last executing test programs:

2m37.85509356s ago: executing program 0 (id=747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb"], 0x1c}, 0x1, 0x100000000000000}, 0x0)

2m37.147059659s ago: executing program 0 (id=750):
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r0, 0x541b, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000761134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040))
getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)

2m35.334416741s ago: executing program 0 (id=757):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000c4000000000001907864010100ac1414aa0b009078032c0000c2000000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414247f00000100000000e0000002864e0000000000074b6cefc500000cdf61168c24ac88ad078c00122189ea43e2149b8444a30300505c09a00012ffd11634eea26b0faffa0dea2e903528060902a20948fd74060708ccf0294e2a3b4404000000a815a23d"], 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = timerfd_create(0x8, 0x80000)
timerfd_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])

2m33.833793586s ago: executing program 0 (id=760):
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe4d8baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21564190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ef877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c946c3e05a458744077430c5ee031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x3, 0xfffffffffffffffe, 0x0, 0x1, 0x0, {0x40, 0x4, 0x0, 0xc, 0x3, 0x0, 0x2, 0x0, 0x120, 0x2000, 0x0, r3, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000004240)='./file0\x00', &(0x7f0000002e00))
socket$nl_generic(0x10, 0x3, 0x10)
getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
getpid()
sendmmsg$unix(r1, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x4000}}], 0x1, 0x200448d1)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)

2m33.379102061s ago: executing program 0 (id=762):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6gretap0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100087ace5edf7a8b91fff0000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f400000017000000080026007f1700000800270001"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x5, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)

2m32.056057703s ago: executing program 0 (id=764):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0)

2m32.046876684s ago: executing program 3 (id=765):
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x6, 0x0, 0x8d6ef750e7badb0c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x12002)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0})
close(r3)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2}, 0xff}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40002140, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x8)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r6, 0xfffffffffffffffa, 0x1)

2m31.007367909s ago: executing program 3 (id=767):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x8000000}, 0x94)

2m30.904133867s ago: executing program 3 (id=768):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="f5ffffff74e8a226db1007e84a2beed29930e30000010000003f000018110000000000", @ANYRES32=r2, @ANYBLOB="000000000000baa6b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x4, 0x2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0xcbd71eeefd8ad8b9, 0x0, 0x2, 0x3, 0x4}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000580)={{0x3, 0x2, 0x4, 0x2, 0x4005}})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="08003c0201800000050037"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
fsmount(0xffffffffffffffff, 0x1, 0x7a)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/128)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r7, &(0x7f0000000000), 0x6)

2m30.648336254s ago: executing program 3 (id=770):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r4, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0xce)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000180))
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002500010048"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)

2m30.351807859s ago: executing program 3 (id=772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = syz_io_uring_setup(0x155, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
r9 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m29.605273447s ago: executing program 3 (id=773):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)
r1 = gettid()
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(r1, 0x5, &(0x7f0000000140)={0xfffffffffffffffb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd70eafd1e00000000000046e88468d70fe8d981fbb800bf09c2f27c77761d957bcabad1ac62d3235a6c152ca7f2752018f7875eb44c3035fc2e2fb2382bbbdb1da25c5aafcd"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57)
socket$netlink(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r7 = semget$private(0x0, 0x6, 0x0)
semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r7, &(0x7f00000000c0)=[{0x2, 0x0, 0x1000}], 0x1)
semctl$IPC_RMID(r7, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)

2m29.262903778s ago: executing program 32 (id=773):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)
r1 = gettid()
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(r1, 0x5, &(0x7f0000000140)={0xfffffffffffffffb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd70eafd1e00000000000046e88468d70fe8d981fbb800bf09c2f27c77761d957bcabad1ac62d3235a6c152ca7f2752018f7875eb44c3035fc2e2fb2382bbbdb1da25c5aafcd"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57)
socket$netlink(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r7 = semget$private(0x0, 0x6, 0x0)
semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r7, &(0x7f00000000c0)=[{0x2, 0x0, 0x1000}], 0x1)
semctl$IPC_RMID(r7, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)

2m16.875850894s ago: executing program 33 (id=764):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0)

13.358941951s ago: executing program 1 (id=1214):
pipe2$9p(&(0x7f0000000240), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f8050006002080ff000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0)
keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0)

11.294262561s ago: executing program 1 (id=1220):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$caif_stream(0x25, 0x1, 0x4)
r1 = syz_io_uring_setup(0x236, &(0x7f0000000580)={0x0, 0x0, 0x400}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r4, &(0x7f00000002c0))
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x2200892, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x110, r0, 0x1acb9000)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x80000000005, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
chroot(&(0x7f0000000a40)='./file0\x00')
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x1})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='pstore\x00', 0x0, 0x0)

9.27587578s ago: executing program 4 (id=1231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6gretap0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100087ace5edf7a8b91fff0000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, 0x0, 0x4000080)

9.249100039s ago: executing program 1 (id=1232):
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff"], 0x0, 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x6d5523a195a35863, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff)
shutdown(r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000159000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0xbdd91000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000780), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'})

8.330123586s ago: executing program 2 (id=1233):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = syz_io_uring_setup(0x155, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
r9 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc", 0x5}], 0x1}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.329536739s ago: executing program 4 (id=1234):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x206}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc001000, 0x0, 0x0, 0x12, 0x1})
getrlimit(0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, '\x00', 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4})
ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]})

8.177091961s ago: executing program 1 (id=1235):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xf000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9b"], 0x0, 0x7, 0xb7, &(0x7f0000000280)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VT_SETMODE(r1, 0x5602, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)

7.159977789s ago: executing program 4 (id=1236):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x141, 0x64, 0x88, 0x4a, 0x8, 0x5da, 0x99, 0xaefb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x15, 0x2, 0x0, 0xa3, 0x1c, 0xfe}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x24, 0xb4, {0xb4, 0x23, "d871f13763e9b75b5ec6551fafb70204602a4b8f302eebfe6de9e8d8e1a4fadd6bd973e5e1fe556d1a4bdf2ba28ecfdab98cd0ccec47d8ea5ced15a0bb7944d56c6436d59a9993fe7fd9df665f6bc5f3d9ee522d6e2c34e38a5c7acb0e852e98ead2a8dbf307a324ffb05a09326360a66adc7a668aa9a776360b5a95d2f69cdc06e37106b6028cea3795fa87accdd27e62f2c89ed0ded62ad8713eee003105a7794f5d33d7e4cc79d47e3c184ffb62f1eff1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0xa, 0xbe, "68ed27ffc7b7c516c7c51687f77ed670ea84fbbbc6d2299dc15912afb7d94a8ae9df9d54d7151e3e73035aa50c3116b87ff7f1580542a2787b286a8fa8c0aeb9e9eaa443432f47e1d6e7e5aa148c5bb9fffd2414968907342637a9a421e9371867f10633a021d52fd66ff1f159ab5ffeff1bbef15fc35f7c1a02c421d1f9aa240e7d52fe6a87e9be04892b714a955e5ccf2d4f8946e665c63ddf1dd9cc9e6944df7e8fbd1c0bbbb5ddf09ecd81df41a1fbb3517d65aa36b757a9c56145a8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000340)={0xc0, 0x5, 0x5, "fdf4c7911b"}, &(0x7f0000000380)}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c000780080006400000000005000100060000000500050002000000050004000000627b0900020073797a310000000015000300686173683a69702c706f7274"], 0x5c}}, 0x0)

6.382318787s ago: executing program 1 (id=1237):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f00000002c0)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
read(r1, &(0x7f0000000000)=""/149, 0xaa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x404c080)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x600c4)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000098000000980000000b0000000c0000000000001201000000000000000300000d000000001000000004000000080000000500000000000000000000000b0000000000001204000000060000000a00000604000000050000000800000005000000070000000e0000000c00000008000000080000000b0000000000000010000000070000000800000009000000010000000900000000000000050000000300000015a5000000615f616e5f2e00300000f34279bdac2a45402a644076d807f23d4ecd0ff758"], &(0x7f0000000300)=""/77, 0xbb, 0x4d, 0x1, 0x2, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080003000100000080000000", @ANYRES32=r6, @ANYBLOB="0600"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="03000000030000000200"/28], 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000080), &(0x7f0000000240)=r12}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x881, 0x0)
ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000740)=0x4)
sendto$inet6(r0, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

6.227231327s ago: executing program 5 (id=1238):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="020200090d00000000000000200000000200081c08002000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000000000000000000000010014"], 0x68}, 0x1, 0x7}, 0x0)

5.967876423s ago: executing program 5 (id=1239):
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
ioctl$LOOP_CONFIGURE(r0, 0x1277, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000300", "90be8b1c551265406c7f306003d8a0f4bd00"}})

5.908626316s ago: executing program 5 (id=1240):
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09041700000000000000020000000900020073797a32000000100900010073797a3000000000200004801c0001800900010068617368000000000c00020000001100010000000000000000000000000a00"/116], 0x74}}, 0x600c0)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000a280)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000004c0)={0x50, 0x0, r5, {0x7, 0x28, 0x1, 0x28000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000004680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1002, 0x16, 0x0, 0x5, 0x6, {0x1, 0x82, 0x3, 0x800000000006, 0x4, 0x8, 0x8, 0x800, 0x4, 0x2000, 0x7fffbfff, r6, r7, 0x81, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')

4.976190125s ago: executing program 6 (id=1242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)

4.926593887s ago: executing program 5 (id=1243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000a00)={0x32, 0x9000000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000340)=0x9)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000001c0)={0x2b})
write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x4041)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103802, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140))
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000100)='ufs\x00', 0x345c14ed3863a686, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)

4.888022446s ago: executing program 6 (id=1244):
pivot_root(0x0, &(0x7f00000004c0)='./file1\x00')
gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x25, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd7000000000", @ANYRES32=<r7=>r5, @ANYBLOB="05980000002000001400128008000100677265000800028004001200ba66"], 0x34}}, 0x20000000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32=r7, @ANYRES16], 0x4c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000, r9}, 0x0)
landlock_restrict_self(r8, 0x0)

3.714750047s ago: executing program 2 (id=1245):
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff95000000"], 0x0, 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x6d5523a195a35863, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff)
shutdown(r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000159000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0xbdd91000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000780), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'})

3.56795444s ago: executing program 4 (id=1246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.845434097s ago: executing program 6 (id=1247):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000030400088058010c8054000b800800090000000000080009000000000008000a"], 0x184}}, 0x0)

2.748861022s ago: executing program 5 (id=1248):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000002780)="d5d9", 0x2}], 0x2}}], 0x400000000000216, 0xc0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)

2.740965566s ago: executing program 2 (id=1249):
userfaultfd(0x80001)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x300, 0x9, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.504066721s ago: executing program 6 (id=1250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2549, 0xa1ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0)

2.440258604s ago: executing program 4 (id=1251):
r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x25}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x3, 0xa}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.328167507s ago: executing program 2 (id=1252):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xffffffffffffff80}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0)

2.290064037s ago: executing program 2 (id=1253):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x7000000, 0x10}, 0x0)

2.16393459s ago: executing program 6 (id=1254):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="250300000000003f000008"], 0x14}}, 0x0)

2.092609896s ago: executing program 2 (id=1255):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000a00)={0x32, 0x9000000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000340)=0x9)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000001c0)={0x2b})
write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x4041)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103802, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140))
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000100)='ufs\x00', 0x345c14ed3863a686, 0x0)
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

2.089461228s ago: executing program 1 (id=1256):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf255100000008000300", @ANYRES32=r6, @ANYBLOB="1a008a000100000011bec558cd5b080e", @ANYRES64=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x4040000)

2.016635345s ago: executing program 6 (id=1257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000029000b0027bd700000000000050000000c000180", @ANYBLOB], 0x20}}, 0x0)
vmsplice(r0, &(0x7f0000000040), 0x0, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0xb}, {0x0, 0x1}]}})
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000)
write$selinux_access(0xffffffffffffffff, 0x0, 0x47)
socket$nl_netfilter(0x10, 0x3, 0xc)
pread64(r1, &(0x7f0000001140)=""/228, 0x87, 0x8)

1.042546819s ago: executing program 4 (id=1258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x1, 0x0, 0x60}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

0s ago: executing program 5 (id=1259):
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff95000000"], 0x0, 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x6d5523a195a35863, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff)
shutdown(r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000159000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0xbdd91000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000780), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'})

kernel console output (not intermixed with test programs):

