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  438.508395][   T30] audit: type=1326 audit(1757524122.997:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.5.1038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0afb8eba9 code=0x0
[  438.610586][   T30] audit: type=1400 audit(1757524123.097:906): avc:  denied  { ioctl } for  pid=10479 comm="syz.3.1032" path="socket:[27460]" dev="sockfs" ino=27460 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  438.683190][ T5993] asus 0003:0B05:1837.000C: unknown main item tag 0x0
[  438.828768][ T5993] asus 0003:0B05:1837.000C: unknown main item tag 0x0
[  438.963703][ T5993] asus 0003:0B05:1837.000C: item fetching failed at offset 4/5
[  439.005799][ T5913] usb 5-1: Using ep0 maxpacket: 32
[  439.012293][ T5993] asus 0003:0B05:1837.000C: Asus hid parse failed: -22
[  439.016912][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0
[  439.034963][ T5993] asus 0003:0B05:1837.000C: probe with driver asus failed with error -22
[  439.035923][ T5913] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  439.086669][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.107340][ T5913] usb 5-1: config 0 descriptor??
[  439.568195][T10509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10509 comm=syz.0.1039
[  439.635960][ T5858] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  439.769165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  439.775694][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  439.778373][T10515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  439.797234][ T5858] usb 6-1: config 5 has an invalid interface number: 123 but max is 0
[  439.811706][ T5858] usb 6-1: config 5 has no interface number 0
[  439.825864][ T5858] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  439.839991][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.857467][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.954143][ T5858] usb 6-1: config 5 interface 123 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  440.057480][ T5993] usb 4-1: USB disconnect, device number 31
[  440.151039][ T5858] usb 6-1: config 5 interface 123 has no altsetting 0
[  440.270631][ T5858] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  440.329569][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.355134][ T5858] usb 6-1: Product: syz
[  440.373926][ T5858] usb 6-1: Manufacturer: syz
[  440.388484][ T5913] usb 5-1: string descriptor 0 read error: -71
[  440.392218][ T5858] usb 6-1: SerialNumber: syz
[  440.400936][ T5913] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  440.430884][ T5913] gspca_vc032x: reg_r err -71
[  440.441107][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.454953][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.471933][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.491891][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.508876][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.629937][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.656869][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.853329][ T9895] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  440.862731][ T9895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  440.872389][ T9895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  440.880171][ T9895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  440.887853][ T9895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  440.931167][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  440.934909][T10526] lo speed is unknown, defaulting to 1000
[  441.001712][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.014430][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.030594][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.043616][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.058354][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.072329][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.112293][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.129642][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.152444][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.158545][ T5913] gspca_vc032x: I2c Bus Busy Wait 00
[  441.163963][ T5913] gspca_vc032x: Unknown sensor...
[  441.169569][ T5913] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  441.192304][ T5913] usb 5-1: USB disconnect, device number 45
[  441.258136][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.440475][T10526] chnl_net:caif_netlink_parms(): no params data found
[  441.492393][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.906909][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.975472][ T5858] comedi comedi5: Wrong number of endpoints
[  441.982368][ T5993] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  442.010526][ T5858] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device.
[  442.023757][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.046643][ T5858] usb 6-1: USB disconnect, device number 7
[  442.163889][ T5993] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  442.199422][ T5993] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  442.210272][ T5993] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  442.224715][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.239645][T10530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  442.257406][ T5993] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  442.282719][T10526] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.300563][T10526] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.309980][T10526] bridge_slave_0: entered allmulticast mode
[  442.336710][T10526] bridge_slave_0: entered promiscuous mode
[  442.370789][T10526] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.379132][T10526] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.388136][T10526] bridge_slave_1: entered allmulticast mode
[  442.394986][T10526] bridge_slave_1: entered promiscuous mode
[  442.415760][  T978] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  442.453383][T10526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.462651][ T5993] usb 1-1: USB disconnect, device number 66
[  442.514359][T10526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.529205][   T49] bridge_slave_1: left allmulticast mode
[  442.535120][   T49] bridge_slave_1: left promiscuous mode
[  442.541313][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.551043][   T49] bridge_slave_0: left allmulticast mode
[  442.557315][   T49] bridge_slave_0: left promiscuous mode
[  442.563112][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.576074][  T978] usb 5-1: Using ep0 maxpacket: 32
[  442.589065][  T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.614409][  T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.641992][  T978] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  442.671036][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.702984][  T978] usb 5-1: config 0 descriptor??
[  442.710688][  T978] hub 5-1:0.0: USB hub found
[  442.932045][  T978] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  442.967293][ T5860] Bluetooth: hci5: command tx timeout
[  442.974434][   T30] audit: type=1400 audit(1757524127.457:907): avc:  denied  { ioctl } for  pid=10553 comm="syz.5.1051" path="socket:[27773]" dev="sockfs" ino=27773 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  443.117877][   T30] audit: type=1400 audit(1757524127.607:908): avc:  denied  { write } for  pid=10551 comm="syz.3.1050" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  443.150489][  T978] usbhid 5-1:0.0: can't add hid device: -71
[  443.156799][  T978] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  443.198167][  T978] usb 5-1: USB disconnect, device number 46
[  443.307240][   T49] bond0 (unregistering): Released all slaves
[  443.641929][T10563] ubi31: attaching mtd0
[  443.678560][T10563] ubi31: scanning is finished
[  443.683342][T10563] ubi31: empty MTD device detected
[  443.937118][   T30] audit: type=1400 audit(1757524128.287:909): avc:  denied  { create } for  pid=10560 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  443.962735][   T30] audit: type=1400 audit(1757524128.417:910): avc:  denied  { sys_admin } for  pid=10560 comm="syz.0.1053" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  444.069815][T10563] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  444.077504][T10563] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  444.084778][T10563] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  444.091875][T10563] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  444.099387][T10563] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  444.106279][T10563] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  444.114319][T10563] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 54939050
[  444.124247][T10563] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  444.135854][T10566] ubi31: background thread "ubi_bgt31d" started, PID 10566
[  444.261814][T10526] team0: Port device team_slave_0 added
[  444.309653][T10526] team0: Port device team_slave_1 added
[  444.319150][   T49] tipc: Left network mode
[  444.696080][T10526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.725904][T10526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.821407][T10526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.898250][T10526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.940946][T10526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.046068][ T5860] Bluetooth: hci5: command tx timeout
[  445.057773][T10526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.514650][T10526] hsr_slave_0: entered promiscuous mode
[  445.552967][T10526] hsr_slave_1: entered promiscuous mode
[  445.586444][T10526] debugfs: 'hsr0' already exists in 'hsr'
[  445.615051][T10526] Cannot create hsr debugfs directory
[  446.220909][T10594] overlayfs: failed to resolve '/ĵ��y����v�1����<�O�1�"
�׫����y��s���(f�	rDb��>w��S�4sѩ�$��аݷ�T���o���O%�V�sb���{u�&�h
5cT��a��)': -2
[  446.542308][   T49] hsr_slave_0: left promiscuous mode
[  446.557848][   T49] hsr_slave_1: left promiscuous mode
[  446.596487][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.785825][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.826983][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.972609][T10614] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  446.979328][T10614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  446.988031][T10614] vhci_hcd vhci_hcd.0: Device attached
[  446.996552][T10615] usbip_core: unknown command
[  447.001240][T10615] vhci_hcd: unknown pdu 8
[  447.005556][T10615] usbip_core: unknown command
[  447.040573][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.131049][ T5860] Bluetooth: hci5: command tx timeout
[  447.173805][ T1324] vhci_hcd: stop threads
[  447.186045][  T978] vhci_hcd: vhci_device speed not set
[  447.221478][ T1324] vhci_hcd: release socket
[  447.282379][  T978] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  447.393361][   T49] veth1_macvtap: left promiscuous mode
[  447.399937][   T49] veth0_macvtap: left promiscuous mode
[  447.400228][ T1324] vhci_hcd: disconnect device
[  447.405564][   T49] veth1_vlan: left promiscuous mode
[  447.416271][   T49] veth0_vlan: left promiscuous mode
[  449.162189][   T49] team0 (unregistering): Port device team_slave_1 removed
[  449.205854][ T5860] Bluetooth: hci5: command tx timeout
[  449.217429][   T49] team0 (unregistering): Port device team_slave_0 removed
[  449.732194][T10630] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.750429][T10630] bridge_slave_1: left allmulticast mode
[  449.764692][T10630] bridge_slave_1: left promiscuous mode
[  449.785970][T10630] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.830817][T10630] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  449.949225][T10633] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  450.026018][T10633] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  450.032122][T10633] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  450.155385][T10633] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  450.265806][T10633] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  450.380883][T10633] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  450.551632][T10526] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  450.601707][T10652] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1067'.
[  450.908677][T10526] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  451.386170][T10526] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  451.580275][T10526] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  452.005966][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout
[  452.085896][ T5860] Bluetooth: hci4: command 0x040f tx timeout
[  452.093433][ T9895] Bluetooth: hci2: command 0x0c1a tx timeout
[  452.168364][ T9895] Bluetooth: hci5: command 0x0c1a tx timeout
[  452.462756][T10526] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.555869][  T978] vhci_hcd: vhci_device speed not set
[  452.562094][T10526] 8021q: adding VLAN 0 to HW filter on device team0
[  452.618628][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.625806][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.633408][ T5858] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  452.749815][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.756942][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.905901][ T5858] usb 4-1: Using ep0 maxpacket: 8
[  453.006342][ T5858] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  453.009042][T10526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.042314][ T5858] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  453.109869][ T5858] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  453.186773][ T5858] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  453.319387][ T5858] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  453.361977][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.420074][T10526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.648178][ T5858] usb 4-1: GET_CAPABILITIES returned 0
[  453.719096][ T5858] usbtmc 4-1:16.0: can't read capabilities
[  453.853121][ T5858] usb 4-1: USB disconnect, device number 32
[  453.866027][ T5933] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  453.915341][T10725] overlayfs: missing 'lowerdir'
[  453.947064][T10726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10726 comm=syz.5.1077
[  454.055873][ T5933] usb 5-1: Using ep0 maxpacket: 8
[  454.068157][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.207529][  T978] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  454.223751][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  454.246079][ T9895] Bluetooth: hci5: command 0x0c1a tx timeout
[  454.261736][ T5933] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  454.376105][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.454727][ T5933] usb 5-1: Product: syz
[  454.459892][ T5933] usb 5-1: Manufacturer: syz
[  454.464566][ T5933] usb 5-1: SerialNumber: syz
[  454.482315][  T978] usb 6-1: unable to get BOS descriptor or descriptor too short
[  454.497065][T10526] veth0_vlan: entered promiscuous mode
[  454.497094][ T5933] usb 5-1: config 0 descriptor??
