last executing test programs:

19.191953467s ago: executing program 0 (id=1560):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES8=r4, @ANYRES32=r9, @ANYRESHEX=r4], 0x3c}}, 0x20040000)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080)
bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000b00)={&(0x7f0000000240), 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="98040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000580003804e000400921f6ba990be442e2d673a0d1f51b4177aed99b9d92cd727192d66f06d7c33ea59e3147bd071c81e27be6172f071d95087400c63d760b18a8896214ceb8463d5e49c265dde3f50d5815e000004000100"], 0x418}, 0x1, 0x0, 0x0, 0x4000}, 0x8014)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000e61c09aa00000005000500010000000500069c7b04740008000300010000002e6a4f0a57e388fb2c60a01a204a03d051af1eeed20df988227ff3a2ebcbde324d16af56eee4ab4b05575a61e9ebd58157ea27cd0b5074ed9dc9fc41f5a82c7c242c02534997fecc929ba05899168c3d688385bd986db57a07ee8a427caf71652280dc4cbd95582f38fc2a05b2fc7fa3473523b22dbb40adb7af85a533fbaf1eb50bf9e37b139c8c5bb79295ff4fd377918bb2bb4bdd195456c6937f821393b1e64dd7e1b574d8"], 0x2c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r10, 0x82000000)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0))
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x6800)
ioprio_get$uid(0x3, r11)

18.549979704s ago: executing program 0 (id=1564):
socket(0x2b, 0x1, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="d6501abb833079b16e326d0c8334d7b351a228a95e3b3e6fbea57bc99e6f956cf2303f3b2b12623690ec6324b7c953453e48d7e584db0d8c8fc6f0f432f8d83e20027fcee0d3dd0eecbe6d748ed90b19c1dc40f386a25a1090ca79476b1dd5bd29788059bd6ccba29eefb617ded5e274bca3913821a08ce8dae0c6063842215fbbca25e5aaeb4598ac1939c8a8f1b5a15c3e82067a72f36ca6a632f8ad50d6384fe804e753a077c1bae65f80e1f1a724e07d14adae83ce2a17ebdf502ae6ad9f90cf6f06ee0b", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r6, <r7=>0x0})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
syz_io_uring_setup(0x54a9, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)
mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r7, 0x80000})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020)

18.397837311s ago: executing program 0 (id=1567):
unshare(0x62000280)

14.396489764s ago: executing program 3 (id=1575):
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r5)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r7})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, <r9=>r6, 'id0\x00'})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r4, r7, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)

11.305324833s ago: executing program 0 (id=1581):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$radio(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r5 = inotify_init()
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c8, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe86}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe53b}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcfd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0e8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa2, 0x3, "b0654873942604d57f2596c4c91b2c819467ece1b1c5d9c55feb49a252493e0f18dcd346b08bcb87d4f0213d0749475ae754b43948d40f640e085592854438e948aadab678efaa38388266370794bd45c43877c37a62cb79373775e729d76c63fa06a2ab978418c2cb91b61898f9c1dade878d2e39a1ecb7e3489822c8098b587bcaead0a61e1851aa539c28dcce74bbda8511b2a4a3d63e6adab5747f53"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3de}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x804}, 0xc081)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r5, 0xffffffffffffffff, 0x0)
dup(r3)

10.456454106s ago: executing program 2 (id=1582):
socket$nl_route(0x10, 0x3, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x140e, 0x8, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1ff}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040)
r4 = socket(0x1e, 0x805, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000460000006500000085000000071255ce865c114900000000a293d0b882409f441cfb7dfec1320d71937441560d2123fb9ee7"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000125c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x24040084)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r9 = dup2(r8, r8)
ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000009000000050000000000001102000000ffffffff0700000000000008000000000000302e5f613061009c6de67bf1e5a2a87a0fed5b0250c984a8831a2cd0566da2ddf43e7fb417b5cab26c738e6ebdbfca8add5478615ae71c3424bda02bac918d1f4375"], 0x0, 0x3d, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r10, 0x0, 0x1}, 0x50)

10.246645545s ago: executing program 3 (id=1583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad')
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r5, 0x5603, &(0x7f0000000100))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r4, r6, 0x0, 0x2000000e3aa6ea)
ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f0000000400)={0x1, 0x0, {0x4, 0x9, 0x2011, 0x2, 0xb, 0x3, 0x0, 0x3}})
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10)
sendto(r7, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a424", 0x54, 0x4008044, 0x0, 0x0)
write$binfmt_misc(r7, &(0x7f0000000000), 0x0)
sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x84000)

9.352140012s ago: executing program 2 (id=1584):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x8400, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6)
read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000021423"], 0x20}, 0x1, 0x0, 0x0, 0x24044044}, 0x4008000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
unshare(0x22020600)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.events\x00', 0x300, 0x0)

8.457150936s ago: executing program 0 (id=1586):
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00')
close(r3)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r7, 0x40044590, 0x0)
unshare(0x62000280)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"])