5132][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'.
[  253.133472][ T5855] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7
[  253.173838][   T30] audit: type=1400 audit(1757659968.201:592): avc:  denied  { connect } for  pid=8403 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  253.194470][ T5855] input: failed to attach handler kbd to device input7, error: -5
[  253.247884][ T8405] overlayfs: failed to resolve './file1': -2
[  253.275342][   T30] audit: type=1400 audit(1757659968.271:593): avc:  denied  { read } for  pid=5205 comm="acpid" name="mouse1" dev="devtmpfs" ino=3592 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  253.297737][ T5855] usb 1-1: USB disconnect, device number 8
[  253.408923][   T30] audit: type=1400 audit(1757659968.271:594): avc:  denied  { open } for  pid=5205 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3592 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  253.644503][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'.
[  253.920258][ T8432] tty tty3: ldisc open failed (-12), clearing slot 2
[  254.355682][ T8452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pid=8452 comm=syz.1.618
[  254.502191][ T8456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.620'.
[  254.609473][   T30] audit: type=1400 audit(1757659969.621:595): avc:  denied  { bind } for  pid=8461 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  255.036791][ T8458] netlink: 830 bytes leftover after parsing attributes in process `syz.2.622'.
[  255.315695][   T30] audit: type=1400 audit(1757659970.341:596): avc:  denied  { accept } for  pid=8469 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  255.561294][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  255.719160][ T8488] qnx6: unable to read the first superblock
[  255.727197][ T8488] siw: device registration error -23
[  255.951199][ T8494] loop2: detected capacity change from 0 to 7
[  255.978940][ T8494]  loop2:
[  255.992220][ T8494] loop2: partition table partially beyond EOD, truncated
[  256.109784][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[  256.302805][ T8503] Illegal XDP return value 8503 on prog  (id 113) dev N/A, expect packet loss!
[  256.891627][ T8502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.630'.
[  259.393562][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.637'.
[  259.798702][ T8531] lo speed is unknown, defaulting to 1000
[  260.484763][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'.
[  260.487608][   T30] audit: type=1400 audit(1757659975.511:597): avc:  denied  { setopt } for  pid=8535 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  260.534626][ T8539] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  261.467498][ T1656] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  261.547264][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[  261.569910][ T8561] rtc_cmos 00:00: Alarms can be up to one day in the future
[  261.739946][ T1656] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  261.946521][ T1656] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  261.977943][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[  261.982840][ T1656] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.021645][ T1656] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  262.068664][ T1656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.104924][ T1656] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  262.118185][ T1656] usb 1-1: invalid MIDI out EP 0
[  262.377691][ T5902] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  262.430381][ T1656] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  262.449738][ T7870] udevd[7870]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  262.574538][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.615540][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  262.652727][ T5902] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  262.662262][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.685172][ T5902] usb 5-1: config 0 descriptor??
[  262.699075][ T5902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  262.902136][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'.
[  263.784510][ T5855] usb 1-1: USB disconnect, device number 9
[  263.798989][ T8546] delete_channel: no stack
[  263.819698][ T8591] overlayfs: missing 'lowerdir'
[  264.872560][ T5902] usb 5-1: USB disconnect, device number 19
[  264.887584][   T30] audit: type=1400 audit(1757659979.891:598): avc:  denied  { read write } for  pid=8601 comm="syz.3.660" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  264.970110][   T30] audit: type=1400 audit(1757659979.891:599): avc:  denied  { open } for  pid=8601 comm="syz.3.660" path="/136/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  265.218493][ T8610] input: syz1 as /devices/virtual/input/input8
[  265.227886][   T30] audit: type=1400 audit(1757659980.261:600): avc:  denied  { ioctl } for  pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3618 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  266.437544][   T30] audit: type=1400 audit(1757659981.451:601): avc:  denied  { setopt } for  pid=8612 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  266.908506][ T8626] overlayfs: missing 'lowerdir'
[  267.374948][ T8631] SELinux: failed to load policy
[  267.523948][ T8632] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  267.531688][ T8632] UDF-fs: Scanning with blocksize 512 failed
[  267.540791][ T8632] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  267.548479][ T8632] UDF-fs: Scanning with blocksize 1024 failed
[  267.556958][ T8632] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  267.564527][ T8632] UDF-fs: Scanning with blocksize 2048 failed
[  267.572311][ T8632] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  267.579923][ T8632] UDF-fs: Scanning with blocksize 4096 failed
[  267.805552][   T30] audit: type=1400 audit(1757659982.151:602): avc:  denied  { mounton } for  pid=8623 comm="syz.1.665" path="/" dev="pstore" ino=4335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1
[  267.852923][ T8635] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  267.854024][   T30] audit: type=1400 audit(1757659982.351:603): avc:  denied  { load_policy } for  pid=8620 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  267.954318][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'.
[  268.363463][   T30] audit: type=1400 audit(1757659982.421:604): avc:  denied  { read } for  pid=8620 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  268.608847][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.669'.
[  268.657531][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'.
[  268.666396][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'.
[  268.735556][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'.
[  268.899190][   T30] audit: type=1400 audit(1757659983.631:605): avc:  denied  { getopt } for  pid=8637 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  269.103234][   T30] audit: type=1400 audit(1757659984.131:606): avc:  denied  { ioctl } for  pid=8655 comm="syz.3.673" path="socket:[20264]" dev="sockfs" ino=20264 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  269.421138][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.673'.
[  269.467444][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.104156][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.381921][ T8685] netlink: 'syz.4.678': attribute type 1 has an invalid length.
[  271.390123][ T8685] netlink: 224 bytes leftover after parsing attributes in process `syz.4.678'.
[  271.661072][ T5863] Bluetooth: hci4: link tx timeout
[  271.667426][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  271.679338][   T30] audit: type=1400 audit(1757659986.631:607): avc:  denied  { append } for  pid=8682 comm="syz.2.680" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  272.454684][ T8702] C: renamed from team_slave_0 (while UP)
[  272.877747][ T8706] block nbd4: Attempted send on invalid socket
[  272.883999][ T8706] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  272.893648][ T8706] gfs2: error -5 reading superblock
[  273.806273][ T8702] netlink: 'syz.1.683': attribute type 3 has an invalid length.
[  274.107547][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  274.170931][ T8702] netlink: 152 bytes leftover after parsing attributes in process `syz.1.683'.
[  274.171099][ T8702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  274.338160][ T8709] tty tty4: ldisc open failed (-12), clearing slot 3
[  274.345290][ T8713] netlink: 'syz.2.686': attribute type 2 has an invalid length.
[  274.365221][ T8716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.637723][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  274.927144][   T30] audit: type=1400 audit(1757659989.951:608): avc:  denied  { map } for  pid=8723 comm="syz.3.691" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  274.952497][ T8724] binder: 8723:8724 ioctl c0306201 2000000001c0 returned -14
[  274.960108][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.692'.
[  274.961536][   T30] audit: type=1400 audit(1757659989.951:609): avc:  denied  { execute } for  pid=8723 comm="syz.3.691" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  274.977626][   T24] usb 2-1: device descriptor read/64, error -71
[  274.999240][ T5916] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  275.052517][   T30] audit: type=1400 audit(1757659990.081:610): avc:  denied  { accept } for  pid=8728 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  275.159611][ T8733] 9pnet: Unknown protocol version 9p20\++}
[  275.187876][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  275.203350][ T5916] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  275.215657][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.227278][ T5916] usb 5-1: config 0 descriptor??
[  275.237739][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  275.317641][ T5923] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  275.377618][   T24] usb 2-1: device descriptor read/64, error -71
[  275.437191][ T5916] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  275.467574][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  275.473254][ T5923] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  275.489060][   T24] usb usb2-port1: attempt power cycle
[  275.495175][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61
[  275.503978][ T5923] usb 4-1: can't read configurations, error -61
[  275.657600][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  275.858377][   T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  275.880314][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  275.887325][ T5923] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  275.918415][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61
[  275.926786][ T5923] usb 4-1: can't read configurations, error -61
[  275.935605][ T5923] usb usb4-port1: attempt power cycle
[  275.942510][   T24] usb 2-1: device descriptor read/8, error -71
[  276.307824][ T5923] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  276.331720][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  276.338717][ T5923] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  276.349924][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61
[  276.358499][ T5923] usb 4-1: can't read configurations, error -61
[  276.367523][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  276.409297][   T24] usb 2-1: device descriptor read/8, error -71
[  276.432603][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.703'.
[  276.441590][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.703'.
[  276.487484][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  276.512236][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  276.583045][ T5923] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  276.591077][   T24] usb usb2-port1: unable to enumerate USB device
[  276.607461][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -61
[  276.616199][ T5923] usb 4-1: can't read configurations, error -61
[  276.625454][ T5923] usb usb4-port1: unable to enumerate USB device
[  276.766563][   T30] audit: type=1400 audit(1757659991.791:611): avc:  denied  { sqpoll } for  pid=8758 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  277.288348][   T30] audit: type=1400 audit(1757659992.321:612): avc:  denied  { read } for  pid=8758 comm="syz.0.706" path="socket:[21608]" dev="sockfs" ino=21608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  277.354627][ T8766] netlink: 'syz.0.707': attribute type 1 has an invalid length.
[  277.408995][ T8766] 8021q: adding VLAN 0 to HW filter on device bond2
[  277.438165][ T8768] bond2: (slave geneve3): making interface the new active one
[  277.447352][ T8768] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  277.822579][ T5916] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  277.839636][ T5916] asix 5-1:0.0: probe with driver asix failed with error -71
[  277.876420][ T5916] usb 5-1: USB disconnect, device number 20
[  278.046119][ T8782] 9pnet_fd: Insufficient options for proto=fd
[  278.210070][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.247723][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.494107][ T8796] netlink: 68 bytes leftover after parsing attributes in process `syz.2.714'.
[  278.510467][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'.
[  279.635615][ T8807] lo speed is unknown, defaulting to 1000
[  281.448160][ T8829] trusted_key: encrypted_key: insufficient parameters specified
[  281.727253][ T8825] netlink: 25 bytes leftover after parsing attributes in process `syz.0.722'.
[  281.908896][   T30] audit: type=1400 audit(1757659996.931:613): avc:  denied  { write } for  pid=8838 comm="syz.2.725" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  282.195104][ T8848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.728'.
[  282.432459][ T8856] lo speed is unknown, defaulting to 1000
[  282.562150][   T30] audit: type=1400 audit(1757659997.521:614): avc:  denied  { create } for  pid=8842 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  283.361046][ T8867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40464 sclass=netlink_route_socket pid=8867 comm=syz.4.731
[  284.080066][ T8884] lo speed is unknown, defaulting to 1000
[  284.149270][ T8888] netlink: 'syz.4.739': attribute type 2 has an invalid length.
[  284.246378][   T30] audit: type=1400 audit(1757659999.271:615): avc:  denied  { create } for  pid=8889 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  284.578197][   T30] audit: type=1400 audit(1757659999.601:616): avc:  denied  { read } for  pid=8889 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  285.217508][ T5916] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  285.359785][ T8903] loop2: detected capacity change from 0 to 7
[  285.367215][ T8903] Dev loop2: unable to read RDB block 7
[  285.375264][ T8903]  loop2: unable to read partition table
[  285.417564][ T8903] loop2: partition table beyond EOD, truncated
[  285.427652][ T8903] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  285.462461][ T5916] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  285.481565][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.502252][ T5916] usb 1-1: Product: syz
[  285.506612][ T5916] usb 1-1: Manufacturer: syz
[  285.515767][ T5916] usb 1-1: SerialNumber: syz
[  285.570228][ T5916] usb 1-1: config 0 descriptor??
[  285.593804][ T5916] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 010
[  285.941318][   T30] audit: type=1326 audit(1757660000.871:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e618eba9 code=0x7ffc0000
[  285.982620][   T30] audit: type=1326 audit(1757660000.871:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fe7e618eba9 code=0x7ffc0000
[  286.019660][   T30] audit: type=1326 audit(1757660000.871:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e618eba9 code=0x7ffc0000
[  286.267585][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  286.336994][   T30] audit: type=1326 audit(1757660000.871:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e618eba9 code=0x7ffc0000
[  286.474664][   T30] audit: type=1326 audit(1757660000.871:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe7e618eba9 code=0x7ffc0000