[  454.518683][  T978] usb 6-1: config 10 has an invalid interface number: 41 but max is 0
[  454.530942][T10526] veth1_vlan: entered promiscuous mode
[  454.547033][  T978] usb 6-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  454.563913][ T5933] radioshark 5-1:0.0: Invalid radioSHARK device
[  454.574881][  T978] usb 6-1: config 10 has no interface number 0
[  454.581808][ T5933] radioshark 5-1:0.0: probe with driver radioshark failed with error -22
[  454.592468][  T978] usb 6-1: config 10 interface 41 has no altsetting 0
[  454.601723][ T5933] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  454.610997][  T978] usb 6-1: language id specifier not provided by device, defaulting to English
[  454.663525][  T978] usb 6-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=56.29
[  454.679242][  T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.687640][  T978] usb 6-1: Product: 쏾尮験羝㌪䑾甮⠇ቼ
[  454.694450][  T978] usb 6-1: SerialNumber: syz
[  454.724718][T10526] veth0_macvtap: entered promiscuous mode
[  454.752016][T10526] veth1_macvtap: entered promiscuous mode
[  454.776798][ T5965] usb 5-1: USB disconnect, device number 47
[  454.842709][T10526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.857866][T10730] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  454.866918][T10730] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  454.890335][T10526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  454.898522][T10730] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  454.904892][T10730] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  454.929235][  T978] usb 6-1: Found UVC 0.00 device 쏾尮験羝㌪䑾甮⠇ቼ (0499:101b)
[  455.000312][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.006697][  T978] usb 6-1: No valid video chain found.
[  455.047040][  T978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  455.101045][  T978] snd-usb-audio 6-1:10.41: probe with driver snd-usb-audio failed with error -2
[  455.190523][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.200116][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.204328][  T978] usb 6-1: USB disconnect, device number 8
[  455.229149][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.296007][T10755] erofs (device nbd0): cannot find valid erofs superblock
[  455.602460][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:10.41/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  455.741227][ T5933] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  455.764001][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.789805][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.803389][T10759] dlm: plock device version mismatch: kernel (1.2.0), user (1.45.0)
[  455.914867][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.923494][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.057535][T10765] vlan3: entered promiscuous mode
[  456.085911][ T9895] Bluetooth: hci3: command 0x0c1a tx timeout
[  456.110950][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.148621][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  456.165350][ T5933] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  456.174873][T10765] dummy0: entered promiscuous mode
[  456.449141][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  456.457897][T10765] vlan3: entered allmulticast mode
[  456.479807][ T5933] usb 4-1: SerialNumber: syz
[  456.493340][T10765] dummy0: entered allmulticast mode
[  456.825316][T10765] team0: Port device vlan3 added
[  456.875903][T10751] trusted_key: encrypted_key: insufficient parameters specified
[  456.895854][ T9895] Bluetooth: hci2: command 0x0c1a tx timeout
[  456.920067][ T5933] usb 4-1: 0:2 : does not exist
[  456.938768][ T5933] usb 4-1: USB disconnect, device number 33
[  456.965943][ T9895] Bluetooth: hci5: command 0x0c1a tx timeout
[  456.970839][ T5860] Bluetooth: hci4: command 0x040f tx timeout
[  457.027477][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  457.860591][T10786] loop6: detected capacity change from 0 to 2560
[  457.900813][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.100590][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.113811][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.144395][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.278135][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.345581][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1087'.
[  458.616795][ T5965] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  458.637611][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.656033][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.673031][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.694245][T10786] ldm_validate_partition_table(): Disk read failed.
[  458.709899][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.733099][T10786] Buffer I/O error on dev loop6, logical block 0, async page read
[  458.741343][T10786] Dev loop6: unable to read RDB block 0
[  458.750851][T10786]  loop6: unable to read partition table
[  458.757322][T10786] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  458.786115][ T5965] usb 5-1: device descriptor read/64, error -71
[  458.896948][ T5858] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  459.128158][ T5965] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  459.632708][ T5858] usb 6-1: Using ep0 maxpacket: 16
[  459.666918][ T5965] usb 5-1: device descriptor read/64, error -71
[  459.716391][ T5858] usb 6-1: device descriptor read/all, error -71
[  459.772552][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'.
[  459.782796][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'.
[  459.876187][ T5965] usb usb5-port1: attempt power cycle
[  460.023483][T10815] netlink: 'syz.5.1091': attribute type 10 has an invalid length.
[  460.226016][ T5965] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  460.336055][ T5965] usb 5-1: device descriptor read/8, error -71
[  460.575767][ T5965] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  460.802627][ T5965] usb 5-1: device descriptor read/8, error -71
[  460.812517][T10819] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1093'.
[  460.968595][ T5965] usb usb5-port1: unable to enumerate USB device
[  461.133037][T10828] netlink: 'syz.5.1094': attribute type 30 has an invalid length.
[  461.414402][T10833] erofs (device nbd4): cannot find valid erofs superblock
[  461.783689][   T30] audit: type=1400 audit(1757524146.267:911): avc:  denied  { mounton } for  pid=10820 comm="syz.5.1094" path="/proc/259/task" dev="proc" ino=28319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  461.980940][   T30] audit: type=1400 audit(1757524146.417:912): avc:  denied  { setattr } for  pid=10835 comm="syz.0.1096" name="anycast6" dev="proc" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  462.277201][T10839] IPVS: length: 75 != 8
[  462.642994][T10847] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  462.753565][  T978] IPVS: starting estimator thread 0...
[  462.851206][   T30] audit: type=1400 audit(1757524147.337:913): avc:  denied  { bind } for  pid=10843 comm="syz.6.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  463.046388][T10849] IPVS: using max 44 ests per chain, 105600 per kthread
[  463.388602][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1099'.
[  463.891176][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  464.072138][   T10] usb 4-1: config 0 has no interfaces?
[  464.081846][   T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  464.091429][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.101411][   T10] usb 4-1: Product: syz
[  464.184164][   T10] usb 4-1: Manufacturer: syz
[  464.211881][   T10] usb 4-1: SerialNumber: syz
[  464.240553][   T10] usb 4-1: config 0 descriptor??
[  464.295835][ T5933] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  464.935883][ T5933] usb 7-1: device descriptor read/64, error -71
[  465.316961][ T5933] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  465.756103][T10887] tipc: Trying to set illegal importance in message
[  465.949882][ T5933] usb 7-1: device descriptor read/64, error -71
[  466.086515][ T5933] usb usb7-port1: attempt power cycle
[  466.150027][   T30] audit: type=1400 audit(1757524150.637:914): avc:  denied  { read } for  pid=10888 comm="syz.4.1108" path="socket:[28424]" dev="sockfs" ino=28424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  466.327351][T10895] kvm: kvm [10893]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030
[  466.443434][   T10] usb 4-1: USB disconnect, device number 34
[  466.455808][ T5933] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  466.486642][ T5933] usb 7-1: device descriptor read/8, error -71
[  466.804905][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'.
[  466.816413][T10903] chnl_net:caif_netlink_parms(): no params data found
[  467.154093][ T5933] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  467.452470][ T5933] usb 7-1: device descriptor read/8, error -71
[  467.575952][ T5933] usb usb7-port1: unable to enumerate USB device
[  468.114351][T10917] FAULT_INJECTION: forcing a failure.
[  468.114351][T10917] name failslab, interval 1, probability 0, space 0, times 0
[  468.198240][T10917] CPU: 1 UID: 0 PID: 10917 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT(full) 
[  468.198265][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  468.198272][T10917] Call Trace:
[  468.198276][T10917]  <TASK>
[  468.198281][T10917]  dump_stack_lvl+0x16c/0x1f0
[  468.198301][T10917]  should_fail_ex+0x512/0x640
[  468.198315][T10917]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  468.198329][T10917]  should_failslab+0xc2/0x120
[  468.198341][T10917]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  468.198352][T10917]  ? __alloc_skb+0x2b2/0x380
[  468.198366][T10917]  __alloc_skb+0x2b2/0x380
[  468.198377][T10917]  ? __pfx___alloc_skb+0x10/0x10
[  468.198389][T10917]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  468.198407][T10917]  netlink_alloc_large_skb+0x69/0x130
[  468.198421][T10917]  netlink_sendmsg+0x6a1/0xdd0
[  468.198437][T10917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.198455][T10917]  ____sys_sendmsg+0xa98/0xc70
[  468.198473][T10917]  ? copy_msghdr_from_user+0x10a/0x160
[  468.198486][T10917]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.198508][T10917]  ___sys_sendmsg+0x134/0x1d0
[  468.198521][T10917]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.198552][T10917]  __sys_sendmsg+0x16d/0x220
[  468.198565][T10917]  ? __pfx___sys_sendmsg+0x10/0x10
[  468.198586][T10917]  do_syscall_64+0xcd/0x4c0
[  468.198601][T10917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.198613][T10917] RIP: 0033:0x7fd055f8eba9
[  468.198621][T10917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.198632][T10917] RSP: 002b:00007fd056de4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.198642][T10917] RAX: ffffffffffffffda RBX: 00007fd0561d5fa0 RCX: 00007fd055f8eba9
[  468.198649][T10917] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  468.198655][T10917] RBP: 00007fd056de4090 R08: 0000000000000000 R09: 0000000000000000
[  468.198661][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.198667][T10917] R13: 00007fd0561d6038 R14: 00007fd0561d5fa0 R15: 00007fff527a9e88
[  468.198680][T10917]  </TASK>
[  468.751006][   T30] audit: type=1400 audit(1757524153.227:915): avc:  denied  { create } for  pid=10923 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  471.315930][ T5858] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  471.758176][ T5858] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  471.816134][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.844620][ T5858] usb 6-1: Product: syz
[  471.953584][ T5858] usb 6-1: Manufacturer: syz
[  471.963604][ T5858] usb 6-1: SerialNumber: syz
[  471.975264][T10959] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1122'.
[  472.099088][T10963] sch_tbf: burst 1821 is lower than device lo mtu (65550) !
[  472.276288][T10965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  472.400919][ T5858] usb 6-1: config 0 descriptor??
[  472.438819][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'.