[  286.583516][   T30] audit: type=1326 audit(1757660000.871:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e618eba9 code=0x7ffc0000
[  287.559541][ T5916]  (null): failure reading functionality
[  287.580143][ T5916] i2c i2c-1: failure reading functionality
[  287.597783][ T5916] i2c i2c-1: connected i2c-tiny-usb device
[  287.606540][ T5916] usb 1-1: USB disconnect, device number 10
[  287.641128][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  287.641144][   T30] audit: type=1400 audit(1757660002.671:640): avc:  denied  { create } for  pid=8913 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  287.710084][   T30] audit: type=1400 audit(1757660002.691:641): avc:  denied  { write } for  pid=8913 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  288.487702][ T8925] nbd0: detected capacity change from 0 to 127
[  289.304254][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'.
[  289.500686][ T8942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8942 comm=syz.3.753
[  289.723096][ T5849] block nbd0: Receive control failed (result -104)
[  289.821596][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'.
[  290.327558][ T8953] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  290.482508][   T30] audit: type=1400 audit(1757660005.511:642): avc:  denied  { module_request } for  pid=8952 comm="syz.0.757" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  292.117263][ T8970] netlink: 'syz.2.759': attribute type 21 has an invalid length.
[  292.164720][ T8970] netlink: 128 bytes leftover after parsing attributes in process `syz.2.759'.
[  292.177318][ T8970] netlink: 'syz.2.759': attribute type 4 has an invalid length.
[  292.187603][ T8970] netlink: 3 bytes leftover after parsing attributes in process `syz.2.759'.
[  292.254698][ T8975] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  292.400165][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[  292.507494][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[  294.847583][   T24] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  294.925068][ T8997] lo speed is unknown, defaulting to 1000
[  295.070706][   T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  295.087538][   T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  295.100716][   T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64
[  295.128592][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  295.138217][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.162109][ T8981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  295.187829][ T8981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  295.233376][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  295.881149][ T8981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  295.918640][    T9] usb 2-1: USB disconnect, device number 19
[  296.350904][ T9018] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  296.488307][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'.
[  296.548439][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'.
[  297.482215][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.496813][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.507920][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  297.516723][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  297.528441][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  297.541408][   T30] audit: type=1400 audit(1757660012.571:643): avc:  denied  { mounton } for  pid=9028 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  298.217894][ T9028] lo speed is unknown, defaulting to 1000
[  299.100307][ T9028] chnl_net:caif_netlink_parms(): no params data found
[  299.165347][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.175145][ T9053] lo speed is unknown, defaulting to 1000
[  299.218863][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.373615][ T9038] syz.1.779 (9038): drop_caches: 2
[  299.437632][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'.
[  299.460011][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.477323][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.494897][ T9028] bridge_slave_0: entered allmulticast mode
[  299.521294][ T9028] bridge_slave_0: entered promiscuous mode
[  299.543809][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.552703][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.560146][ T9028] bridge_slave_1: entered allmulticast mode
[  299.567004][ T9028] bridge_slave_1: entered promiscuous mode
[  299.637607][ T5863] Bluetooth: hci1: command tx timeout
[  299.673026][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.724529][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.908480][ T9028] team0: Port device team_slave_0 added
[  299.928184][ T9028] team0: Port device team_slave_1 added
[  299.998569][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.011079][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.065285][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.096522][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.113479][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.417938][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.606081][ T9028] hsr_slave_0: entered promiscuous mode
[  300.759228][ T9028] hsr_slave_1: entered promiscuous mode
[  300.856806][ T9028] debugfs: 'hsr0' already exists in 'hsr'
[  300.938501][ T9028] Cannot create hsr debugfs directory
[  301.403568][ T5855] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  301.475528][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'.
[  301.490777][ T9081] netlink: 120 bytes leftover after parsing attributes in process `syz.1.789'.
[  301.501011][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'.
[  301.567582][ T5855] usb 5-1: Using ep0 maxpacket: 8
[  301.573935][ T5855] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  301.582450][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.599330][ T5855] usb 5-1: config 0 has no interface number 0
[  301.624274][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  301.636181][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.710772][ T5863] Bluetooth: hci1: command tx timeout
[  301.811791][ T5855] usb 5-1: Product: syz
[  301.894165][ T5855] usb 5-1: Manufacturer: syz
[  301.915013][ T5855] usb 5-1: SerialNumber: syz
[  301.932278][ T5855] usb 5-1: config 0 descriptor??
[  302.190736][ T5855] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  302.591044][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.592312][ T9028] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  302.613682][ T5855] usb 5-1: No valid video chain found.
[  302.620399][ T9028] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  302.637703][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.671702][ T9028] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  302.701676][ T9028] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  302.880709][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.927931][ T9028] 8021q: adding VLAN 0 to HW filter on device team0
[  302.952817][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.959978][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.990670][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.997816][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.390039][ T9097] mkiss: ax0: crc mode is auto.
[  303.500908][   T30] audit: type=1400 audit(1757660018.531:644): avc:  denied  { bind } for  pid=9094 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  303.551541][   T30] audit: type=1400 audit(1757660018.551:645): avc:  denied  { listen } for  pid=9094 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  303.556734][ T9104] lo speed is unknown, defaulting to 1000
[  303.606664][   T30] audit: type=1400 audit(1757660018.551:646): avc:  denied  { write } for  pid=9094 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  303.643936][   T30] audit: type=1400 audit(1757660018.551:647): avc:  denied  { accept } for  pid=9094 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  303.692705][ T9103] lo speed is unknown, defaulting to 1000
[  303.788405][ T5863] Bluetooth: hci1: command tx timeout
[  303.810771][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.907916][ T9116] netlink: 256 bytes leftover after parsing attributes in process `syz.2.794'.
[  303.918830][ T9116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.794'.
[  304.119085][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.795'.
[  304.279371][ T9028] veth0_vlan: entered promiscuous mode
[  304.319668][ T9028] veth1_vlan: entered promiscuous mode
[  304.367130][ T9028] veth0_macvtap: entered promiscuous mode
[  304.414842][ T9028] veth1_macvtap: entered promiscuous mode
[  304.441192][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.590504][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.645331][ T6832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.705765][ T6832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.727971][ T6832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.756935][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.785242][    T9] usb 5-1: USB disconnect, device number 21
[  305.070081][ T9132] netlink: 'syz.4.797': attribute type 1 has an invalid length.
[  305.157652][ T9132] netlink: 224 bytes leftover after parsing attributes in process `syz.4.797'.
[  305.169089][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.176940][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.396860][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  305.599881][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.612667][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.867973][ T5849] Bluetooth: hci1: command tx timeout
[  306.146968][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'.
[  306.195927][ T9148] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  306.227741][ T9148] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  306.258184][ T9150] macvlan2: entered promiscuous mode
[  306.263635][ T9150] macvlan2: entered allmulticast mode
[  306.270466][ T9150] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  306.297796][   T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  306.373142][ T9152] loop2: detected capacity change from 0 to 7
[  306.383265][ T9152] Dev loop2: unable to read RDB block 7
[  306.395878][ T9152]  loop2: unable to read partition table
[  306.405026][ T9152] loop2: partition table beyond EOD, truncated
[  306.416584][ T9152] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  306.458747][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  306.481779][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64
[  306.515828][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  306.536557][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.604515][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  306.622079][   T10] usb 6-1: SerialNumber: syz
[  306.842467][ T9145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  306.858391][   T10] hub 6-1:1.0: bad descriptor, ignoring hub
[  306.864830][   T10] hub 6-1:1.0: probe with driver hub failed with error -5
[  307.056195][ T5849] Bluetooth: hci2: unexpected event for opcode 0x0405
[  307.068815][ T5849] Bluetooth: hci2: unexpected event for opcode 0x0000
[  307.078865][ T9145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  307.107497][   T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  307.291370][ T9163] block nbd4: Attempted send on invalid socket
[  307.299105][ T9163] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.313907][ T9163] block nbd4: Attempted send on invalid socket
[  307.320465][ T9163] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.330264][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  307.342248][ T9163] block nbd4: Attempted send on invalid socket
[  307.348608][ T9163] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.358293][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  307.369060][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  307.369636][ T9163] block nbd4: Attempted send on invalid socket
[  307.380898][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  307.389426][ T9163] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.402511][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  307.411012][ T9163] block nbd4: Attempted send on invalid socket
[  307.422755][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.429061][   T24] usb 2-1: config 0 descriptor??
[  307.431499][ T9163] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.449705][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  307.453169][ T9157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  307.459660][ T9163] block nbd4: Attempted send on invalid socket
[  307.472928][ T9163] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.484562][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  307.489284][   T24] hub 2-1:0.0: USB hub found
[  307.500554][ T9163] block nbd4: Attempted send on invalid socket
[  307.507226][ T9163] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.519624][ T9163] block nbd4: Attempted send on invalid socket
[  307.525957][ T9163] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.544315][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  307.558945][ T9163] block nbd4: Attempted send on invalid socket
[  307.565436][ T9163] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.577390][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  307.593696][ T9163] block nbd4: Attempted send on invalid socket
[  307.600140][ T9163] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  307.611487][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  307.622883][ T9163] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  307.632557][ T9163] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  307.751171][   T24] hub 2-1:0.0: config failed, hub has too many ports! (err -19)
[  307.759692][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.939715][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.967665][ T5849] Bluetooth: hci1: command 0x0405 tx timeout
[  308.122454][   T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  308.133519][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  308.149349][   T10] usb 6-1: USB disconnect, device number 2
[  308.165633][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  308.205548][   T24] usb 2-1: USB disconnect, device number 20
[  308.382937][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'.
[  308.554394][ T9175] netlink: 'syz.4.808': attribute type 4 has an invalid length.
[  308.596171][ T9175] netlink: 'syz.4.808': attribute type 4 has an invalid length.
[  309.854888][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.865712][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.875819][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.883852][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.891458][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.155890][ T5849] Bluetooth: hci1: command 0x0405 tx timeout
[  310.282156][ T9192] lo speed is unknown, defaulting to 1000
[  310.288308][ T9196] C: renamed from team_slave_0 (while UP)
[  310.373939][ T9196] netlink: 'syz.4.813': attribute type 3 has an invalid length.
[  310.382662][ T9196] netlink: 152 bytes leftover after parsing attributes in process `syz.4.813'.
[  310.402293][ T9196] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  310.471092][ T9201] geneve2: entered promiscuous mode
[  310.709961][ T6048] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  310.866854][ T9192] chnl_net:caif_netlink_parms(): no params data found
[  310.958376][ T6048] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  310.994556][ T6048] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.030178][ T6048] usb 6-1: config 0 has no interface number 0
[  311.060618][ T6048] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  311.097520][ T6048] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.133420][ T6048] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  311.147586][ T5849] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  311.157999][ T5849] Bluetooth: hci2: Injecting HCI hardware error event
[  311.167957][ T5863] Bluetooth: hci2: hardware error 0x00
[  311.176829][ T6048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.190426][ T6048] usb 6-1: Product: syz
[  311.194690][ T6048] usb 6-1: Manufacturer: syz
[  311.199367][ T6048] usb 6-1: SerialNumber: syz
[  311.328297][ T6048] usb 6-1: config 0 descriptor??
[  311.334529][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.357759][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.373941][ T9192] bridge_slave_0: entered allmulticast mode
[  311.396162][ T9192] bridge_slave_0: entered promiscuous mode
[  311.427996][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.454317][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.484659][ T9192] bridge_slave_1: entered allmulticast mode
[  311.499149][ T9192] bridge_slave_1: entered promiscuous mode
[  311.657295][ T9204] netlink: 76 bytes leftover after parsing attributes in process `syz.5.816'.
[  311.949701][ T5849] Bluetooth: hci5: command tx timeout
[  312.189705][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.224995][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.401294][ T9192] team0: Port device team_slave_0 added
[  312.421271][ T9192] team0: Port device team_slave_1 added
[  312.494319][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.504369][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.532457][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.545280][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.552527][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.580197][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.638028][ T9192] hsr_slave_0: entered promiscuous mode
[  312.645455][ T9192] hsr_slave_1: entered promiscuous mode
[  312.654725][ T9192] debugfs: 'hsr0' already exists in 'hsr'
[  312.663935][ T9192] Cannot create hsr debugfs directory
[  312.706288][ T9240] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[  312.714137][ T9240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.823'.
[  312.816730][ T9241] netlink: 'syz.2.821': attribute type 21 has an invalid length.
[  312.824940][ T9241] netlink: 128 bytes leftover after parsing attributes in process `syz.2.821'.
[  312.842557][ T9241] netlink: 'syz.2.821': attribute type 4 has an invalid length.
[  312.884767][ T9241] netlink: 3 bytes leftover after parsing attributes in process `syz.2.821'.
[  312.915896][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  312.975479][ T9241] batadv1: entered promiscuous mode
[  312.985136][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv1
[  313.017321][ T9249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'.
[  313.227576][ T5863] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  313.343614][ T9252] netlink: 136 bytes leftover after parsing attributes in process `syz.4.825'.
[  313.451671][ T9252] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  313.479607][ T9192] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  313.503095][ T9192] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  313.530992][ T9192] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  313.574425][ T9192] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  313.771541][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.791145][ T9192] 8021q: adding VLAN 0 to HW filter on device team0
[  313.824234][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.831376][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.906381][    T9] usb 6-1: USB disconnect, device number 3
[  314.030526][ T5863] Bluetooth: hci5: command tx timeout
[  314.118949][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.126117][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.312185][   T30] audit: type=1400 audit(1757660029.331:648): avc:  denied  { name_bind } for  pid=9269 comm="syz.5.829" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  314.675408][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.698757][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.833528][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.874294][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.300839][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.128719][ T5863] Bluetooth: hci5: command tx timeout
[  316.531778][ T9306] mkiss: ax0: crc mode is auto.
[  316.539937][ T6048] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  316.674752][ T9192] veth0_vlan: entered promiscuous mode
[  316.729248][ T6048] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  316.773220][ T9308] qnx6: unable to read the first superblock
[  317.006747][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.100260][ T6048] usb 5-1: config 0 has no interface number 0
[  317.101915][ T9192] veth1_vlan: entered promiscuous mode
[  317.150546][ T6048] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  317.170634][ T9192] veth0_macvtap: entered promiscuous mode
[  317.192558][ T9192] veth1_macvtap: entered promiscuous mode
[  317.194556][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.225224][ T6048] usb 5-1: Product: syz
[  317.233394][ T6048] usb 5-1: Manufacturer: syz
[  317.242225][ T6048] usb 5-1: SerialNumber: syz
[  317.264843][ T6048] usb 5-1: config 0 descriptor??
[  317.286874][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.375622][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.479529][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.713637][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.749384][   T30] audit: type=1400 audit(1757660032.781:649): avc:  denied  { connect } for  pid=9301 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  317.798404][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.824708][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.119237][ T6048] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  318.152616][ T6832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.183665][ T6048] usb 5-1: USB disconnect, device number 22
[  318.191101][ T5863] Bluetooth: hci5: command tx timeout
[  318.268478][ T6832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.465477][ T7802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.507038][   T30] audit: type=1400 audit(1757660033.531:650): avc:  denied  { ioctl } for  pid=9325 comm="syz.2.841" path="socket:[24905]" dev="sockfs" ino=24905 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  318.510280][ T7802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.588603][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.598317][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.913715][   T11] block nbd0: Possible stuck request ffff888026700540: control (read@0,1024B). Runtime 30 seconds
[  318.925804][   T11] block nbd0: Possible stuck request ffff888026700700: control (read@1024,1024B). Runtime 30 seconds
[  318.940620][   T11] block nbd0: Possible stuck request ffff8880267008c0: control (read@2048,1024B). Runtime 30 seconds
[  318.951827][   T11] block nbd0: Possible stuck request ffff888026700a80: control (read@3072,1024B). Runtime 30 seconds
[  319.012152][ T9339] netlink: 'syz.6.809': attribute type 1 has an invalid length.
[  319.020881][ T9339] netlink: 224 bytes leftover after parsing attributes in process `syz.6.809'.
[  319.049941][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'.
[  319.979249][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  320.158887][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.212084][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.252784][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  320.491490][   T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  320.512607][   T30] audit: type=1400 audit(1757660035.541:651): avc:  denied  { write } for  pid=9354 comm="syz.1.848" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  320.550084][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.575613][   T24] usb 6-1: config 0 descriptor??
[  320.776044][ T9358] netlink: 'syz.6.846': attribute type 13 has an invalid length.
[  320.784340][  T975] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  320.819309][ T9358] gretap0: refused to change device tx_queue_len
[  320.825782][ T9358] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  320.911679][ T9361] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 72
[  321.003099][  T975] usb 2-1: config 9 has an invalid interface number: 206 but max is 2
[  321.022370][  T975] usb 2-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config
[  321.033305][  T975] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 3
[  321.042554][   T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  321.067265][  T975] usb 2-1: config 9 has no interface number 0
[  321.079380][  T975] usb 2-1: config 9 interface 206 altsetting 64 endpoint 0x2 has invalid maxpacket 4215, setting to 8
[  321.125458][  T975] usb 2-1: config 9 interface 206 altsetting 64 has an invalid endpoint descriptor of length 3, skipping
[  321.200928][  T975] usb 2-1: config 9 interface 206 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  321.234580][ T5849] Bluetooth: hci5: command 0x0405 tx timeout
[  321.277711][  T975] usb 2-1: config 9 interface 206 has no altsetting 0
[  321.325152][  T975] usb 2-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=de.b2
[  321.372304][ T9365] trusted_key: encrypted_key: insufficient parameters specified
[  321.377511][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.465005][ T9365] netlink: 25 bytes leftover after parsing attributes in process `syz.4.850'.
[  321.562989][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.597492][  T975] usb 2-1: Product: ㊼씇䲋䉒⋑㇭벑劌全禇࿒댋㞞ꀠ꿽ୣ쟺郼宠羫鈄嘟ꩌझ꭯ଈ⎦翢Ⳃ뮚⽎닍᦮泮䱽윈ꃮ㭌該ꑂ鶢茚㺗싖熥焲듗煨ꈤ뛰핵끇銔䛩㨛Ⲽ䱊੣䐬럫ꉕ뀽Ո셹膫䉷맑ᙜ륔錖邨⾡ᶔ獛읾毛쨶畹Ⰽₘ얧厗뤵긻ꆹᦢ놵㣬풋䦵쀚伍㎁䳘
[  321.637841][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.662008][ T1656] usb 6-1: USB disconnect, device number 4
[  321.668500][  T975] usb 2-1: Manufacturer: 藾맹寰붔飵㢳ᆖଷج稦䭂啕⵴祧㄄➏恵ङ쒓Ꜵ岃鞹㹌暀剣౼篫讦㞛箊൥鱤㷑ⱊ衎묘躓讱瞅痢욧ⶦﯕ뇃婘쁊끩쵚蟰ꨪ⬨끽锁垣談洀ේ孾ੲ࠵⸆훽⛆벊凸챰⢤烦蟈뜚祉謜㽆丹䵪벃瘴闧楹붞馒걙髌
[  321.700853][  T975] usb 2-1: SerialNumber:  
[  321.926299][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.941382][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.973800][  T975] usb 2-1: bad CDC descriptors
[  322.045168][  T975] usb 2-1: USB disconnect, device number 21
[  322.117441][ T6048] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  322.203954][ T9378] nftables ruleset with unbound chain
[  322.300014][ T9384] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  322.752576][ T6048] usb 5-1: unable to read config index 0 descriptor/start: -61
[  322.830298][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.858'.
[  322.854868][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'.
[  323.213919][ T6048] usb 5-1: can't read configurations, error -61
[  323.308647][ T5849] Bluetooth: hci5: command 0x0405 tx timeout
[  323.480115][ T9390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=9390 comm=syz.6.859
[  323.522625][ T6048] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  324.317649][ T6048] usb 5-1: unable to read config index 0 descriptor/start: -61
[  324.340649][ T6048] usb 5-1: can't read configurations, error -61
[  324.372412][ T6048] usb usb5-port1: attempt power cycle
[  324.438487][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'.
[  324.498762][ T9411] loop2: detected capacity change from 0 to 7
[  324.509954][ T9411] Dev loop2: unable to read RDB block 7
[  324.531360][ T9411]  loop2: unable to read partition table
[  324.538512][ T9411] loop2: partition table beyond EOD, truncated
[  324.627562][ T9411] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  324.637440][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.866'.
[  324.817776][ T6048] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  324.860762][ T6048] usb 5-1: unable to read config index 0 descriptor/start: -61
[  324.914693][ T6048] usb 5-1: can't read configurations, error -61
[  325.227760][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  325.447415][    T9] usb 6-1: Using ep0 maxpacket: 16
[  325.683432][ T9425] netlink: 68 bytes leftover after parsing attributes in process `syz.2.870'.
[  325.684401][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.734093][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.745542][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  325.757656][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'.
[  325.788813][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  325.855913][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  325.878377][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  325.917652][    T9] usb 6-1: SerialNumber: syz
[  325.931713][    T9] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  326.298363][ T9435] netlink: 'syz.4.871': attribute type 5 has an invalid length.
[  326.613935][ T5916] usb 6-1: USB disconnect, device number 5
[  326.743963][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'.
[  326.776515][ T9439] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  326.788546][ T9439] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  326.828030][ T9442] macvlan2: entered promiscuous mode
[  326.833454][ T9442] macvlan2: entered allmulticast mode
[  326.839316][ T9442] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  327.017806][   T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  327.052333][ T9448] netlink: 'syz.6.876': attribute type 1 has an invalid length.
[  327.062176][ T9448] netlink: 224 bytes leftover after parsing attributes in process `syz.6.876'.
[  327.184081][ T9452] lo speed is unknown, defaulting to 1000
[  327.242535][   T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  327.251976][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.313316][   T24] usb 2-1: config 0 descriptor??
[  327.334758][   T24] cp210x 2-1:0.0: cp210x converter detected
[  327.894087][   T24] usb 2-1: cp210x converter now attached to ttyUSB0
[  328.092018][   T24] usb 2-1: USB disconnect, device number 22
[  328.147658][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  328.190496][    T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  328.192441][   T24] cp210x 2-1:0.0: device disconnected
[  328.350592][    T9] usb 6-1: config 17 has an invalid interface number: 255 but max is 0
[  328.367644][    T9] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  328.380596][    T9] usb 6-1: config 17 has no interface number 0
[  328.386819][    T9] usb 6-1: config 17 interface 255 has no altsetting 0
[  328.400076][    T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  328.417623][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.584599][    T9] aiptek 6-1:17.255: interface has no int in endpoints, but must have minimum 1
[  328.712373][    T9] usb 6-1: USB disconnect, device number 6
[  329.350735][   T30] audit: type=1400 audit(1757660043.981:652): avc:  denied  { bind } for  pid=9477 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  329.388760][   T30] audit: type=1400 audit(1757660044.031:653): avc:  denied  { listen } for  pid=9477 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  329.409449][   T30] audit: type=1400 audit(1757660044.041:654): avc:  denied  { connect } for  pid=9477 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  329.429262][   T30] audit: type=1400 audit(1757660044.101:655): avc:  denied  { write } for  pid=9477 comm="syz.1.884" path="socket:[25669]" dev="sockfs" ino=25669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  329.471891][   T30] audit: type=1400 audit(1757660044.101:656): avc:  denied  { accept } for  pid=9477 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  329.615899][   T30] audit: type=1400 audit(1757660044.641:657): avc:  denied  { mount } for  pid=9487 comm="syz.1.885" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  329.728981][   T30] audit: type=1400 audit(1757660044.671:658): avc:  denied  { search } for  pid=9487 comm="syz.1.885" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  330.561454][ T9502] lo speed is unknown, defaulting to 1000
[  331.318583][ T9511] lo speed is unknown, defaulting to 1000