[  472.841920][ T5858] usb 6-1: USB disconnect, device number 11
[  473.351182][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'.
[  473.362740][T10991] chnl_net:caif_netlink_parms(): no params data found
[  474.299605][T10986] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  474.356104][T10986] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  474.362120][T10986] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  474.421689][T10986] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  475.053092][ T5858] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  475.565386][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.705994][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.746579][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  475.804874][ T5858] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  475.840707][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.868374][ T5858] usb 1-1: config 0 descriptor??
[  476.166416][ T9895] Bluetooth: hci3: command 0x0c1a tx timeout
[  476.449338][ T5858] usbhid 1-1:0.0: can't add hid device: -71
[  476.479613][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  476.495896][ T9895] Bluetooth: hci5: command 0x0c1a tx timeout
[  476.502238][ T9895] Bluetooth: hci4: command 0x040f tx timeout
[  476.509212][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout
[  476.513265][ T5858] usb 1-1: USB disconnect, device number 67
[  476.794332][   T30] audit: type=1400 audit(1757524161.277:916): avc:  denied  { getattr } for  pid=11038 comm="syz.6.1136" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  476.818857][T11039] overlayfs: statfs failed on './file0'
[  477.054917][T11048] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1137'.
[  477.254219][T11056] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1139'.
[  477.369560][T11059] block nbd5: Attempted send on invalid socket
[  477.390826][T11059] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.419239][T11062] FAULT_INJECTION: forcing a failure.
[  477.419239][T11062] name failslab, interval 1, probability 0, space 0, times 0
[  477.888854][T11062] CPU: 0 UID: 0 PID: 11062 Comm: syz.6.1142 Not tainted syzkaller #0 PREEMPT(full) 
[  477.888881][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  477.888891][T11062] Call Trace:
[  477.888897][T11062]  <TASK>
[  477.888903][T11062]  dump_stack_lvl+0x16c/0x1f0
[  477.888933][T11062]  should_fail_ex+0x512/0x640
[  477.888960][T11062]  should_failslab+0xc2/0x120
[  477.888981][T11062]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  477.889000][T11062]  ? skb_clone+0x190/0x3f0
[  477.889026][T11062]  skb_clone+0x190/0x3f0
[  477.889049][T11062]  netlink_deliver_tap+0xabd/0xd30
[  477.889072][T11062]  ? netlink_unicast+0x17c/0x870
[  477.889096][T11062]  netlink_unicast+0x64c/0x870
[  477.889123][T11062]  ? __pfx_netlink_unicast+0x10/0x10
[  477.889146][T11062]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  477.889176][T11062]  netlink_sendmsg+0x8d1/0xdd0
[  477.889203][T11062]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.889236][T11062]  ____sys_sendmsg+0xa98/0xc70
[  477.889265][T11062]  ? copy_msghdr_from_user+0x10a/0x160
[  477.889287][T11062]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.889324][T11062]  ___sys_sendmsg+0x134/0x1d0
[  477.889346][T11062]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.889399][T11062]  __sys_sendmsg+0x16d/0x220
[  477.889421][T11062]  ? __pfx___sys_sendmsg+0x10/0x10
[  477.889440][T11062]  ? __pfx___schedule+0x10/0x10
[  477.889475][T11062]  do_syscall_64+0xcd/0x4c0
[  477.889499][T11062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.889517][T11062] RIP: 0033:0x7f09b7d8eba9
[  477.889531][T11062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.889547][T11062] RSP: 002b:00007f09b8cfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.889564][T11062] RAX: ffffffffffffffda RBX: 00007f09b7fd5fa0 RCX: 00007f09b7d8eba9
[  477.889574][T11062] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  477.889584][T11062] RBP: 00007f09b8cfa090 R08: 0000000000000000 R09: 0000000000000000
[  477.889594][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.889604][T11062] R13: 00007f09b7fd6038 R14: 00007f09b7fd5fa0 R15: 00007ffe9fa3ab48
[  477.889628][T11062]  </TASK>
[  479.010113][T10937] block nbd5: Attempted send on invalid socket
[  479.017626][T10937] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  479.027071][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  479.038258][T11059] block nbd5: Attempted send on invalid socket
[  479.068264][T11059] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  479.265267][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  479.326531][T11059] block nbd5: Attempted send on invalid socket
[  479.334892][T11059] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  479.367582][T11059] block nbd5: Attempted send on invalid socket
[  479.373819][T11059] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  479.386185][  T978] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  479.639715][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  479.658487][  T978] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  479.669253][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.680994][  T978] usb 5-1: Product: syz
[  479.685358][T11059] block nbd5: Attempted send on invalid socket
[  479.698041][  T978] usb 5-1: Manufacturer: syz
[  479.704227][  T978] usb 5-1: SerialNumber: syz
[  479.714137][T11059] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  479.742704][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  479.753205][  T978] usb 5-1: config 0 descriptor??
[  479.766549][  T978] ems_usb 5-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  479.781187][  T978] ems_usb 5-1:0.0: probe with driver ems_usb failed with error -22
[  479.790767][T11059] block nbd5: Attempted send on invalid socket
[  479.832421][T11059] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.075469][  T978] usb 5-1: USB disconnect, device number 52
[  480.099655][T11090] netlink: 'syz.3.1145': attribute type 10 has an invalid length.
[  480.108031][T11059] block nbd5: Attempted send on invalid socket
[  480.114294][T11059] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.147002][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  480.181386][T11090] team0: Port device dummy0 added
[  480.190671][T11059] block nbd5: Attempted send on invalid socket
[  480.211944][T11090] netlink: 'syz.3.1145': attribute type 10 has an invalid length.
[  480.241037][T11059] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.252278][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  480.263733][T11059] block nbd5: Attempted send on invalid socket
[  480.273636][T11059] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.308671][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  480.323916][T11090] team0: Port device dummy0 removed
[  480.354127][T11090] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  480.389506][T11059] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  480.405759][T11059] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  480.633429][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'.
[  480.650146][   T30] audit: type=1400 audit(1757524165.137:917): avc:  denied  { mount } for  pid=11095 comm="syz.3.1147" name="/" dev="hugetlbfs" ino=28653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  480.683500][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'.
[  480.724514][T11084] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  480.735463][T11084] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  480.753105][T11084] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  480.761637][T11084] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  480.859540][   T30] audit: type=1400 audit(1757524165.347:918): avc:  denied  { unmount } for  pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  481.239919][T11052] syz.0.1139 (11052): drop_caches: 2
[  481.245602][   T30] audit: type=1800 audit(1757524165.667:919): pid=11114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1151" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  481.418446][T11108] mmap: syz.4.1149 (11108): VmData 26103808 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  481.461753][T11116] FAULT_INJECTION: forcing a failure.
[  481.461753][T11116] name failslab, interval 1, probability 0, space 0, times 0
[  481.654542][T11116] CPU: 0 UID: 0 PID: 11116 Comm: syz.5.1153 Not tainted syzkaller #0 PREEMPT(full) 
[  481.654566][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  481.654575][T11116] Call Trace:
[  481.654580][T11116]  <TASK>
[  481.654587][T11116]  dump_stack_lvl+0x16c/0x1f0
[  481.654613][T11116]  should_fail_ex+0x512/0x640
[  481.654634][T11116]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  481.654661][T11116]  should_failslab+0xc2/0x120
[  481.654680][T11116]  __kmalloc_cache_noprof+0x6a/0x3e0
[  481.654704][T11116]  ? netdev_offload_xstats_enable+0x13a/0x3c0
[  481.654723][T11116]  ? mutex_is_locked+0x17/0x60
[  481.654739][T11116]  netdev_offload_xstats_enable+0x13a/0x3c0
[  481.654761][T11116]  ? __pfx_netdev_offload_xstats_enable+0x10/0x10
[  481.654783][T11116]  ? __nla_parse+0x40/0x60
[  481.654809][T11116]  rtnl_stats_set+0x378/0x4e0
[  481.654834][T11116]  ? __pfx_rtnl_stats_set+0x10/0x10
[  481.654859][T11116]  ? __pfx_rtnl_stats_set+0x10/0x10
[  481.654882][T11116]  rtnetlink_rcv_msg+0x3c9/0xe90
[  481.654906][T11116]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  481.654933][T11116]  ? ref_tracker_free+0x37c/0x830
[  481.654957][T11116]  netlink_rcv_skb+0x155/0x420
[  481.654982][T11116]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  481.655005][T11116]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  481.655035][T11116]  ? netlink_deliver_tap+0x1ae/0xd30
[  481.655060][T11116]  netlink_unicast+0x5aa/0x870
[  481.655085][T11116]  ? __pfx_netlink_unicast+0x10/0x10
[  481.655105][T11116]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  481.655132][T11116]  netlink_sendmsg+0x8d1/0xdd0
[  481.655156][T11116]  ? __pfx_netlink_sendmsg+0x10/0x10
[  481.655186][T11116]  ____sys_sendmsg+0xa98/0xc70
[  481.655212][T11116]  ? copy_msghdr_from_user+0x10a/0x160
[  481.655231][T11116]  ? __pfx_____sys_sendmsg+0x10/0x10
[  481.655266][T11116]  ___sys_sendmsg+0x134/0x1d0
[  481.655288][T11116]  ? __pfx____sys_sendmsg+0x10/0x10
[  481.655338][T11116]  __sys_sendmsg+0x16d/0x220
[  481.655376][T11116]  ? __pfx___sys_sendmsg+0x10/0x10
[  481.655410][T11116]  do_syscall_64+0xcd/0x4c0
[  481.655432][T11116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.655447][T11116] RIP: 0033:0x7ff0afb8eba9
[  481.655461][T11116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.655476][T11116] RSP: 002b:00007ff0b09c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.655493][T11116] RAX: ffffffffffffffda RBX: 00007ff0afdd5fa0 RCX: 00007ff0afb8eba9
[  481.655504][T11116] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  481.655513][T11116] RBP: 00007ff0b09c5090 R08: 0000000000000000 R09: 0000000000000000
[  481.655522][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.655531][T11116] R13: 00007ff0afdd6038 R14: 00007ff0afdd5fa0 R15: 00007fff4fd063c8
[  481.655554][T11116]  </TASK>
[  482.470292][ T9895] Bluetooth: hci3: command 0x0c1a tx timeout
[  483.465809][ T9895] Bluetooth: hci5: command 0x0c1a tx timeout
[  483.471895][ T5860] Bluetooth: hci4: command 0x040f tx timeout
[  483.475696][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout
[  483.587459][   T30] audit: type=1400 audit(1757524168.067:920): avc:  denied  { write } for  pid=11131 comm="syz.0.1158" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  485.107905][   T30] audit: type=1326 audit(1757524169.357:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.461019][   T30] audit: type=1326 audit(1757524169.357:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.509322][   T30] audit: type=1326 audit(1757524169.357:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.540434][   T30] audit: type=1326 audit(1757524169.357:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.569564][   T30] audit: type=1326 audit(1757524169.357:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.596765][   T30] audit: type=1326 audit(1757524169.357:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.627393][   T30] audit: type=1326 audit(1757524169.357:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  485.770611][   T30] audit: type=1326 audit(1757524169.357:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd055f8eba9 code=0x7fc00000
[  486.817561][T11168] netlink: 'syz.3.1162': attribute type 5 has an invalid length.