[  332.488269][   T30] audit: type=1400 audit(1757660047.521:659): avc:  denied  { read } for  pid=9529 comm="syz.6.896" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  332.568113][   T30] audit: type=1400 audit(1757660047.521:660): avc:  denied  { open } for  pid=9529 comm="syz.6.896" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  332.854498][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.864577][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.514399][ T9565] lo speed is unknown, defaulting to 1000
[  334.697562][   T30] audit: type=1400 audit(1757660049.621:661): avc:  denied  { accept } for  pid=9561 comm="syz.6.905" lport=58986 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  334.975570][   T30] audit: type=1400 audit(1757660049.681:662): avc:  denied  { getopt } for  pid=9561 comm="syz.6.905" lport=58986 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  335.429484][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.6.907'.
[  336.353700][ T9578] netlink: 136 bytes leftover after parsing attributes in process `syz.1.908'.
[  336.387509][ T9578] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  336.824717][ T9588] loop9: detected capacity change from 0 to 7
[  336.840718][ T9588] buffer_io_error: 23 callbacks suppressed
[  336.840752][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.856366][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.866146][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.874913][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.884673][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.894655][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.904964][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.913686][ T9588] ldm_validate_partition_table(): Disk read failed.
[  336.921460][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.932826][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.942596][ T9588] Buffer I/O error on dev loop9, logical block 0, async page read
[  336.951958][ T9588] Dev loop9: unable to read RDB block 0
[  336.961613][ T9588]  loop9: unable to read partition table
[  336.968436][ T9588] loop9: partition table beyond EOD, truncated
[  336.974735][ T9588] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  336.974735][ T9588] 
) failed (rc=-5)
[  338.527551][  T975] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  340.313854][ T1656] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  341.316452][  T975] usb 7-1: device not accepting address 2, error -71
[  344.443153][ T9620] lo speed is unknown, defaulting to 1000
[  344.467663][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  344.631148][    T9] usb 2-1: Using ep0 maxpacket: 32
[  344.677220][    T9] usb 2-1: config 0 has an invalid interface number: 230 but max is 0
[  344.792835][    T9] usb 2-1: config 0 has no interface number 0
[  344.858013][    T9] usb 2-1: config 0 interface 230 has no altsetting 0
[  344.966834][    T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  344.968113][ T9632] overlayfs: missing 'lowerdir'
[  344.998100][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.027339][    T9] usb 2-1: Product: syz
[  345.042863][    T9] usb 2-1: Manufacturer: syz
[  345.048134][    T9] usb 2-1: SerialNumber: syz
[  345.491381][    T9] usb 2-1: config 0 descriptor??
[  345.593306][    T9] ums-usbat 2-1:0.230: USB Mass Storage device detected
[  345.866070][    T9] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  346.079040][   T30] audit: type=1400 audit(1757660061.111:663): avc:  denied  { watch } for  pid=9610 comm="syz.1.918" path="/185/file1" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  346.595263][ T9644] lo speed is unknown, defaulting to 1000
[  347.428012][ T9651] netlink: 'syz.4.927': attribute type 21 has an invalid length.
[  347.436096][ T9651] netlink: 128 bytes leftover after parsing attributes in process `syz.4.927'.
[  347.556457][ T9651] netlink: 'syz.4.927': attribute type 4 has an invalid length.
[  347.568544][ T9651] netlink: 3 bytes leftover after parsing attributes in process `syz.4.927'.
[  347.577909][ T1656] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  347.837633][ T1656] usb 6-1: Using ep0 maxpacket: 8
[  348.155681][ T1656] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  348.189630][ T1656] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.246875][ T1656] usb 6-1: config 0 has no interface number 0
[  348.286963][ T1656] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  348.307877][ T1656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.327052][ T1656] usb 6-1: Product: syz
[  348.397202][    T9] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5
[  348.411439][ T1656] usb 6-1: Manufacturer: syz
[  348.417006][ T1656] usb 6-1: SerialNumber: syz
[  348.437479][   T30] audit: type=1400 audit(1757660063.441:664): avc:  denied  { read write } for  pid=9656 comm="syz.1.930" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  348.437903][    T9] usb 2-1: USB disconnect, device number 24
[  348.471339][ T9658] loop6: detected capacity change from 0 to 524287487
[  348.479795][ T9658] buffer_io_error: 9 callbacks suppressed
[  348.479805][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.505432][   T30] audit: type=1400 audit(1757660063.441:665): avc:  denied  { open } for  pid=9656 comm="syz.1.930" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  348.508264][ T1656] usb 6-1: config 0 descriptor??
[  348.558210][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.566917][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.213530][ T1656] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  349.225718][   T11] block nbd0: Possible stuck request ffff888026700540: control (read@0,1024B). Runtime 60 seconds
[  349.237123][   T11] block nbd0: Possible stuck request ffff888026700700: control (read@1024,1024B). Runtime 60 seconds
[  349.248285][   T11] block nbd0: Possible stuck request ffff8880267008c0: control (read@2048,1024B). Runtime 60 seconds
[  349.260648][   T11] block nbd0: Possible stuck request ffff888026700a80: control (read@3072,1024B). Runtime 60 seconds
[  349.271796][ T1656] usb 6-1: No valid video chain found.
[  349.282468][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.289147][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.305217][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.315915][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.326334][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.334938][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.343258][ T9658] ldm_validate_partition_table(): Disk read failed.
[  349.350150][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.361455][ T9658] Buffer I/O error on dev loop6, logical block 0, async page read
[  349.364750][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.369760][ T9658] Dev loop6: unable to read RDB block 0
[  349.383111][ T9658]  loop6: unable to read partition table
[  349.413694][ T9658] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  349.555977][ T5220] ldm_validate_partition_table(): Disk read failed.
[  349.571744][ T5220] Dev loop6: unable to read RDB block 0
[  349.583317][ T5220]  loop6: unable to read partition table
[  350.164690][ T9684] loop2: detected capacity change from 0 to 7
[  350.181461][ T9684] Dev loop2: unable to read RDB block 7
[  350.192077][ T9684]  loop2: unable to read partition table
[  350.200914][ T9686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.938'.
[  350.210165][ T9684] loop2: partition table beyond EOD, truncated
[  350.218107][ T9684] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  350.925325][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'.
[  351.043169][ T9694] netlink: 'syz.4.942': attribute type 3 has an invalid length.
[  351.105091][ T9694] netlink: 152 bytes leftover after parsing attributes in process `syz.4.942'.
[  351.129255][ T9694] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  351.317538][ T1656] usb 6-1: USB disconnect, device number 7
[  351.379939][   T30] audit: type=1400 audit(1757660066.411:666): avc:  denied  { setopt } for  pid=9696 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  352.685993][ T9708] mkiss: ax0: crc mode is auto.
[  353.079982][ T9718] netlink: 204 bytes leftover after parsing attributes in process `syz.2.947'.
[  353.487458][ T5855] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  353.637452][ T5855] usb 5-1: device descriptor read/64, error -71
[  353.756294][   T30] audit: type=1400 audit(1757660068.741:667): avc:  denied  { read } for  pid=9723 comm="syz.1.951" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  353.762645][ T9733] netlink: 256 bytes leftover after parsing attributes in process `syz.6.953'.
[  353.851476][ T9733] netlink: 56 bytes leftover after parsing attributes in process `syz.6.953'.
[  353.880460][   T30] audit: type=1400 audit(1757660068.741:668): avc:  denied  { open } for  pid=9723 comm="syz.1.951" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  353.931013][ T5855] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  354.084961][   T30] audit: type=1400 audit(1757660068.741:669): avc:  denied  { ioctl } for  pid=9723 comm="syz.1.951" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  354.087484][ T5855] usb 5-1: device descriptor read/64, error -71
[  354.138180][ T9735] FAULT_INJECTION: forcing a failure.
[  354.138180][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.159081][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.6.954 Not tainted syzkaller #0 PREEMPT(full) 
[  354.159108][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  354.159118][ T9735] Call Trace:
[  354.159124][ T9735]  <TASK>
[  354.159130][ T9735]  dump_stack_lvl+0x16c/0x1f0
[  354.159159][ T9735]  should_fail_ex+0x512/0x640
[  354.159182][ T9735]  _copy_from_user+0x2e/0xd0
[  354.159205][ T9735]  memdup_user+0x6b/0xe0
[  354.159223][ T9735]  strndup_user+0x78/0xe0
[  354.159241][ T9735]  __x64_sys_mount+0x137/0x310
[  354.159261][ T9735]  ? __pfx___x64_sys_mount+0x10/0x10
[  354.159279][ T9735]  ? syscall_trace_enter+0x1cb/0x240
[  354.159298][ T9735]  ? rcu_is_watching+0x12/0xc0
[  354.159320][ T9735]  do_syscall_64+0xcd/0x4e0
[  354.159343][ T9735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.159358][ T9735] RIP: 0033:0x7f881c58eba9
[  354.159372][ T9735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.159386][ T9735] RSP: 002b:00007f881d454038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  354.159402][ T9735] RAX: ffffffffffffffda RBX: 00007f881c7d5fa0 RCX: 00007f881c58eba9
[  354.159413][ T9735] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000
[  354.159422][ T9735] RBP: 00007f881d454090 R08: 0000200000000200 R09: 0000000000000000
[  354.159431][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.159441][ T9735] R13: 00007f881c7d6038 R14: 00007f881c7d5fa0 R15: 00007ffd136f4098
[  354.159461][ T9735]  </TASK>
[  354.617660][ T5855] usb usb5-port1: attempt power cycle
[  354.747457][ T5849] Bluetooth: hci5: command 0x0405 tx timeout
[  354.965789][ T5855] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  355.148444][ T5855] usb 5-1: device descriptor read/8, error -71
[  355.637540][ T5855] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  355.678037][ T5855] usb 5-1: device descriptor read/8, error -71
[  355.945616][ T9756] lo speed is unknown, defaulting to 1000
[  356.017657][ T5855] usb usb5-port1: unable to enumerate USB device
[  356.345278][ T9759] lo speed is unknown, defaulting to 1000
[  357.464284][ T9768] lo speed is unknown, defaulting to 1000
[  359.398021][ T9788] netlink: 'syz.2.966': attribute type 21 has an invalid length.
[  359.476760][ T9788] netlink: 128 bytes leftover after parsing attributes in process `syz.2.966'.
[  359.654520][ T9788] netlink: 'syz.2.966': attribute type 4 has an invalid length.
[  359.655618][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.6.969'.
[  359.678386][ T9788] netlink: 3 bytes leftover after parsing attributes in process `syz.2.966'.
[  359.728487][ T5855] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  359.936606][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'.
[  359.951200][ T5855] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config
[  359.977104][ T5855] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  360.020961][ T5855] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  360.067740][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.429042][ T5855] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1
[  360.480907][ T5855] usb 5-1: USB disconnect, device number 31
[  361.482739][   T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  361.532473][ T9818] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  361.731805][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'.
[  361.755064][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'.
[  362.544476][   T24] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  362.560129][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  362.718319][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  362.834755][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.977'.
[  362.915117][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  362.976084][   T24] usb 2-1: SerialNumber: syz
[  363.008583][ T9811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  363.302347][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.342612][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.737894][   T30] audit: type=1400 audit(1757660078.761:670): avc:  denied  { map } for  pid=9830 comm="syz.2.981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  364.936650][ T1656] usb 2-1: USB disconnect, device number 25
[  365.083929][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'.
[  365.109402][ T9844] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  365.146572][ T9844] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  365.278936][ T9846] macvlan2: entered promiscuous mode
[  365.286932][ T9846] macvlan2: entered allmulticast mode
[  365.307578][ T9846] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  365.730389][ T9851] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  365.750611][ T9852] netlink: 'syz.1.985': attribute type 1 has an invalid length.
[  365.906758][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.984'.
[  365.924160][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.984'.
[  366.918508][ T9866] overlayfs: missing 'lowerdir'
[  366.956993][ T9868] lo speed is unknown, defaulting to 1000
[  367.104789][   T30] audit: type=1400 audit(1757660082.131:671): avc:  denied  { ioctl } for  pid=9859 comm="syz.1.989" path="socket:[27725]" dev="sockfs" ino=27725 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  367.214228][ T9867] netlink: 'syz.1.989': attribute type 10 has an invalid length.
[  367.374856][ T9867] batman_adv: batadv0: Adding interface: team0
[  367.381226][ T9867] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.406954][ T9867] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  367.656604][ T9878] netlink: 'syz.4.991': attribute type 1 has an invalid length.
[  367.664521][ T9878] netlink: 224 bytes leftover after parsing attributes in process `syz.4.991'.
[  368.195812][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'.
[  368.206307][ T9884] syz.6.993 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  368.619426][ T9895] qnx6: unable to read the first superblock
[  368.642733][ T9895] siw: device registration error -23
[  370.423921][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1005'.
[  370.453233][ T9919] netlink: 'syz.5.1005': attribute type 4 has an invalid length.
[  370.629486][   T30] audit: type=1400 audit(1757660085.651:672): avc:  denied  { create } for  pid=9920 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  370.684516][   T30] audit: type=1400 audit(1757660085.681:673): avc:  denied  { bind } for  pid=9920 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  370.838469][ T9933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.671787][   T30] audit: type=1326 audit(1757660086.661:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  371.727517][ T1656] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  371.768697][   T30] audit: type=1326 audit(1757660086.661:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  371.793536][   T30] audit: type=1326 audit(1757660086.661:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  371.835413][   T30] audit: type=1326 audit(1757660086.661:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  371.862242][   T30] audit: type=1326 audit(1757660086.661:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  371.904124][   T30] audit: type=1326 audit(1757660086.661:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  371.936347][ T1656] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  371.969862][ T1656] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.030718][ T1656] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  372.052563][   T30] audit: type=1326 audit(1757660086.661:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  372.076256][ T1656] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  372.092302][   T30] audit: type=1326 audit(1757660086.661:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7ffc0000
[  372.118308][ T1656] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  372.127930][ T1656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.136037][ T1656] usb 6-1: Product: syz
[  372.145326][ T5863] Bluetooth: hci5: link tx timeout
[  372.151311][ T5863] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  372.163338][ T5863] Bluetooth: hci5: link tx timeout
[  372.168660][ T5863] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  372.256356][ T1656] usb 6-1: Manufacturer: syz
[  372.262329][ T1656] usb 6-1: SerialNumber: syz
[  372.785367][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  373.605989][   T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  373.640711][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.662077][   T10] usb 2-1: Product: syz
[  373.673504][   T10] usb 2-1: Manufacturer: syz
[  373.759484][   T10] usb 2-1: SerialNumber: syz
[  374.184875][ T9948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=9948 comm=syz.1.1016
[  374.232390][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  374.249771][ T9978] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1021'.
[  374.270377][ T5862] Bluetooth: hci5: command 0x0405 tx timeout
[  374.366400][ T9972] netlink: 'syz.1.1016': attribute type 30 has an invalid length.
[  374.403383][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  374.446385][ T9948] netlink: 'syz.1.1016': attribute type 30 has an invalid length.
[  374.476502][ T7811] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.499996][ T7811] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.533481][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1023'.
[  374.769475][ T7811] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  375.178483][ T7811] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  375.209085][   T10] rtl8150 2-1:1.0: couldn't reset the device
[  375.231051][   T10] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  375.259501][ T1656] usb 6-1: USB disconnect, device number 8
[  375.272052][   T10] usb 2-1: USB disconnect, device number 26
[  375.544451][ T9993] qnx6: unable to read the first superblock
[  375.639680][ T9994] siw: device registration error -23
[  375.972602][ T9996] FAULT_INJECTION: forcing a failure.
[  375.972602][ T9996] name failslab, interval 1, probability 0, space 0, times 0
[  376.009034][ T7751] udevd[7751]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.064214][ T9996] CPU: 0 UID: 0 PID: 9996 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) 
[  376.064243][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  376.064253][ T9996] Call Trace:
[  376.064259][ T9996]  <TASK>
[  376.064266][ T9996]  dump_stack_lvl+0x16c/0x1f0
[  376.064294][ T9996]  should_fail_ex+0x512/0x640
[  376.064316][ T9996]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  376.064345][ T9996]  should_failslab+0xc2/0x120
[  376.064364][ T9996]  __kmalloc_cache_noprof+0x6a/0x3e0
[  376.064390][ T9996]  ? copy_mount_options+0x55/0x190
[  376.064415][ T9996]  ? _copy_from_user+0x59/0xd0
[  376.064443][ T9996]  copy_mount_options+0x55/0x190
[  376.064469][ T9996]  __x64_sys_mount+0x1ac/0x310
[  376.064491][ T9996]  ? __pfx___x64_sys_mount+0x10/0x10
[  376.064517][ T9996]  ? syscall_trace_enter+0x1cb/0x240
[  376.064539][ T9996]  ? rcu_is_watching+0x12/0xc0
[  376.064563][ T9996]  do_syscall_64+0xcd/0x4e0
[  376.064588][ T9996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.064605][ T9996] RIP: 0033:0x7f62c3f8eba9
[  376.064618][ T9996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.064635][ T9996] RSP: 002b:00007f62c4e40038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  376.064651][ T9996] RAX: ffffffffffffffda RBX: 00007f62c41d5fa0 RCX: 00007f62c3f8eba9
[  376.064662][ T9996] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000
[  376.064673][ T9996] RBP: 00007f62c4e40090 R08: 0000200000000200 R09: 0000000000000000
[  376.064683][ T9996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.064692][ T9996] R13: 00007f62c41d6038 R14: 00007f62c41d5fa0 R15: 00007ffe2f9e3fc8
[  376.064716][ T9996]  </TASK>
[  376.422755][ T5862] Bluetooth: hci5: command 0x0405 tx timeout
[  376.585877][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1029'.
[  376.597596][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1029'.
[  376.709309][T10012] loop6: detected capacity change from 0 to 524287487
[  376.733776][ T7751] buffer_io_error: 24 callbacks suppressed
[  376.733789][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.828709][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.862318][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.885000][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.904437][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.912902][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.923199][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.932528][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.940929][ T7751] ldm_validate_partition_table(): Disk read failed.
[  376.948750][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  376.988191][ T7751] Buffer I/O error on dev loop6, logical block 0, async page read
[  377.008031][ T7751] Dev loop6: unable to read RDB block 0
[  377.020797][ T7751]  loop6: unable to read partition table
[  377.032315][T10012] ldm_validate_partition_table(): Disk read failed.
[  377.040354][T10012] Dev loop6: unable to read RDB block 0
[  377.046614][T10012]  loop6: unable to read partition table
[  377.151047][T10012] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  377.343065][ T5220] ldm_validate_partition_table(): Disk read failed.
[  377.365470][ T5220] Dev loop6: unable to read RDB block 0
[  377.405230][ T5220]  loop6: unable to read partition table
[  378.499201][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  378.509207][ T5862] Bluetooth: hci5: command 0x0405 tx timeout
[  379.402648][T10053] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1038'.
[  379.520956][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'.
[  379.717064][   T11] block nbd0: Possible stuck request ffff888026700540: control (read@0,1024B). Runtime 90 seconds
[  379.729244][   T11] block nbd0: Possible stuck request ffff888026700700: control (read@1024,1024B). Runtime 90 seconds
[  379.742969][   T11] block nbd0: Possible stuck request ffff8880267008c0: control (read@2048,1024B). Runtime 90 seconds
[  379.754095][   T11] block nbd0: Possible stuck request ffff888026700a80: control (read@3072,1024B). Runtime 90 seconds
[  380.279484][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1040'.
[  380.614948][T10075] loop2: detected capacity change from 0 to 7
[  380.657632][T10075]  loop2:
[  380.676778][T10075] loop2: partition table partially beyond EOD, truncated
[  380.727739][ T6048] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  380.899084][ T6048] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  380.917284][ T6048] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.932146][ T6048] usb 6-1: config 0 has no interface number 0
[  380.947545][ T6048] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  380.966247][ T6048] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.015497][ T6048] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  381.034958][ T6048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.064927][ T6048] usb 6-1: Product: syz
[  381.077883][ T6048] usb 6-1: Manufacturer: syz
[  381.104443][ T6048] usb 6-1: SerialNumber: syz
[  381.126901][ T6048] usb 6-1: config 0 descriptor??
[  381.173650][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  381.173667][   T30] audit: type=1326 audit(1757660096.201:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f8eba9 code=0x7fc00000
[  381.376797][T10072] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1041'.
[  381.661036][   T30] audit: type=1326 audit(1757660096.691:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62c3f8eba9 code=0x7fc00000
[  381.981465][T10111] lo speed is unknown, defaulting to 1000
[  382.018220][T10114] loop6: detected capacity change from 0 to 6
[  382.075056][T10114] Dev loop6: unable to read RDB block 6
[  382.102907][T10114]  loop6: unable to read partition table
[  382.127021][T10114] loop6: partition table beyond EOD, truncated
[  382.200555][T10114] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  384.443829][ T1656] usb 6-1: USB disconnect, device number 9
[  384.500434][   T30] audit: type=1400 audit(1757660099.531:714): avc:  denied  { getopt } for  pid=10136 comm="syz.5.1057" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  384.531350][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'.
[  385.220477][T10148] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  385.228387][T10148] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1058'.
[  385.278885][   T30] audit: type=1400 audit(1757660099.841:715): avc:  denied  { create } for  pid=10139 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  385.300726][   T30] audit: type=1400 audit(1757660099.851:716): avc:  denied  { write } for  pid=10139 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  386.215945][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.226185][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.773233][T10170] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[  386.776481][T10171] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1064'.
[  387.624953][   T30] audit: type=1400 audit(1757660102.651:717): avc:  denied  { open } for  pid=10182 comm="syz.1.1068" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  387.659533][   T30] audit: type=1400 audit(1757660102.691:718): avc:  denied  { ioctl } for  pid=10182 comm="syz.1.1068" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  387.728685][   T30] audit: type=1400 audit(1757660102.751:719): avc:  denied  { connect } for  pid=10182 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  387.777885][   T30] audit: type=1400 audit(1757660102.811:720): avc:  denied  { read } for  pid=10182 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  387.862683][   T30] audit: type=1400 audit(1757660102.891:721): avc:  denied  { write } for  pid=10182 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  387.912399][   T30] audit: type=1400 audit(1757660102.941:722): avc:  denied  { ioctl } for  pid=10182 comm="syz.1.1068" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  388.120191][T10189] befs: (nullb0): No write support. Marking filesystem read-only
[  388.158451][   T30] audit: type=1400 audit(1757660103.051:723): avc:  denied  { create } for  pid=10187 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  388.179764][   T30] audit: type=1400 audit(1757660103.121:724): avc:  denied  { mounton } for  pid=10187 comm="syz.6.1069" path="/51/bus" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  388.290588][T10190] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1069'.
[  388.292284][T10189] befs: (nullb0): invalid magic header
[  388.310697][   T30] audit: type=1400 audit(1757660103.321:725): avc:  denied  { write } for  pid=10187 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  388.500267][T10185] lo speed is unknown, defaulting to 1000
[  388.600987][   T30] audit: type=1400 audit(1757660103.321:726): avc:  denied  { nlmsg_write } for  pid=10187 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  388.731008][T10197] netlink: 'syz.4.1071': attribute type 1 has an invalid length.
[  389.508404][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.517086][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.529717][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.538451][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.120477][T10223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10223 comm=syz.6.1072
[  391.183002][T10214] bridge0: port 3(dummy0) entered disabled state
[  391.189515][T10214] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.196670][T10214] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.641599][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  391.828865][T10231] sysfs: Unknown parameter 'trans'
[  391.845767][T10231] overlay: filesystem on ./file1 is read-only
[  392.278416][T10214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.299163][T10214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.772135][T10216] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  392.908529][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  393.082986][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  393.887674][ T3171] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.946493][ T3171] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.960283][T10243] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  394.412508][ T3171] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.423530][ T3171] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.464702][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'.
[  394.547991][T10269] FAULT_INJECTION: forcing a failure.
[  394.547991][T10269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.568809][T10269] CPU: 1 UID: 0 PID: 10269 Comm: syz.2.1087 Not tainted syzkaller #0 PREEMPT(full) 
[  394.568835][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  394.568845][T10269] Call Trace:
[  394.568851][T10269]  <TASK>
[  394.568857][T10269]  dump_stack_lvl+0x16c/0x1f0
[  394.568886][T10269]  should_fail_ex+0x512/0x640
[  394.568912][T10269]  _copy_from_user+0x2e/0xd0
[  394.568939][T10269]  copy_mount_options+0x76/0x190
[  394.568967][T10269]  __x64_sys_mount+0x1ac/0x310
[  394.568989][T10269]  ? __pfx___x64_sys_mount+0x10/0x10
[  394.569008][T10269]  ? syscall_trace_enter+0x1cb/0x240
[  394.569031][T10269]  ? rcu_is_watching+0x12/0xc0
[  394.569055][T10269]  do_syscall_64+0xcd/0x4e0
[  394.569080][T10269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.569097][T10269] RIP: 0033:0x7ff620f8eba9
[  394.569111][T10269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.569128][T10269] RSP: 002b:00007ff621daa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  394.569145][T10269] RAX: ffffffffffffffda RBX: 00007ff6211d5fa0 RCX: 00007ff620f8eba9
[  394.569156][T10269] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000
[  394.569166][T10269] RBP: 00007ff621daa090 R08: 0000200000000200 R09: 0000000000000000
[  394.569177][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.569186][T10269] R13: 00007ff6211d6038 R14: 00007ff6211d5fa0 R15: 00007ffe90742de8
[  394.569208][T10269]  </TASK>
[  394.572391][T10269] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[  395.024642][T10276] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1089'.
[  395.186403][T10278] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  395.187668][T10276] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  395.868066][ T5862] Bluetooth: hci4: command 0x0405 tx timeout
[  396.379186][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  396.379202][   T30] audit: type=1400 audit(1757660111.401:729): avc:  denied  { write } for  pid=10282 comm="syz.5.1093" path="socket:[28548]" dev="sockfs" ino=28548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  396.419105][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1092'.
[  396.475834][T10288] netlink: 'syz.2.1095': attribute type 9 has an invalid length.
[  396.589515][T10295] 9pnet_fd: Insufficient options for proto=fd
[  396.996117][T10302] C: renamed from team_slave_0 (while UP)