[  487.182063][   T30] audit: type=1400 audit(1757524171.667:929): avc:  denied  { write } for  pid=11146 comm="syz.6.1161" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  487.233029][T11168] ip6erspan0: entered promiscuous mode
[  487.258424][T11148] autofs4:pid:11148:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  487.260397][T11173] FAULT_INJECTION: forcing a failure.
[  487.260397][T11173] name failslab, interval 1, probability 0, space 0, times 0
[  487.371475][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.5.1167 Not tainted syzkaller #0 PREEMPT(full) 
[  487.371505][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  487.371515][T11173] Call Trace:
[  487.371520][T11173]  <TASK>
[  487.371528][T11173]  dump_stack_lvl+0x16c/0x1f0
[  487.371560][T11173]  should_fail_ex+0x512/0x640
[  487.371583][T11173]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  487.371604][T11173]  should_failslab+0xc2/0x120
[  487.371623][T11173]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  487.371640][T11173]  ? netdev_debug_event+0x7a/0x450
[  487.371662][T11173]  ? __alloc_skb+0x2b2/0x380
[  487.371685][T11173]  __alloc_skb+0x2b2/0x380
[  487.371704][T11173]  ? __pfx___alloc_skb+0x10/0x10
[  487.371723][T11173]  ? __pfx_raw_notifier_call_chain_robust+0x10/0x10
[  487.371762][T11173]  rtnl_offload_xstats_notify+0x11e/0x2d0
[  487.371790][T11173]  ? __pfx_rtnl_offload_xstats_notify+0x10/0x10
[  487.371813][T11173]  ? __pfx_netdev_offload_xstats_enable+0x10/0x10
[  487.371838][T11173]  ? __nla_parse+0x40/0x60
[  487.371868][T11173]  rtnl_stats_set+0x391/0x4e0
[  487.371892][T11173]  ? __pfx_rtnl_stats_set+0x10/0x10
[  487.371923][T11173]  ? __pfx_rtnl_stats_set+0x10/0x10
[  487.371952][T11173]  rtnetlink_rcv_msg+0x3c9/0xe90
[  487.371978][T11173]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  487.372008][T11173]  ? ref_tracker_free+0x37c/0x830
[  487.372035][T11173]  netlink_rcv_skb+0x155/0x420
[  487.372060][T11173]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  487.372084][T11173]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  487.372117][T11173]  ? netlink_deliver_tap+0x1ae/0xd30
[  487.372143][T11173]  netlink_unicast+0x5aa/0x870
[  487.372170][T11173]  ? __pfx_netlink_unicast+0x10/0x10
[  487.372193][T11173]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  487.372223][T11173]  netlink_sendmsg+0x8d1/0xdd0
[  487.372250][T11173]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.372282][T11173]  ____sys_sendmsg+0xa98/0xc70
[  487.372310][T11173]  ? copy_msghdr_from_user+0x10a/0x160
[  487.372331][T11173]  ? __pfx_____sys_sendmsg+0x10/0x10
[  487.372369][T11173]  ___sys_sendmsg+0x134/0x1d0
[  487.372392][T11173]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.372460][T11173]  __sys_sendmsg+0x16d/0x220
[  487.372483][T11173]  ? __pfx___sys_sendmsg+0x10/0x10
[  487.372521][T11173]  do_syscall_64+0xcd/0x4c0
[  487.372546][T11173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.372564][T11173] RIP: 0033:0x7ff0afb8eba9
[  487.372578][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  487.372594][T11173] RSP: 002b:00007ff0b09c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.372610][T11173] RAX: ffffffffffffffda RBX: 00007ff0afdd5fa0 RCX: 00007ff0afb8eba9
[  487.372620][T11173] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  487.372630][T11173] RBP: 00007ff0b09c5090 R08: 0000000000000000 R09: 0000000000000000
[  487.372640][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.372649][T11173] R13: 00007ff0afdd6038 R14: 00007ff0afdd5fa0 R15: 00007fff4fd063c8
[  487.372673][T11173]  </TASK>
[  490.091585][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1173'.
[  490.195774][  T978] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  490.355805][  T978] usb 5-1: Using ep0 maxpacket: 16
[  490.477766][  T978] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  490.540607][  T978] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  490.911659][   T30] audit: type=1800 audit(1757524175.397:930): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1177" name="bus" dev="overlay" ino=1278 res=0 errno=0
[  490.960148][ T5993] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  491.273453][ T5993] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  491.300989][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.317367][ T5965] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  491.337628][ T5993] usb 6-1: Product: syz
[  491.359633][ T5993] usb 6-1: Manufacturer: syz
[  491.378878][ T5993] usb 6-1: SerialNumber: syz
[  491.676135][ T5965] usb 4-1: Using ep0 maxpacket: 32
[  491.868162][ T5965] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.971744][ T5965] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.071875][ T5965] usb 4-1: config 0 interface 0 has no altsetting 0
[  492.198189][ T5965] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  492.281719][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  492.370365][ T5965] usb 4-1: Product: syz
[  492.484308][ T5965] usb 4-1: config 0 descriptor??
[  492.776787][  T978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  492.797511][  T978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  492.810581][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.823797][  T978] usb 5-1: Product: syz
[  492.835731][  T978] usb 5-1: Manufacturer: syz
[  492.840496][  T978] usb 5-1: SerialNumber: syz
[  492.977735][  T978] usb 5-1: 0:2 : does not exist
[  493.056685][  T978] usb 5-1: USB disconnect, device number 53
[  493.179334][T11234] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  493.196953][ T5965] waterforce 0003:1044:7A4D.000D: unknown main item tag 0x0
[  493.310473][ T5965] waterforce 0003:1044:7A4D.000D: unknown main item tag 0x0
[  493.477555][ T5965] waterforce 0003:1044:7A4D.000D: item fetching failed at offset 2/5
[  493.593482][ T5993] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  493.735046][ T5993] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  493.746230][ T5965] waterforce 0003:1044:7A4D.000D: hid parse failed with -22
[  493.753576][ T5993] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  493.765896][ T5965] waterforce 0003:1044:7A4D.000D: probe with driver waterforce failed with error -22
[  495.401059][   T10] usb 4-1: USB disconnect, device number 35
[  495.420515][ T5993] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  495.653613][ T5993] usb 6-1: USB disconnect, device number 12
[  496.128040][   T30] audit: type=1400 audit(1757524180.617:931): avc:  denied  { setopt } for  pid=11275 comm="syz.6.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  496.230531][   T30] audit: type=1400 audit(1757524180.717:932): avc:  denied  { write } for  pid=11275 comm="syz.6.1189" path="socket:[30543]" dev="sockfs" ino=30543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  497.048245][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'.
[  497.340164][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'.
[  497.358004][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'.
[  497.372774][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'.
[  497.547418][T11301] vlan2: entered allmulticast mode
[  497.602652][T11302] UBIFS error (pid: 11302): cannot open "c:::", error -22
[  497.656185][T11301] bridge0: entered allmulticast mode
[  497.953690][   T30] audit: type=1400 audit(1757524182.407:933): avc:  denied  { write } for  pid=11307 comm="syz.6.1195" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  500.286139][ T5933] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  500.487708][ T5933] usb 4-1: config 0 has an invalid interface number: 245 but max is 0
[  500.507487][ T5933] usb 4-1: config 0 has no interface number 0
[  500.547874][ T5933] usb 4-1: config 0 interface 245 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  500.610949][ T5933] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1058, bcdDevice=b3.ca
[  500.882871][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.907410][ T5933] usb 4-1: Product: syz
[  500.911592][ T5933] usb 4-1: Manufacturer: syz
[  500.941300][ T5933] usb 4-1: SerialNumber: syz
[  500.972695][ T5933] usb 4-1: config 0 descriptor??
[  500.982028][   T30] audit: type=1400 audit(1757524185.437:934): avc:  denied  { getopt } for  pid=11355 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  501.010479][ T5933] option 4-1:0.245: GSM modem (1-port) converter detected
[  501.165741][   T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  501.208447][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  501.214850][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  501.238322][ T5933] usb 4-1: USB disconnect, device number 36
[  501.268549][ T5933] option 4-1:0.245: device disconnected
[  501.327809][   T10] usb 7-1: Using ep0 maxpacket: 32
[  501.366555][   T10] usb 7-1: config 0 has no interfaces?
[  501.388905][   T10] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  501.418488][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.440829][   T10] usb 7-1: Product: syz
[  501.445029][   T10] usb 7-1: Manufacturer: syz
[  501.572770][   T10] usb 7-1: SerialNumber: syz
[  502.360237][ T5860] Bluetooth: hci5: command 0x0c1a tx timeout
[  503.266367][   T10] usb 7-1: config 0 descriptor??
[  503.671122][T11388] Invalid ELF header len 14
[  503.837358][T11394] program syz.0.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  503.977868][T11394] program syz.0.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  504.471693][T11394] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  504.579546][T11402] lo speed is unknown, defaulting to 1000
[  504.830339][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'.
[  505.256736][   T30] audit: type=1400 audit(1757524189.737:935): avc:  denied  { read } for  pid=11414 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  505.447426][    T9] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  505.952745][   T30] audit: type=1400 audit(1757524190.077:936): avc:  denied  { map } for  pid=11414 comm="syz.4.1216" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  506.024039][   T30] audit: type=1400 audit(1757524190.077:937): avc:  denied  { execute } for  pid=11414 comm="syz.4.1216" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  506.061366][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  506.138432][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.160261][ T5993] usb 7-1: USB disconnect, device number 6
[  506.201328][    T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  506.236472][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.267406][    T9] usb 1-1: config 0 descriptor??