[  397.311776][T10302] netlink: 'syz.2.1099': attribute type 3 has an invalid length.
[  398.317614][T10302] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1099'.
[  398.383072][T10302] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  398.481102][T10319] overlayfs: missing 'lowerdir'
[  398.522020][T10320] netlink: 'syz.2.1105': attribute type 1 has an invalid length.
[  399.874955][T10341] geneve2: entered promiscuous mode
[  400.178860][T10350] tmpfs: Unknown parameter 'quot�a��T�'
[  400.265063][T10350] overlayfs: missing 'lowerdir'
[  400.478235][   T30] audit: type=1400 audit(1757660115.511:730): avc:  denied  { getattr } for  pid=10345 comm="syz.6.1112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  401.367636][ T5855] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  401.453949][T10372] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  402.174344][ T5855] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  402.185297][ T5855] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  402.468339][ T5855] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 255, setting to 64
[  402.506312][ T5855] usb 5-1: config 0 interface 0 has no altsetting 0
[  402.529363][ T5855] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  402.539197][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.547652][ T5855] usb 5-1: Product: syz
[  402.551940][ T5855] usb 5-1: Manufacturer: syz
[  402.556520][ T5855] usb 5-1: SerialNumber: syz
[  402.757989][   T30] audit: type=1326 audit(1757660117.751:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  402.924131][ T5855] usb 5-1: config 0 descriptor??
[  402.981772][T10357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  403.054035][   T30] audit: type=1326 audit(1757660117.751:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  403.096080][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'.
[  403.287740][T10357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  403.329458][ T5855] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13
[  403.709054][   T30] audit: type=1326 audit(1757660117.751:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  403.844970][ T5855] usb 5-1: USB disconnect, device number 32
[  403.845004][    C1] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[  404.022986][   T30] audit: type=1326 audit(1757660117.751:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  404.077691][   T30] audit: type=1326 audit(1757660117.751:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  404.202545][T10402] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1124'.
[  404.322369][   T30] audit: type=1326 audit(1757660117.751:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  404.420519][T10379] syz.6.1115 (10379): drop_caches: 2
[  404.459783][   T30] audit: type=1326 audit(1757660117.751:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  404.572274][   T30] audit: type=1326 audit(1757660117.751:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  404.601308][   T30] audit: type=1326 audit(1757660117.751:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  404.676120][   T30] audit: type=1326 audit(1757660117.751:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff620f8eba9 code=0x7ffc0000
[  405.137283][T10417] netlink: 'syz.5.1126': attribute type 21 has an invalid length.
[  405.145367][T10417] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1126'.
[  405.186334][T10417] netlink: 'syz.5.1126': attribute type 4 has an invalid length.
[  405.196454][T10417] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1126'.
[  405.257732][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  405.429453][   T10] usb 7-1: config 0 has an invalid interface number: 117 but max is 0
[  405.463901][T10421] overlayfs: workdir and upperdir must reside under the same mount
[  406.195943][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.206923][   T10] usb 7-1: config 0 has no interface number 0
[  406.214690][   T10] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  406.224656][   T10] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  406.248211][   T10] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  406.258033][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.266007][   T10] usb 7-1: Product: syz
[  406.270320][   T10] usb 7-1: Manufacturer: syz
[  406.274969][   T10] usb 7-1: SerialNumber: syz
[  406.300046][   T10] usb 7-1: config 0 descriptor??
[  406.551223][T10415] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1127'.
[  406.794019][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'.
[  406.843741][T10432] openvswitch: netlink: nsh attr 0 has unexpected len 8 expected 0
[  406.863628][T10432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.863643][T10434] netlink: 'syz.4.1132': attribute type 1 has an invalid length.
[  407.535757][T10440] 9pnet_fd: Insufficient options for proto=fd
[  407.781689][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  407.781706][   T30] audit: type=1400 audit(1757660122.811:775): avc:  denied  { setopt } for  pid=10441 comm="syz.1.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  407.893224][   T30] audit: type=1400 audit(1757660122.811:776): avc:  denied  { setattr } for  pid=10441 comm="syz.1.1135" name="NETLINK" dev="sockfs" ino=29360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  408.547653][T10465] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1139'.
[  408.633487][   T10] usb 7-1: USB disconnect, device number 4
[  409.430877][T10485] 9pnet_fd: Insufficient options for proto=fd
[  409.787875][   T11] block nbd0: Possible stuck request ffff888026700540: control (read@0,1024B). Runtime 120 seconds
[  409.799087][   T11] block nbd0: Possible stuck request ffff888026700700: control (read@1024,1024B). Runtime 120 seconds
[  409.810604][   T11] block nbd0: Possible stuck request ffff8880267008c0: control (read@2048,1024B). Runtime 120 seconds
[  409.822024][   T11] block nbd0: Possible stuck request ffff888026700a80: control (read@3072,1024B). Runtime 120 seconds
[  409.964110][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1146'.
[  411.940813][T10518] FAULT_INJECTION: forcing a failure.
[  411.940813][T10518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  411.956448][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.2.1155 Not tainted syzkaller #0 PREEMPT(full) 
[  411.956476][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  411.956486][T10518] Call Trace:
[  411.956492][T10518]  <TASK>
[  411.956499][T10518]  dump_stack_lvl+0x16c/0x1f0
[  411.956528][T10518]  should_fail_ex+0x512/0x640
[  411.956555][T10518]  _copy_from_user+0x2e/0xd0
[  411.956582][T10518]  copy_msghdr_from_user+0x98/0x160
[  411.956605][T10518]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  411.956631][T10518]  ? lockdep_hardirqs_on+0x7c/0x110
[  411.956660][T10518]  ___sys_sendmsg+0xfe/0x1d0
[  411.956683][T10518]  ? __pfx____sys_sendmsg+0x10/0x10
[  411.956735][T10518]  __sys_sendmsg+0x16d/0x220
[  411.956757][T10518]  ? __pfx___sys_sendmsg+0x10/0x10
[  411.956796][T10518]  do_syscall_64+0xcd/0x4e0
[  411.956820][T10518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.956838][T10518] RIP: 0033:0x7ff620f8eba9
[  411.956852][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.956868][T10518] RSP: 002b:00007ff621d89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  411.956884][T10518] RAX: ffffffffffffffda RBX: 00007ff6211d6090 RCX: 00007ff620f8eba9
[  411.956895][T10518] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000007
[  411.956905][T10518] RBP: 00007ff621d89090 R08: 0000000000000000 R09: 0000000000000000
[  411.956914][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.956924][T10518] R13: 00007ff6211d6128 R14: 00007ff6211d6090 R15: 00007ffe90742de8
[  411.956947][T10518]  </TASK>
[  412.285670][T10520] 9pnet_fd: Insufficient options for proto=fd
[  412.681364][   T30] audit: type=1400 audit(1757660127.711:777): avc:  denied  { read } for  pid=10525 comm="syz.5.1158" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  412.739005][T10529] 8021q: adding VLAN 0 to HW filter on device bond4
[  412.761938][   T30] audit: type=1400 audit(1757660127.711:778): avc:  denied  { open } for  pid=10525 comm="syz.5.1158" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  412.968883][T10533] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  414.326383][   T30] audit: type=1400 audit(1757660129.351:779): avc:  denied  { ioctl } for  pid=10525 comm="syz.5.1158" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  414.607606][T10547] netlink: 'syz.5.1158': attribute type 10 has an invalid length.
[  414.625066][T10547] team0: Device hsr_slave_0 failed to register rx_handler
[  415.037784][   T30] audit: type=1400 audit(1757660130.041:780): avc:  denied  { mount } for  pid=10550 comm="syz.2.1165" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  416.462860][T10578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10578 comm=syz.1.1168
[  416.715735][   T30] audit: type=1400 audit(1757660131.731:781): avc:  denied  { read } for  pid=10550 comm="syz.2.1165" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  417.812438][T10551] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  417.897699][T10551] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  417.909847][T10551] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  417.919352][T10551] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  417.947524][T10551] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  417.970118][T10551] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  418.015325][T10551] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  418.089325][T10551] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  418.102323][T10551] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  418.881801][ T5863] Bluetooth: hci0: command 0x0406 tx timeout
[  418.910619][   T30] audit: type=1400 audit(1757660133.521:782): avc:  denied  { write } for  pid=10595 comm="syz.2.1174" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  419.388264][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  420.077474][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  420.083760][ T5863] Bluetooth: hci3: command 0x0406 tx timeout
[  420.091544][ T5863] Bluetooth: hci1: command 0x0405 tx timeout
[  420.108049][ T5862] Bluetooth: hci5: command 0x0405 tx timeout
[  420.907430][ T5863] Bluetooth: hci0: command 0x0406 tx timeout
[  421.554966][T10614] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.563281][T10614] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.127801][T10631] qnx6: unable to read the first superblock
[  422.137044][T10631] siw: device registration error -23
[  422.158162][ T5862] Bluetooth: hci3: command 0x0406 tx timeout
[  422.164393][ T5863] Bluetooth: hci1: command 0x0405 tx timeout
[  422.672915][T10614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.685151][T10614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.937095][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'.
[  423.736155][T10643] netlink: 'syz.4.1186': attribute type 1 has an invalid length.
[  423.744137][T10643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1186'.
[  424.094831][T10636] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up
[  424.187522][ T5863] Bluetooth: hci1: command 0x0405 tx timeout
[  424.380955][ T3171] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.819813][ T3171] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.842395][ T6025] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.874025][ T6025] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.910404][ T6025] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  424.927387][ T6025] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.955557][ T6832] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  425.037406][ T6832] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.175249][T10664] 9pnet_fd: Insufficient options for proto=fd
[  425.358068][T10669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.368980][T10669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.420104][   T30] audit: type=1400 audit(1757660140.451:783): avc:  denied  { create } for  pid=10657 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  425.491218][   T30] audit: type=1400 audit(1757660140.451:784): avc:  denied  { ioctl } for  pid=10657 comm="syz.1.1189" path="socket:[30288]" dev="sockfs" ino=30288 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  427.318752][T10689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10689 comm=syz.4.1199
[  427.473326][T10689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10689 comm=syz.4.1199
[  428.007633][T10695] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1200'.
[  428.136600][T10695] 8021q: adding VLAN 0 to HW filter on device bond1
[  428.298904][T10696] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  428.556418][T10704] qnx6: unable to read the first superblock
[  428.574114][T10704] siw: device registration error -23
[  429.694722][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1204'.
[  429.851055][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'.
[  430.003602][T10721] netlink: 'syz.5.1206': attribute type 1 has an invalid length.
[  430.940032][T10729] loop2: detected capacity change from 0 to 7
[  430.961859][T10729]  loop2:
[  430.975439][T10729] loop2: partition table partially beyond EOD, truncated
[  431.674457][T10740] loop9: detected capacity change from 0 to 7
[  431.688567][T10740] buffer_io_error: 39 callbacks suppressed
[  431.688602][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.703801][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.712195][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.720825][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.731316][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.739898][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.749624][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.759595][T10740] ldm_validate_partition_table(): Disk read failed.
[  431.767481][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.776898][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.785942][T10740] Buffer I/O error on dev loop9, logical block 0, async page read
[  431.796364][T10740] Dev loop9: unable to read RDB block 0
[  431.806798][T10740]  loop9: unable to read partition table
[  431.814443][T10740] loop9: partition table beyond EOD, truncated
[  431.821323][T10740] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  431.821323][T10740] 
) failed (rc=-5)
[  432.923532][T10759] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.1216'.
[  433.505140][T10765] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1215'.
[  433.545828][T10767] netlink: 'syz.6.1218': attribute type 1 has an invalid length.
[  434.593473][T10781] overlayfs: missing 'lowerdir'
[  434.730651][   T30] audit: type=1400 audit(1757660149.661:785): avc:  denied  { map } for  pid=10775 comm="syz.1.1220" path="socket:[31022]" dev="sockfs" ino=31022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  434.772687][   T30] audit: type=1400 audit(1757660149.661:786): avc:  denied  { read } for  pid=10775 comm="syz.1.1220" path="socket:[31022]" dev="sockfs" ino=31022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  434.880672][   T30] audit: type=1400 audit(1757660149.901:787): avc:  denied  { bind } for  pid=10779 comm="syz.6.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  435.131261][T10789] hub 9-0:1.0: USB hub found
[  435.150039][   T30] audit: type=1400 audit(1757660150.151:788): avc:  denied  { getopt } for  pid=10786 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  435.173451][T10789] hub 9-0:1.0: 1 port detected
[  435.386424][   T30] audit: type=1326 audit(1757660150.411:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c58eba9 code=0x7fc00000
[  435.479342][   T30] audit: type=1326 audit(1757660150.411:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.6.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c58eba9 code=0x7fc00000
[  435.507455][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'.
[  435.569354][T10798] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  435.582107][T10798] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  435.999444][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1226'.
[  436.197185][T10813] netlink: 'syz.4.1229': attribute type 19 has an invalid length.
[  436.342269][T10818] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  436.504710][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'.
[  436.907561][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  437.337564][   T24] usb 7-1: Using ep0 maxpacket: 16
[  437.354810][   T24] usb 7-1: config 0 has an invalid interface number: 66 but max is 0
[  437.397477][   T24] usb 7-1: config 0 has no interface number 0
[  437.506988][   T24] usb 7-1: config 0 interface 66 has no altsetting 0
[  437.520314][   T24] usb 7-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36
[  437.530899][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.542614][   T24] usb 7-1: Product: syz
[  437.546807][   T24] usb 7-1: Manufacturer: syz
[  437.551974][   T24] usb 7-1: SerialNumber: syz
[  437.964704][   T24] usb 7-1: config 0 descriptor??
[  438.461457][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.478099][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.719509][T10842] input: syz1 as /devices/virtual/input/input15
[  439.237450][ T5964] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  439.418109][ T5964] usb 5-1: Using ep0 maxpacket: 8
[  439.425995][ T5964] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  439.450906][ T5964] usb 5-1: config 0 has no interface number 0
[  439.488431][ T5964] usb 5-1: config 0 interface 21 has no altsetting 0
[  439.555665][ T5964] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=ae.fb
[  439.565085][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.595880][ T5964] usb 5-1: Product: syz
[  439.628759][ T5964] usb 5-1: Manufacturer: syz
[  439.644860][ T5964] usb 5-1: SerialNumber: syz
[  439.688341][ T5964] usb 5-1: config 0 descriptor??
[  439.780067][ T5964] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  439.808158][ T6048] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  439.876021][   T11] block nbd0: Possible stuck request ffff888026700540: control (read@0,1024B). Runtime 150 seconds
[  439.887206][   T11] block nbd0: Possible stuck request ffff888026700700: control (read@1024,1024B). Runtime 150 seconds
[  439.898728][   T11] block nbd0: Possible stuck request ffff8880267008c0: control (read@2048,1024B). Runtime 150 seconds
[  439.910087][   T11] block nbd0: Possible stuck request ffff888026700a80: control (read@3072,1024B). Runtime 150 seconds
[  439.921916][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  440.081733][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1240'.
[  440.107691][ T6048] usb 2-1: Using ep0 maxpacket: 16
[  440.120414][T10858] fuse: Bad value for 'fd'
[  440.405758][   T24] belkin_sa 7-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  440.476147][ T6048] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  440.492616][   T24] usb 7-1: bcdDevice: 6636, bfc: 0
[  440.500589][ T6048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.513310][   T24] usb 7-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  440.523468][ T6048] usb 2-1: Product: syz
[  440.534603][ T6048] usb 2-1: Manufacturer: syz
[  440.558969][ T6048] usb 2-1: SerialNumber: syz
[  440.577477][   T24] usb 7-1: USB disconnect, device number 5
[  440.598121][ T6048] usb 2-1: config 0 descriptor??
[  440.705088][   T24] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  440.719073][ T6048] hub 2-1:0.0: bad descriptor, ignoring hub
[  440.737402][ T6048] hub 2-1:0.0: probe with driver hub failed with error -5
[  440.749540][   T24] belkin_sa 7-1:0.66: device disconnected
[  441.150047][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1244'.
[  442.016338][ T1656] usb 5-1: USB disconnect, device number 33
[  442.039996][T10866] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.047624][T10866] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.475241][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.500531][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.756252][T10878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1237'.
[  442.767792][ T3532] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.858314][ T3532] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.889266][T10885] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1247'.
[  442.902251][ T3532] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.923338][T10885] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1247'.
[  442.955220][ T3532] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.037791][ T1656] usb 2-1: USB disconnect, device number 27
[  443.331164][T10897] bridge1: entered promiscuous mode
[  444.084846][T10906] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.092204][T10906] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.507221][T10912] netlink: 'syz.6.1257': attribute type 1 has an invalid length.
[  444.684897][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'.
[  444.969828][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.030402][T10906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.057848][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.254166][T10906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.627581][   T31] INFO: task syz.0.764:8989 blocked for more than 143 seconds.
[  445.653242][   T31]       Not tainted syzkaller #0
[  445.663981][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  445.672972][   T31] task:syz.0.764       state:D stack:27016 pid:8989  tgid:8985  ppid:5852   task_flags:0x400140 flags:0x00004004
[  445.686303][   T31] Call Trace:
[  445.689898][   T31]  <TASK>
[  445.692905][   T31]  __schedule+0x1190/0x5de0
[  445.697639][   T31]  ? __pfx___schedule+0x10/0x10
[  445.702597][   T31]  ? find_held_lock+0x2b/0x80
[  445.707980][   T31]  ? schedule+0x2d7/0x3a0
[  445.712417][   T31]  ? bdev_open+0xa2/0xe40
[  445.716802][   T31]  schedule+0xe7/0x3a0
[  445.721891][   T31]  schedule_preempt_disabled+0x13/0x30
[  445.731581][   T31]  __mutex_lock+0x81b/0x1060
[  445.739585][   T31]  ? bdev_open+0xa2/0xe40
[  445.751629][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  445.772342][   T31]  ? bd_prepare_to_claim+0x1e0/0x280
[  445.779949][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  445.785736][   T31]  ? bdev_open+0xa2/0xe40
[  445.793964][   T31]  bdev_open+0xa2/0xe40
[  445.798864][   T31]  bdev_file_open_by_dev+0x182/0x210
[  445.804338][   T31]  setup_bdev_super+0x39b/0x730
[  445.814530][   T31]  get_tree_bdev_flags+0x363/0x620
[  445.820999][   T31]  ? __pfx_gfs2_fill_super+0x10/0x10
[  445.826496][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  445.835590][   T31]  ? cap_capable+0xb3/0x250
[  445.841878][   T31]  gfs2_get_tree+0x4e/0x280
[  445.846507][   T31]  vfs_get_tree+0x8e/0x340
[  445.858908][   T31]  path_mount+0x1513/0x2000
[  445.865776][   T31]  ? __pfx_path_mount+0x10/0x10
[  445.876780][   T31]  ? kmem_cache_free+0x2d1/0x4d0
[  445.885345][   T31]  ? putname+0x154/0x1a0
[  445.892205][   T31]  ? putname+0x154/0x1a0
[  445.896639][   T31]  ? __x64_sys_mount+0x28d/0x310
[  445.903255][   T31]  __x64_sys_mount+0x28d/0x310
[  445.910563][   T31]  ? __pfx___x64_sys_mount+0x10/0x10
[  445.916086][   T31]  do_syscall_64+0xcd/0x4e0
[  445.922471][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.928558][   T31] RIP: 0033:0x7f28b178eba9
[  445.933068][   T31] RSP: 002b:00007f28b26d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  445.941981][   T31] RAX: ffffffffffffffda RBX: 00007f28b19d6090 RCX: 00007f28b178eba9
[  445.950551][   T31] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000200000000140
[  445.958606][   T31] RBP: 00007f28b1811e19 R08: 0000000000000000 R09: 0000000000000000
[  445.966702][   T31] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000000
[  445.974861][   T31] R13: 00007f28b19d6128 R14: 00007f28b19d6090 R15: 00007ffee4008f58
[  445.983568][   T31]  </TASK>
[  445.986682][   T31] 
[  445.986682][   T31] Showing all locks held in the system:
[  445.994487][   T31] 1 lock held by rcu_exp_gp_kthr/18:
[  446.000449][   T31]  #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  446.010755][   T31] 3 locks held by kworker/1:0/24:
[  446.015839][   T31] 1 lock held by khungtaskd/31:
[  446.020923][   T31]  #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  446.031026][   T31] 3 locks held by kworker/0:2/1656:
[  446.036234][   T31]  #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  446.047093][   T31]  #1: ffffc90004f1fd10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  446.057611][   T31]  #2: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  446.068234][   T31] 3 locks held by kworker/u8:8/3532:
[  446.073500][   T31]  #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  446.086375][   T31]  #1: ffffc9000c797d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  446.096847][   T31]  #2: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  446.106257][   T31] 2 locks held by getty/5608:
[  446.111230][   T31]  #0: ffff8880360b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  446.121436][   T31]  #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  446.132171][   T31] 1 lock held by udevd/5858:
[  446.136760][   T31]  #0: ffff88802663e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  446.148832][   T31] 3 locks held by kworker/0:5/5916:
[  446.154060][   T31]  #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  446.165114][   T31]  #1: ffffc9000429fd10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  446.177666][   T31]  #2: ffff8880586fe240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80
[  446.188903][   T31] 5 locks held by kworker/u8:15/7802:
[  446.194324][   T31]  #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  446.204478][   T31]  #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0
[  446.213231][   T31]  #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0
[  446.222879][   T31]  #3: ffffffff9b06db60 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[  446.233396][   T31]  #4: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  446.243370][   T31] 3 locks held by kworker/u8:16/7804:
[  446.249133][   T31]  #0: ffff88803168b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  446.260328][   T31]  #1: ffffc9001c8a7d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  446.273865][   T31]  #2: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0
[  446.283675][   T31] 2 locks held by syz.0.764/8989:
[  446.288744][   T31]  #0: ffff8880334aa0e0 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0
[  446.299460][   T31]  #1: ffff88802663e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  446.309016][   T31] 3 locks held by syz.2.1255/10906:
[  446.314216][   T31]  #0: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000
[  446.323351][   T31]  #1: ffff88807b6a4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380
[  446.334647][   T31]  #2: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  446.344948][   T31] 2 locks held by syz.1.1256/10914:
[  446.350216][   T31]  #0: ffffffff90428550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.358440][   T31]  #1: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10
[  446.368024][   T31] 2 locks held by syz.4.1258/10915:
[  446.373218][   T31]  #0: ffffffff90428550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.381486][   T31]  #1: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10
[  446.390767][   T31] 1 lock held by syz.5.1259/10932:
[  446.396072][   T31]  #0: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0
[  446.405222][   T31] 
[  446.408118][   T31] =============================================
[  446.408118][   T31] 
[  446.416607][   T31] NMI backtrace for cpu 0
[  446.416626][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  446.416647][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  446.416657][   T31] Call Trace:
[  446.416663][   T31]  <TASK>
[  446.416671][   T31]  dump_stack_lvl+0x116/0x1f0
[  446.416700][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  446.416716][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  446.416738][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  446.416766][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  446.416785][   T31]  watchdog+0xf0e/0x1260
[  446.416810][   T31]  ? __pfx_watchdog+0x10/0x10
[  446.416827][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  446.416848][   T31]  ? __kthread_parkme+0x19e/0x250
[  446.416874][   T31]  ? __pfx_watchdog+0x10/0x10
[  446.416892][   T31]  kthread+0x3c2/0x780
[  446.416909][   T31]  ? __pfx_kthread+0x10/0x10
[  446.416928][   T31]  ? rcu_is_watching+0x12/0xc0
[  446.416949][   T31]  ? __pfx_kthread+0x10/0x10
[  446.416967][   T31]  ret_from_fork+0x56a/0x730
[  446.416983][   T31]  ? __pfx_kthread+0x10/0x10
[  446.416999][   T31]  ret_from_fork_asm+0x1a/0x30
[  446.417031][   T31]  </TASK>
[  446.417038][   T31] Sending NMI from CPU 0 to CPUs 1:
[  446.542972][    C1] NMI backtrace for cpu 1
[  446.542988][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  446.543005][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  446.543012][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  446.543033][    C1] Code: bd 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 96 15 00 fb f4 <e9> cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  446.543046][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2
[  446.543057][    C1] RAX: 0000000001d8df09 RBX: 0000000000000001 RCX: ffffffff8b947b49
[  446.543066][    C1] RDX: 0000000000000000 RSI: ffffffff8de52bd0 RDI: ffffffff8c163000
[  446.543074][    C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655
[  446.543082][    C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001
[  446.543089][    C1] R13: ffff88801e2ea440 R14: ffffffff90ab7290 R15: 0000000000000000
[  446.543098][    C1] FS:  0000000000000000(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000
[  446.543110][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  446.543119][    C1] CR2: 0000001b30822ff8 CR3: 00000000125ff000 CR4: 00000000003526f0
[  446.543128][    C1] Call Trace:
[  446.543133][    C1]  <TASK>
[  446.543138][    C1]  default_idle+0x13/0x20
[  446.543156][    C1]  default_idle_call+0x6d/0xb0
[  446.543173][    C1]  do_idle+0x391/0x510
[  446.543191][    C1]  ? __pfx_do_idle+0x10/0x10
[  446.543206][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  446.543222][    C1]  cpu_startup_entry+0x4f/0x60
[  446.543237][    C1]  start_secondary+0x21d/0x2b0
[  446.543256][    C1]  ? __pfx_start_secondary+0x10/0x10
[  446.543275][    C1]  common_startup_64+0x13e/0x148
[  446.543293][    C1]  </TASK>
[  446.545774][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  446.722087][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  446.731171][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  446.741215][   T31] Call Trace:
[  446.744473][   T31]  <TASK>
[  446.747384][   T31]  dump_stack_lvl+0x3d/0x1f0
[  446.751989][   T31]  vpanic+0x6e8/0x7a0
[  446.755958][   T31]  ? __pfx_vpanic+0x10/0x10
[  446.760436][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  446.766402][   T31]  panic+0xca/0xd0
[  446.770095][   T31]  ? __pfx_panic+0x10/0x10
[  446.774482][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  446.779845][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  446.785995][   T31]  ? watchdog+0xd78/0x1260
[  446.790392][   T31]  ? watchdog+0xd6b/0x1260
[  446.794809][   T31]  watchdog+0xd89/0x1260
[  446.799049][   T31]  ? __pfx_watchdog+0x10/0x10
[  446.803708][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  446.808894][   T31]  ? __kthread_parkme+0x19e/0x250
[  446.813907][   T31]  ? __pfx_watchdog+0x10/0x10
[  446.818564][   T31]  kthread+0x3c2/0x780
[  446.822633][   T31]  ? __pfx_kthread+0x10/0x10
[  446.827204][   T31]  ? rcu_is_watching+0x12/0xc0
[  446.831950][   T31]  ? __pfx_kthread+0x10/0x10
[  446.836519][   T31]  ret_from_fork+0x56a/0x730
[  446.841087][   T31]  ? __pfx_kthread+0x10/0x10
[  446.845659][   T31]  ret_from_fork_asm+0x1a/0x30
[  446.850416][   T31]  </TASK>
[  446.853658][   T31] Kernel Offset: disabled
[  446.857960][   T31] Rebooting in 86400 seconds..