[  507.814333][T11435] erofs (device nbd6): cannot find valid erofs superblock
[  508.185437][T11430] netlink: 'syz.5.1219': attribute type 4 has an invalid length.
[  509.101150][   T30] audit: type=1400 audit(1757524193.547:938): avc:  denied  { setopt } for  pid=11422 comm="syz.5.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  509.126489][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  509.136987][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  509.162809][    T9] usb 1-1: USB disconnect, device number 68
[  509.222311][   T30] audit: type=1400 audit(1757524193.687:939): avc:  denied  { read } for  pid=11443 comm="syz.6.1221" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  509.295411][   T30] audit: type=1400 audit(1757524193.687:940): avc:  denied  { open } for  pid=11443 comm="syz.6.1221" path="/29/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  509.349468][   T30] audit: type=1400 audit(1757524193.697:941): avc:  denied  { ioctl } for  pid=11443 comm="syz.6.1221" path="/29/file0/file0" dev="fuse" ino=3 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  509.472647][T11455] syz_tun: entered allmulticast mode
[  509.518322][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1224'.
[  509.580778][T11455] syz_tun (unregistering): left allmulticast mode
[  509.587566][ T5858] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  509.719508][    T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  509.747284][ T5858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.779017][ T5858] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  509.789109][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.797247][ T5968] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  509.807147][ T5858] usb 7-1: Product: syz
[  509.811486][ T5858] usb 7-1: Manufacturer: syz
[  509.818225][ T5858] usb 7-1: SerialNumber: syz
[  509.887734][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  509.911351][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  509.926445][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  509.936664][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  509.955885][ T5968] usb 6-1: Using ep0 maxpacket: 32
[  509.964351][    T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  509.965949][ T5968] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  509.992547][ T5968] usb 6-1: config 0 has an invalid descriptor of length 113, skipping remainder of the config
[  510.003287][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.005489][ T5968] usb 6-1: config 0 has no interface number 0
[  510.019848][ T5968] usb 6-1: too many endpoints for config 0 interface 184 altsetting 197: 41, using maximum allowed: 30
[  510.031794][ T5968] usb 6-1: config 0 interface 184 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 41
[  510.048526][ T5968] usb 6-1: config 0 interface 184 has no altsetting 0
[  510.058719][ T5968] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  510.070657][    T9] usb 5-1: Product: syz
[  510.071482][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.080486][    T9] usb 5-1: Manufacturer: syz
[  510.100728][    T9] usb 5-1: SerialNumber: syz
[  510.102338][ T5968] usb 6-1: Product: syz
[  510.112675][ T5968] usb 6-1: Manufacturer: syz
[  510.118725][ T5968] usb 6-1: SerialNumber: syz
[  510.132809][    T9] usb 5-1: config 0 descriptor??
[  510.148305][ T5968] usb 6-1: config 0 descriptor??
[  510.233326][    T9] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  510.379432][ T5968] smsc75xx v1.0.0
[  510.385377][ T5968] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  510.403657][ T5968] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22
[  510.451124][ T5965] usb 5-1: USB disconnect, device number 54
[  510.505702][ T5968] usb 6-1: USB disconnect, device number 13
[  510.919036][ T5858] cdc_ncm 7-1:1.0: bind() failure
[  510.934535][ T5858] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71
[  510.945531][ T5858] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71
[  511.005841][ T5858] usbtest 7-1:1.1: probe with driver usbtest failed with error -71
[  511.050563][ T5858] usb 7-1: USB disconnect, device number 7
[  511.532334][T11496] SELinux:  policydb magic number 0x5890328c does not match expected magic number 0xf97cff8c
[  511.543078][T11496] SELinux: failed to load policy
[  512.959822][ T5851] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  512.964019][ T5860] Bluetooth: hci1: command 0x1003 tx timeout
[  513.827868][T11528] erofs (device nbd6): cannot find valid erofs superblock
[  514.548523][T11534] netlink: 'syz.0.1234': attribute type 13 has an invalid length.
[  514.816825][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1236'.
[  514.826175][ T5858] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  515.153092][   T30] audit: type=1400 audit(1757524199.207:942): avc:  denied  { watch_sb } for  pid=11538 comm="syz.6.1237" path="/31" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  515.241253][ T5858] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  515.294030][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.326579][ T5858] usb 4-1: Product: syz
[  515.336113][ T5858] usb 4-1: Manufacturer: syz
[  515.340977][ T5858] usb 4-1: SerialNumber: syz
[  515.436201][ T5858] usb 4-1: config 0 descriptor??
[  515.459770][ T5858] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  515.585899][ T5968] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  515.694970][T11534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  515.736711][T11541] chnl_net:caif_netlink_parms(): no params data found
[  515.759104][ T5968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  515.879846][ T5968] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  515.920683][   T30] audit: type=1400 audit(1757524200.387:943): avc:  denied  { ioctl } for  pid=11547 comm="syz.4.1238" path="socket:[31567]" dev="sockfs" ino=31567 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  515.945336][    C0] vkms_vblank_simulate: vblank timer overrun
[  515.955750][ T5968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.970191][ T5968] usb 7-1: config 0 descriptor??
[  515.978820][ T5968] smsusb:smsusb_probe: board id=8, interface number 0
[  515.985814][ T5858] gspca_sn9c2028: read1 error -110
[  515.991327][ T5968] smsusb:smsusb_probe: Device initialized with return code -19
[  515.999249][ T5858] gspca_sn9c2028: read1 error -32
[  516.004612][ T5858] gspca_sn9c2028: read1 error -32
[  516.009985][ T5858] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32
[  516.321589][ T5968] usb 7-1: USB disconnect, device number 8
[  516.500571][ T5858] usb 4-1: USB disconnect, device number 37
[  516.749892][   T30] audit: type=1400 audit(1757524201.237:944): avc:  denied  { accept } for  pid=11567 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  516.799057][T11569] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1242'.
[  517.315889][ T5858] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  517.488320][ T5858] usb 5-1: Using ep0 maxpacket: 8
[  517.501025][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  517.570299][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  517.602007][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  517.623284][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  517.639120][ T5858] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  517.659986][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.687306][ T5858] hub 5-1:1.0: bad descriptor, ignoring hub
[  517.700197][ T5858] hub 5-1:1.0: probe with driver hub failed with error -5
[  518.043416][T11583] lo speed is unknown, defaulting to 1000
[  518.106266][ T5858] cdc_wdm 5-1:1.0: skipping garbage
[  518.111605][ T5858] cdc_wdm 5-1:1.0: skipping garbage
[  518.126092][ T5858] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  518.133267][ T5858] cdc_wdm 5-1:1.0: Unknown control protocol
[  518.358000][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'.
[  518.369242][T11590] chnl_net:caif_netlink_parms(): no params data found
[  518.678575][ T5858] usb 5-1: reset high-speed USB device number 55 using dummy_hcd
[  519.172092][   T30] audit: type=1400 audit(1757524203.657:945): avc:  denied  { ioctl } for  pid=11593 comm="syz.0.1250" path="socket:[32274]" dev="sockfs" ino=32274 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  519.201944][T11595] overlay: Unknown parameter 'mask'
[  519.837275][   T30] audit: type=1400 audit(1757524204.317:946): avc:  denied  { accept } for  pid=11604 comm="syz.3.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  519.975897][   T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  520.156122][   T10] usb 1-1: Using ep0 maxpacket: 32
[  520.188640][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.209221][ T5913] usb 5-1: USB disconnect, device number 55
[  520.229096][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.269663][   T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  520.304325][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.318600][   T10] usb 1-1: config 0 descriptor??
[  520.592038][   T30] audit: type=1400 audit(1757524205.057:947): avc:  denied  { connect } for  pid=11610 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  521.187411][   T10] ft260 0003:0403:6030.000E: chip code: 6424 8183
[  521.211642][   T10] ft260 0003:0403:6030.000E: failed to retrieve system status
[  521.228607][   T10] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -5
[  522.051640][   T10] usb 1-1: USB disconnect, device number 69
[  522.386645][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1260'.
[  522.396627][T11642] chnl_net:caif_netlink_parms(): no params data found
[  522.826364][T11645] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  522.848014][T11645] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  522.969688][T11652] rtc_cmos 00:00: Alarms can be up to one day in the future
[  522.972359][T11645] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  522.996140][ T5913] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  523.187558][ T5913] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  523.372668][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0
[  523.464573][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  523.538476][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  523.548531][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  523.556495][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  523.564332][   T10] rtc rtc0: __rtc_set_alarm: err=-22
[  523.570215][ T5913] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  523.579491][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  523.588632][ T5913] usb 6-1: Product: syz
[  523.592947][ T5913] usb 6-1: Manufacturer: syz
[  523.599495][ T5913] usb 6-1: SerialNumber: syz
[  523.657151][ T5913] usb 6-1: config 0 descriptor??
[  523.668077][ T5913] usb 6-1: selecting invalid altsetting 0
[  523.790256][   T30] audit: type=1400 audit(1757524208.277:948): avc:  denied  { wake_alarm } for  pid=11659 comm="syz.4.1266" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  524.853633][   T10] usb 6-1: USB disconnect, device number 14
[  524.995423][   T30] audit: type=1400 audit(1757524209.477:949): avc:  denied  { write } for  pid=11678 comm="syz.6.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  525.018933][T11679] block nbd6: Send control failed (result -22)
[  525.033915][T11679] block nbd6: Request send failed, requeueing
[  525.070459][T10937] block nbd6: Dead connection, failed to find a fallback
[  525.077770][T10937] block nbd6: shutting down sockets
[  525.083030][T10937] blk_print_req_error: 2 callbacks suppressed
[  525.083041][T10937] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  525.277912][T11692] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore
[  525.367988][T11692] overlayfs: missing 'lowerdir'
[  526.256665][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'.
[  526.266226][T11707] chnl_net:caif_netlink_parms(): no params data found
[  527.018530][T11709] nbd_handle_cmd: 2 callbacks suppressed
[  527.018554][T11709] block nbd0: Attempted send on invalid socket
[  527.030692][T11709] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  527.040914][T11709] EXT4-fs (nbd0): unable to read superblock
[  527.539312][   T30] audit: type=1400 audit(1757524212.027:950): avc:  denied  { append } for  pid=11719 comm="syz.0.1280" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  528.365777][    T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  528.494141][T11743] ubi: mtd0 is already attached to ubi31
[  528.525748][    T9] usb 1-1: Using ep0 maxpacket: 16
[  528.688984][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.950217][T11753] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1288'.
[  528.953744][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.044144][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  529.078381][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  529.099658][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.141509][    T9] usb 1-1: config 0 descriptor??
[  530.145873][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'.
[  530.156493][T11772] chnl_net:caif_netlink_parms(): no params data found
[  530.582893][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  530.600394][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  530.965738][    T9] usb 1-1: USB disconnect, device number 70
[  531.027940][T11783] netlink: 3784 bytes leftover after parsing attributes in process `syz.3.1294'.
[  531.037849][T11783] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1294'.
[  531.047577][T11783] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1294'.
[  531.224840][   T30] audit: type=1400 audit(1757524215.707:951): avc:  denied  { setattr } for  pid=11786 comm="syz.3.1296" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  532.027712][ T5858] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  532.210401][ T5858] usb 5-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config
[  532.240046][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  532.250238][ T5858] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  532.325988][ T5858] usb 5-1: New USB device found, idVendor=0525, idProduct=c0a1, bcdDevice= 0.40
[  532.335933][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.343932][ T5858] usb 5-1: Product: syz
[  532.355593][ T5858] usb 5-1: Manufacturer: syz
[  532.361992][ T5858] usb 5-1: SerialNumber: syz
[  532.378595][ T5858] cdc_mbim 5-1:1.0: skipping garbage
[  532.387383][ T5858] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found
[  532.402150][ T5858] cdc_mbim 5-1:1.0: bind() failure
[  533.467269][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  533.586427][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  533.763086][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  533.777915][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  533.791248][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  533.866175][   T30] audit: type=1400 audit(1757524218.327:952): avc:  denied  { getopt } for  pid=11800 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  533.886076][    T9] usb 7-1: Using ep0 maxpacket: 8
[  533.896764][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.908184][    T9] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  533.920888][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.986815][    T9] usb 7-1: config 0 descriptor??
[  534.313227][T11851] tmpfs: Unknown parameter 'usrquota0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.313227][T11851] 0
[  534.788694][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  534.794754][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  534.894659][    T9] usb 7-1: USB disconnect, device number 9
[  535.028670][   T10] usb 5-1: USB disconnect, device number 56
[  535.065418][   T30] audit: type=1400 audit(1757524219.547:953): avc:  denied  { connect } for  pid=11869 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  535.549505][T11887] netlink: 'syz.6.1320': attribute type 32 has an invalid length.
[  535.574921][   T30] audit: type=1400 audit(1757524220.057:954): avc:  denied  { append } for  pid=11884 comm="syz.6.1320" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  535.625801][ T5858] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  535.670625][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'.
[  535.800039][ T5858] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  535.815508][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.838793][ T5858] usb 6-1: Product: syz
[  535.881237][ T5858] usb 6-1: Manufacturer: syz
[  535.895780][ T5858] usb 6-1: SerialNumber: syz
[  535.958650][ T5851] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3
[  535.958799][ T5851] Bluetooth: hci5: SCO packet for unknown connection handle 1
[  535.973104][ T5858] usb 6-1: config 0 descriptor??
[  536.721397][T11905] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  536.752345][T11905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  536.764654][T11905] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  537.568814][ T5858] usb 6-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  537.659283][ T5858] f81604 6-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  537.667435][ T5858] f81604 6-1:0.0: probe with driver f81604 failed with error -121
[  537.750805][T11908] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff����1844674407370955161500000000000000000007'
[  537.877181][ T5933] usb 6-1: USB disconnect, device number 15
[  538.669516][T11916] No source specified
[  538.674951][T11916] trusted_key: encrypted_key: master key parameter 'truste��syz' is invalid
[  538.920215][T11925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.944301][   T30] audit: type=1400 audit(1757524223.417:955): avc:  denied  { ioctl } for  pid=11918 comm="syz.4.1329" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  539.365876][ T5858] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  540.015779][ T5858] usb 1-1: Using ep0 maxpacket: 8
[  540.034202][ T5858] usb 1-1: unable to get BOS descriptor or descriptor too short
[  540.066040][ T5920] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  540.107553][ T5858] usb 1-1: config 5 has an invalid interface number: 215 but max is 0
[  540.122079][ T5858] usb 1-1: config 5 has no interface number 0
[  540.130552][ T5858] usb 1-1: config 5 interface 215 has no altsetting 0
[  540.146022][ T5858] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=d1.ba
[  540.162426][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.171822][ T5858] usb 1-1: Product: syz
[  540.179051][ T5858] usb 1-1: Manufacturer: syz
[  540.183758][ T5858] usb 1-1: SerialNumber: syz
[  540.191539][T11937] binder_alloc: 11936: pid 11936 spamming oneway? 1 buffers allocated for a total size of 4096
[  540.211714][T11937] binder_alloc: 11936: binder_alloc_buf size 12312 failed, no address space
[  540.223517][T11937] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168)
[  540.251277][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  540.265376][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.278173][ T5920] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  540.298321][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.312997][ T5920] usb 6-1: config 0 descriptor??
[  540.427376][ T5858] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected
[  540.457482][ T5858] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  540.494239][ T5858] usb 1-1: USB disconnect, device number 71
[  540.556595][ T5858] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  540.611447][ T5858] cypress_m8 1-1:5.215: device disconnected
[  540.767801][T11931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.787433][T11931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.828465][ T5920] zydacron 0003:13EC:0006.000F: unknown main item tag 0x1
[  540.843533][ T5920] zydacron 0003:13EC:0006.000F: item fetching failed at offset 2/5
[  540.877694][ T5920] zydacron 0003:13EC:0006.000F: parse failed
[  540.906522][ T5920] zydacron 0003:13EC:0006.000F: probe with driver zydacron failed with error -22
[  541.039627][ T5920] usb 6-1: USB disconnect, device number 16
[  541.610096][T11956] fuse: Bad value for 'fd'
[  541.617201][ T5851] Bluetooth: hci5: unexpected event for opcode 0x1005
[  541.746958][T11963] fuse: Bad value for 'fd'
[  541.853817][T11942] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  541.863285][T11942] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  541.875982][T11942] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  541.892032][T11942] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  542.182811][   T30] audit: type=1400 audit(1757524226.667:956): avc:  denied  { execmod } for  pid=11968 comm="syz.4.1341" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  542.214284][T11969] binder: 11968:11969 ioctl c018620c 200000000000 returned -22
[  542.296881][ T5920] usb 7-1: new low-speed USB device number 10 using dummy_hcd
[  542.486076][   T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  542.622673][   T10] usb 5-1: device descriptor read/64, error -71
[  542.626720][ T5920] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  542.649601][ T5920] usb 7-1: config 0 has no interface number 0
[  542.655945][ T5920] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  542.675080][ T5920] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  542.739294][   T30] audit: type=1400 audit(1757524227.217:957): avc:  denied  { listen } for  pid=11971 comm="syz.3.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  543.074130][ T5920] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  543.095692][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.124008][ T5920] usb 7-1: config 0 descriptor??
[  543.144456][T11963] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  543.178111][ T5920] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  543.187079][   T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  543.206196][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout
[  543.271165][T11977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1343'.
[  543.325762][   T10] usb 5-1: device descriptor read/64, error -71
[  543.389190][    T9] usb 7-1: USB disconnect, device number 10
[  543.436243][   T10] usb usb5-port1: attempt power cycle
[  543.527318][ T5913] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  543.687437][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  543.712803][ T5913] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.729551][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0
[  543.779181][   T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  544.048081][ T5851] Bluetooth: hci5: command 0x0c1a tx timeout
[  544.054227][ T5851] Bluetooth: hci4: command 0x040f tx timeout
[  544.061342][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout
[  544.075934][ T5913] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  544.097423][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.107536][   T10] usb 5-1: device descriptor read/8, error -71
[  544.156287][ T5913] usb 6-1: config 0 descriptor??
[  544.408115][   T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  544.467633][   T10] usb 5-1: device descriptor read/8, error -71
[  544.642538][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  544.655811][   T10] usb usb5-port1: unable to enumerate USB device
[  544.924065][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  544.955775][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  544.962865][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  544.996297][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  545.026516][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  545.051053][ T5913] hid-rmi 0003:17EF:6085.0010: unknown main item tag 0x0
[  545.109187][T12029] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1347'.
[  545.332508][T12029] 0��{X��: renamed from gretap0 (while UP)
[  545.352963][ T5913] hid-rmi 0003:17EF:6085.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.5-1/input0
[  545.380045][T12029] 0��{X��: entered allmulticast mode
[  545.418679][T12029] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  545.444245][ T5913] usb 6-1: USB disconnect, device number 17
[  545.703423][   T30] audit: type=1400 audit(1757524230.117:958): avc:  denied  { append } for  pid=12030 comm="syz.4.1348" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  546.120382][T12032] fido_id[12032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  546.741974][T12050] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  546.755858][ T5913] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  546.917041][ T5913] usb 6-1: Using ep0 maxpacket: 32
[  546.933816][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.956276][ T5913] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  547.776512][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.790880][ T5913] usb 6-1: Product: syz
[  547.802924][ T5913] usb 6-1: Manufacturer: syz
[  547.807795][ T5913] usb 6-1: SerialNumber: syz
[  547.855081][ T5913] usb 6-1: config 0 descriptor??
[  547.986636][ T5913] usb 6-1: bad CDC descriptors
[  548.016660][ T5913] usb 6-1: unsupported MDLM descriptors
[  548.110302][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'.
[  548.121786][T12070] chnl_net:caif_netlink_parms(): no params data found
[  548.449528][   T10] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  548.494024][T12038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.506944][T12038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.544172][   T30] audit: type=1326 audit(1757524233.027:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.3.1357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6048f8eba9 code=0x0
[  548.627750][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.638260][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  548.654501][T12078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12078 comm=syz.6.1360
[  548.679158][   T30] audit: type=1400 audit(1757524233.167:960): avc:  denied  { listen } for  pid=12034 comm="syz.5.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  548.765607][   T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  548.794353][ T5913] usb 6-1: USB disconnect, device number 18
[  548.819653][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.954434][T12085] syz.4.1361 (12085): /proc/12080/oom_adj is deprecated, please use /proc/12080/oom_score_adj instead.
[  549.199113][   T10] usb 1-1: config 0 descriptor??
[  549.230332][   T10] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22
[  549.587564][ T5913] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  549.867561][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.932459][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  549.946514][    T9] usb 1-1: USB disconnect, device number 72
[  550.417898][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.427759][ T5913] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  550.452350][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.469315][   T30] audit: type=1326 audit(1757524234.957:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  550.486427][ T5913] usb 6-1: config 0 descriptor??
[  550.521830][   T30] audit: type=1326 audit(1757524234.997:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  550.550252][   T30] audit: type=1326 audit(1757524234.997:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  550.590870][   T30] audit: type=1326 audit(1757524234.997:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  550.756007][   T30] audit: type=1326 audit(1757524234.997:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  550.795757][   T30] audit: type=1326 audit(1757524234.997:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  550.819829][   T30] audit: type=1400 audit(1757524235.117:967): avc:  denied  { watch_mount } for  pid=12105 comm="syz.0.1366" path="/284" dev="tmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  550.925020][T12107] Invalid logical block size (67125248)
[  551.014107][   T30] audit: type=1326 audit(1757524235.407:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  551.081491][   T30] audit: type=1326 audit(1757524235.407:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f7d8eba9 code=0x7ffc0000
[  551.105076][   T30] audit: type=1326 audit(1757524235.537:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08f7d8d510 code=0x7ffc0000
[  551.128877][   T30] audit: type=1326 audit(1757524235.537:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08f7d8e7ab code=0x7ffc0000
[  551.152407][   T30] audit: type=1326 audit(1757524235.537:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08f7d8e7ab code=0x7ffc0000
[  551.181121][    T9] usb 6-1: USB disconnect, device number 19
[  551.194826][   T30] audit: type=1326 audit(1757524235.547:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08f7d8e7ab code=0x7ffc0000
[  551.219190][   T30] audit: type=1326 audit(1757524235.547:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08f7d8e7ab code=0x7ffc0000
[  551.315885][ T5858] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  551.483301][T12121] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  551.492870][T12121] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock
[  551.502996][T12121] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  551.512493][ T5858] usb 5-1: Using ep0 maxpacket: 16
[  551.557901][ T5858] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  551.585996][T12121] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock
[  551.641311][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.649639][ T5858] usb 5-1: Product: syz
[  551.664720][ T5858] usb 5-1: Manufacturer: syz
[  551.670208][ T5858] usb 5-1: SerialNumber: syz
[  551.716413][ T5858] usb 5-1: config 0 descriptor??
[  551.787950][T12121] loop7: detected capacity change from 0 to 7
[  551.791012][ T6080] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  551.947397][ T5858] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  552.002462][ T5858] usb 5-1: Detected FT232H
[  552.020119][ T5858] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  552.048721][T12121] Dev loop7: unable to read RDB block 7
[  552.058609][T12121]  loop7: unable to read partition table
[  552.067179][T12121] loop7: partition table beyond EOD, truncated
[  552.086811][T12121] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  552.358611][ T5858] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5
[  552.380761][ T5858] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  553.064872][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1375'.
[  553.145775][ T5858] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  553.303422][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1379'.
[  553.318731][ T5858] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  553.329241][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.342120][ T5858] usb 6-1: Product: syz
[  553.347233][ T5858] usb 6-1: Manufacturer: syz
[  553.352276][ T5858] usb 6-1: SerialNumber: syz
[  553.395065][ T5858] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  553.501936][ T5920] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  553.533810][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'.
[  553.614785][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'.
[  553.623973][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'.
[  553.633074][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'.
[  553.665869][ T5858] usb 5-1: USB disconnect, device number 61
[  553.681556][ T5858] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  553.731346][ T5858] ftdi_sio 5-1:0.0: device disconnected
[  553.896832][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  553.960614][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  553.970229][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  553.979580][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  554.320297][ T5913] usb 6-1: USB disconnect, device number 20
[  554.438812][ T5858] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  554.542479][T12188] overlayfs: upper fs does not support tmpfile.
[  554.566396][ T5920] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  554.619880][ T5920] ath9k_htc: Failed to initialize the device
[  554.636925][ T5913] usb 6-1: ath9k_htc: USB layer deinitialized
[  554.805528][T12193] SELinux: failed to load policy
[  555.426927][T12214] 9pnet_fd: Insufficient options for proto=fd
[  556.044733][   T30] kauditd_printk_skb: 77 callbacks suppressed
[  556.044749][   T30] audit: type=1400 audit(1757524240.527:1052): avc:  denied  { bind } for  pid=12211 comm="syz.6.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  556.179679][   T30] audit: type=1400 audit(1757524240.567:1053): avc:  denied  { create } for  pid=12211 comm="syz.6.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  558.452719][T12240] block nbd4: shutting down sockets
[  558.463340][T12234] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  558.523325][T12234] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  558.582884][T12234] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  558.604694][T12234] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  559.365183][T12264] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1404'.
[  559.663188][T12271] FAULT_INJECTION: forcing a failure.
[  559.663188][T12271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.677842][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.5.1405 Not tainted syzkaller #0 PREEMPT(full) 
[  559.677869][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  559.677879][T12271] Call Trace:
[  559.677884][T12271]  <TASK>
[  559.677891][T12271]  dump_stack_lvl+0x16c/0x1f0
[  559.677915][T12271]  should_fail_ex+0x512/0x640
[  559.677932][T12271]  _copy_from_user+0x2e/0xd0
[  559.677948][T12271]  copy_msghdr_from_user+0x98/0x160
[  559.677964][T12271]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  559.677983][T12271]  ___sys_sendmsg+0xfe/0x1d0
[  559.677997][T12271]  ? __pfx____sys_sendmsg+0x10/0x10
[  559.678026][T12271]  __sys_sendmsg+0x16d/0x220
[  559.678039][T12271]  ? __pfx___sys_sendmsg+0x10/0x10
[  559.678060][T12271]  do_syscall_64+0xcd/0x4c0
[  559.678076][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.678089][T12271] RIP: 0033:0x7ff0afb8eba9
[  559.678104][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.678116][T12271] RSP: 002b:00007ff0b09c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  559.678127][T12271] RAX: ffffffffffffffda RBX: 00007ff0afdd5fa0 RCX: 00007ff0afb8eba9
[  559.678133][T12271] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  559.678139][T12271] RBP: 00007ff0b09c5090 R08: 0000000000000000 R09: 0000000000000000
[  559.678146][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.678151][T12271] R13: 00007ff0afdd6038 R14: 00007ff0afdd5fa0 R15: 00007fff4fd063c8
[  559.678165][T12271]  </TASK>
[  560.105838][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout
[  560.577289][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout
[  560.647502][ T5851] Bluetooth: hci4: command 0x040f tx timeout
[  560.655887][ T5860] Bluetooth: hci5: command 0x0c1a tx timeout
[  562.080354][   T30] audit: type=1326 audit(1757524246.567:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12292 comm="syz.0.1412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd055f8eba9 code=0x0
[  562.412499][   T30] audit: type=1400 audit(1757524246.897:1055): avc:  denied  { ioctl } for  pid=12306 comm="syz.4.1414" path="socket:[34823]" dev="sockfs" ino=34823 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  562.440048][ T5913] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  562.651050][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  562.702139][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  562.872324][   T30] audit: type=1400 audit(1757524247.357:1056): avc:  denied  { write } for  pid=12317 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  562.933472][T12322] lo speed is unknown, defaulting to 1000
[  563.216043][    T9] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  563.447781][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  563.458027][    T9] usb 5-1: config 0 has no interface number 0
[  563.464532][    T9] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  563.498597][    T9] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  563.532680][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[  563.559669][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  563.575318][    T9] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  563.686870][    T9] usb 5-1: Product: syz
[  563.733415][    T9] usb 5-1: Manufacturer: syz
[  563.764349][    T9] usb 5-1: SerialNumber: syz
[  563.801509][    T9] usb 5-1: config 0 descriptor??
[  563.821990][T12318] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  563.847920][    T9] f81534 5-1:0.12: unsupported endpoint max packet size
[  564.045023][    T9] usb 5-1: USB disconnect, device number 63
[  564.399237][   T30] audit: type=1400 audit(1757524248.887:1057): avc:  denied  { name_bind } for  pid=12342 comm="syz.3.1425" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  564.423590][T12343] tmpfs: Unknown parameter 'mpoN'
[  564.630276][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'.
[  564.812063][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'.
[  564.823862][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'.
[  564.834984][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'.
[  565.865812][ T5993] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  566.126105][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  566.185764][ T5993] usb 7-1: Using ep0 maxpacket: 16
[  566.197218][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.215795][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  566.274365][ T5993] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  566.318249][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.346539][ T5993] usb 7-1: config 0 descriptor??
[  566.359835][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  566.372170][    T9] usb 6-1: config 0 has no interface number 0
[  566.393716][    T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  566.432714][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.465717][    T9] usb 6-1: Product: syz
[  566.469910][    T9] usb 6-1: Manufacturer: syz
[  566.474515][    T9] usb 6-1: SerialNumber: syz
[  566.500821][    T9] usb 6-1: config 0 descriptor??
[  566.573058][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.611010][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.730237][    T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  566.900799][    T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  566.926166][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  566.955862][    T9] usb 6-1: media controller created
[  567.098935][ T5993] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  567.203885][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.215115][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.229926][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  567.239305][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.354424][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.410245][   T30] audit: type=1400 audit(1757524251.897:1058): avc:  denied  { setattr } for  pid=12397 comm="syz.0.1439" name="NETLINK" dev="sockfs" ino=34519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  567.449804][    T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  568.126046][    T9] usb 6-1: USB disconnect, device number 21
[  568.140015][ T5858] usb 7-1: USB disconnect, device number 11
[  568.175772][ T1215] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  568.315735][ T1215] usb 1-1: device descriptor read/64, error -71
[  568.324721][T12406] lo speed is unknown, defaulting to 1000
[  568.614980][ T1215] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  568.692532][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'.
[  568.791200][T12418] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1444'.
[  568.802368][T12418] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1444'.
[  568.811561][T12418] netlink: 'syz.5.1444': attribute type 1 has an invalid length.
[  569.175890][ T1215] usb 1-1: device descriptor read/64, error -71
[  569.211907][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'.
[  569.220997][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'.
[  569.230177][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'.
[  569.316082][ T1215] usb usb1-port1: attempt power cycle
[  569.450774][T12431] netlink: 'syz.3.1448': attribute type 3 has an invalid length.
[  569.507125][T12433] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  569.706393][ T1215] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  569.895705][ T1215] usb 1-1: device descriptor read/8, error -71
[  570.526063][ T1215] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  570.772944][ T1215] usb 1-1: device not accepting address 77, error -71
[  570.802349][ T1215] usb usb1-port1: unable to enumerate USB device
[  570.848071][T12468] overlay: Bad value for 'workdir'
[  571.173670][T12472] bridge0: port 3(team0) entered disabled state
[  571.180247][T12472] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.187571][T12472] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.908456][T12472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.003320][T12472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.318251][T12472] veth0_macvtap: left allmulticast mode
[  572.550561][ T1215] lo speed is unknown, defaulting to 1000
[  572.592190][ T1215] syz0: Port: 1 Link DOWN
[  572.739964][T12476] : entered promiscuous mode
[  572.765703][T12505] ------------[ cut here ]------------
[  572.771589][T12505] WARNING: CPU: 0 PID: 12505 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0
[  572.781944][T12505] Modules linked in:
[  572.786535][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.3.1467 Not tainted syzkaller #0 PREEMPT(full) 
[  572.796027][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  572.805818][ T1087] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.806172][T12505] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0
[  572.822413][T12505] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  572.834720][ T1087] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.842131][T12505] RSP: 0018:ffffc9000c4b77f0 EFLAGS: 00010246
[  572.842158][T12505] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  572.842170][T12505] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40
[  572.863759][ T5993] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  572.865812][T12505] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009
[  572.865828][T12505] R10: 000000000000002a R11: ffffffff8b93f0cd R12: 0000000000040d40
[  572.865840][T12505] R13: 1ffff92001896f13 R14: ffffffff9ae7fa24 R15: 000000000000002a
[  572.865851][T12505] FS:  00007f6049e9d6c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000
[  572.865869][T12505] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  572.865881][T12505] CR2: 0000200000001000 CR3: 000000005ae11000 CR4: 00000000003526f0
[  572.865894][T12505] Call Trace:
[  572.865902][T12505]  <TASK>
[  572.865909][T12505]  ? do_syscall_64+0xcd/0x4c0
[  572.865939][T12505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.865972][T12505]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  572.866007][T12505]  ? kasan_quarantine_put+0x10a/0x240
[  572.866024][T12505]  ? lockdep_hardirqs_on+0x7c/0x110
[  572.866049][T12505]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  572.866071][T12505]  ? policy_nodemask+0xea/0x4e0
[  572.866093][T12505]  alloc_pages_mpol+0x1fb/0x550
[  572.866116][T12505]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  572.866141][T12505]  ? v9fs_fid_get_acl+0x7a/0x120
[  572.866165][T12505]  ___kmalloc_large_node+0xed/0x160
[  572.866192][T12505]  ? v9fs_fid_get_acl+0x7a/0x120
[  572.866217][T12505]  __kmalloc_large_node_noprof+0x1c/0x70
[  572.866245][T12505]  __kmalloc_noprof.cold+0xc/0x61
[  572.866272][T12505]  ? __pfx_iget5_locked+0x10/0x10
[  572.866300][T12505]  ? v9fs_cache_inode_get_cookie+0x28f/0x3a0
[  572.866334][T12505]  v9fs_fid_get_acl+0x7a/0x120
[  572.879729][T12507] unknown channel width for channel at 909000KHz?
[  572.881880][T12505]  v9fs_get_acl+0xee/0x530
[  572.881906][T12505]  v9fs_inode_from_fid_dotl+0x264/0x2f0
[  573.037773][ T5993] usb 7-1: Using ep0 maxpacket: 32
[  573.040314][T12505]  v9fs_mount+0x4fd/0xa90
[  573.040342][T12505]  ? __pfx_v9fs_mount+0x10/0x10
[  573.048280][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.051281][T12505]  ? cap_capable+0xb3/0x250
[  573.051314][T12505]  ? __pfx_v9fs_mount+0x10/0x10
[  573.057773][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.060533][T12505]  legacy_get_tree+0x10c/0x220
[  573.060564][T12505]  vfs_get_tree+0x8b/0x340
[  573.060591][T12505]  path_mount+0x1513/0x2000
[  573.104519][T12505]  ? __pfx_path_mount+0x10/0x10
[  573.109745][T12505]  ? kmem_cache_free+0x2d1/0x4d0
[  573.114704][T12505]  ? putname+0x154/0x1a0
[  573.119084][T12505]  ? putname+0x154/0x1a0
[  573.123370][T12505]  ? __x64_sys_mount+0x28d/0x310
[  573.128379][T12505]  __x64_sys_mount+0x28d/0x310
[  573.132347][ T5993] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  573.133164][T12505]  ? __pfx___x64_sys_mount+0x10/0x10
[  573.147856][T12505]  do_syscall_64+0xcd/0x4c0
[  573.152480][T12505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.158411][T12505] RIP: 0033:0x7f6048f8eba9
[  573.161540][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.162872][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  573.162893][T12505] RSP: 002b:00007f6049e9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  573.162913][T12505] RAX: ffffffffffffffda RBX: 00007f60491d5fa0 RCX: 00007f6048f8eba9
[  573.162925][T12505] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  573.162937][T12505] RBP: 00007f6049011e19 R08: 0000200000000400 R09: 0000000000000000
[  573.199836][ T5993] usb 7-1: config 0 descriptor??
[  573.207574][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.207594][T12505] R13: 00007f60491d6038 R14: 00007f60491d5fa0 R15: 00007fff2abd86a8
[  573.207620][T12505]  </TASK>
[  573.207629][T12505] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  573.207642][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.3.1467 Not tainted syzkaller #0 PREEMPT(full) 
[  573.207662][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  573.207673][T12505] Call Trace:
[  573.207680][T12505]  <TASK>
[  573.207687][T12505]  dump_stack_lvl+0x3d/0x1f0
[  573.207721][T12505]  vpanic+0x6e8/0x7a0
[  573.207749][T12505]  ? __pfx_vpanic+0x10/0x10
[  573.207779][T12505]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  573.207799][T12505]  panic+0xca/0xd0
[  573.207820][T12505]  ? __pfx_panic+0x10/0x10
[  573.207851][T12505]  check_panic_on_warn+0xab/0xb0
[  573.207867][T12505]  __warn+0xf6/0x3c0
[  573.207881][T12505]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  573.207898][T12505]  report_bug+0x3c3/0x580
[  573.207916][T12505]  ? __alloc_frozen_pages_noprof+0x30b/0x23f0
[  573.207933][T12505]  handle_bug+0x184/0x210
[  573.207957][T12505]  exc_invalid_op+0x17/0x50
[  573.207978][T12505]  asm_exc_invalid_op+0x1a/0x20
[  573.207994][T12505] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0
[  573.208012][T12505] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  573.208027][T12505] RSP: 0018:ffffc9000c4b77f0 EFLAGS: 00010246
[  573.208042][T12505] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  573.208052][T12505] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40
[  573.208062][T12505] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009
[  573.208071][T12505] R10: 000000000000002a R11: ffffffff8b93f0cd R12: 0000000000040d40
[  573.208081][T12505] R13: 1ffff92001896f13 R14: ffffffff9ae7fa24 R15: 000000000000002a
[  573.208095][T12505]  ? do_syscall_64+0xcd/0x4c0
[  573.208121][T12505]  ? do_syscall_64+0xcd/0x4c0
[  573.208140][T12505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.208166][T12505]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  573.208194][T12505]  ? kasan_quarantine_put+0x10a/0x240
[  573.208210][T12505]  ? lockdep_hardirqs_on+0x7c/0x110
[  573.208228][T12505]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  573.208248][T12505]  ? policy_nodemask+0xea/0x4e0
[  573.208268][T12505]  alloc_pages_mpol+0x1fb/0x550
[  573.208287][T12505]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  573.208311][T12505]  ? v9fs_fid_get_acl+0x7a/0x120
[  573.208334][T12505]  ___kmalloc_large_node+0xed/0x160
[  573.208359][T12505]  ? v9fs_fid_get_acl+0x7a/0x120
[  573.208380][T12505]  __kmalloc_large_node_noprof+0x1c/0x70
[  573.208403][T12505]  __kmalloc_noprof.cold+0xc/0x61
[  573.208425][T12505]  ? __pfx_iget5_locked+0x10/0x10
[  573.208447][T12505]  ? v9fs_cache_inode_get_cookie+0x28f/0x3a0
[  573.208475][T12505]  v9fs_fid_get_acl+0x7a/0x120
[  573.208499][T12505]  v9fs_get_acl+0xee/0x530
[  573.208515][T12505]  v9fs_inode_from_fid_dotl+0x264/0x2f0
[  573.208538][T12505]  v9fs_mount+0x4fd/0xa90
[  573.208555][T12505]  ? __pfx_v9fs_mount+0x10/0x10
[  573.208572][T12505]  ? cap_capable+0xb3/0x250
[  573.208593][T12505]  ? __pfx_v9fs_mount+0x10/0x10
[  573.208608][T12505]  legacy_get_tree+0x10c/0x220
[  573.208630][T12505]  vfs_get_tree+0x8b/0x340
[  573.208653][T12505]  path_mount+0x1513/0x2000
[  573.208677][T12505]  ? __pfx_path_mount+0x10/0x10
[  573.208704][T12505]  ? kmem_cache_free+0x2d1/0x4d0
[  573.208718][T12505]  ? putname+0x154/0x1a0
[  573.208742][T12505]  ? putname+0x154/0x1a0
[  573.208763][T12505]  ? __x64_sys_mount+0x28d/0x310
[  573.208782][T12505]  __x64_sys_mount+0x28d/0x310
[  573.208802][T12505]  ? __pfx___x64_sys_mount+0x10/0x10
[  573.208828][T12505]  do_syscall_64+0xcd/0x4c0
[  573.208850][T12505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.208865][T12505] RIP: 0033:0x7f6048f8eba9
[  573.208880][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  573.208893][T12505] RSP: 002b:00007f6049e9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  573.208907][T12505] RAX: ffffffffffffffda RBX: 00007f60491d5fa0 RCX: 00007f6048f8eba9
[  573.208917][T12505] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  573.208927][T12505] RBP: 00007f6049011e19 R08: 0000200000000400 R09: 0000000000000000
[  573.208936][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.208945][T12505] R13: 00007f60491d6038 R14: 00007f60491d5fa0 R15: 00007fff2abd86a8
[  573.208966][T12505]  </TASK>
[  573.216031][T12505] Kernel Offset: disabled