8.121832776s ago: executing program 3 (id=1587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x95)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000600)="46bbd15be5ac8f08481114b58a892520d92991f3295f0706dfb7bd2fcc75cdb2ca8d4802f5e32d7bf96a6d16f6817eb9e29e491da78fc2823e2968f4b13ee47108a1d156aff89c25e15e73c2844740201cd5f984e06c141f331a50eecbddfebb8b1c7728b4b753922bee792747e4c3e8532b303e68f5cbaf109da5171173b9df7cb881f4fd2b14bab7e5fdbdd7f62104b040ce76552d31ab059201e014389c4a460697472c1aa40739bd9422b3c5d4e4f7b3d850f3c3ade73951d9683fc5689b7a803ba5dce974b88d7f96099e87fa56dfae40f62347f6829f6ad725", 0xdc})
recvmmsg(r5, 0x0, 0x0, 0x122, 0x0)
shutdown(r5, 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd01", @ANYRES32, @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae8694a5f3059b9cf6cc102d722334"], 0x44}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c000780080006400000002308001340000000020800124083"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)

7.804846137s ago: executing program 1 (id=1588):
socket(0x2b, 0x1, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="d6501abb833079b16e326d0c8334d7b351a228a95e3b3e6fbea57bc99e6f956cf2303f3b2b12623690ec6324b7c953453e48d7e584db0d8c8fc6f0f432f8d83e20027fcee0d3dd0eecbe6d748ed90b19c1dc40f386a25a1090ca79476b1dd5bd29788059bd6ccba29eefb617ded5e274bca3913821a08ce8dae0c6063842215fbbca25e5aaeb4598ac1939c8a8f1b5a15c3e82067a72f36ca6a632f8ad50d6384fe804e753a077c1bae65f80e1f1a724e07d14adae83ce2a17ebdf502ae6ad9f90cf6f06ee0b", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r6, <r7=>0x0})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
syz_io_uring_setup(0x54a9, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)
mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r7, 0x80000})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020)

7.751017965s ago: executing program 4 (id=1589):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x0)

7.692882971s ago: executing program 1 (id=1590):
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, 0x0, 0x2000775)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x2080, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0xe229, 0x5})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv2(r6, &(0x7f0000001540)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x800, 0x121040)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38)
timer_create(0x3, &(0x7f0000000180)={0x0, 0x18, 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

7.684052579s ago: executing program 2 (id=1591):
futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
io_setup(0x1, &(0x7f0000002500)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})
openat$cgroup_type(r7, &(0x7f00000000c0), 0x2, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r9, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0)
io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}])
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)

5.793426498s ago: executing program 1 (id=1592):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xa, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[], 0x110}}], 0x1, 0x931766f6719c6d41)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
r4 = inotify_init1(0x80800)
inotify_add_watch(r4, &(0x7f00000000c0)='./cgroup\x00', 0x80000001)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r5, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

5.019187617s ago: executing program 4 (id=1593):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040), 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1)

4.776088857s ago: executing program 4 (id=1594):
io_uring_setup(0x55a3, &(0x7f0000000a00)={0x0, 0x8000d398, 0x2, 0x80000000, 0x131})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x147c42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0xa000})
getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=ANY=[], 0x0, 0x25)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = getpid()
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r6})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0))
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000)

4.759616447s ago: executing program 1 (id=1595):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x0, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x32, 0x5, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x5, [0x1, 0xe2]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xd}]}, 0x30)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r5=>0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x5, r5, r4})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r2, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r6, 0x1, 0x0, 0x1000000000000})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r6, 0x8, 0x5, 0x1, 0x3, [], [0xd, 0x5, 0x200], [0x6, 0x9, 0x1, 0x8], [0x7, 0x1, 0x6, 0x2]})

4.748994019s ago: executing program 3 (id=1596):
socket(0x2b, 0x1, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="d6501abb833079b16e326d0c8334d7b351a228a95e3b3e6fbea57bc99e6f956cf2303f3b2b12623690ec6324b7c953453e48d7e584db0d8c8fc6f0f432f8d83e20027fcee0d3dd0eecbe6d748ed90b19c1dc40f386a25a1090ca79476b1dd5bd29788059bd6ccba29eefb617ded5e274bca3913821a08ce8dae0c6063842215fbbca25e5aaeb4598ac1939c8a8f1b5a15c3e82067a72f36ca6a632f8ad50d6384fe804e753a077c1bae65f80e1f1a724e07d14adae83ce2a17ebdf502ae6ad9f90cf6f06ee0b", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r6, <r7=>0x0})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
syz_io_uring_setup(0x54a9, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)
mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r7, 0x80000})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020)

4.651992058s ago: executing program 1 (id=1597):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3})
inotify_init()
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1})
ioprio_set$pid(0x3, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x0)

4.485748334s ago: executing program 0 (id=1598):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket(0x23, 0x6, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x198, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x168, 0x2, [@TCA_BASIC_ACT={0x164, 0x3, [@m_vlan={0xb8, 0x1f, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x64, 0x6, "5a0ca25b7438c93246018f7c82a55b68a84eb3c64c14f5bdb3e75689c3512fcad0130f85654dca4d3e84da923d3cb1a96373aded8a837044fe3fd52e5a2690c87d84ab8c90fef034383b9bb884867930aa980cac9377b78749f1f1fed0ea5b71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xa8, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x78, 0x7, 0xffff5da7, 0x51}}]}, {0x63, 0x6, "59db8befdd5ced65b75df50bc3298588152f96f14a73a773260d8a9af71b6f9029a4f507cd500b433b3e12a7f4a3748b52dc45e5c4a00737edbf8a7c88e083e912a80e8caf88a1fb76f3e4753d1fe6e9f5c454778fc21232004c70a09d8c95"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$AUTOFS_IOC_READY(r6, 0x541b, 0x20000000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0xc008aec1, &(0x7f0000000380)={0x4, 0x0, [{0x4, 0x6, 0x6, 0x700000, 0x100, 0x2, 0x1ff}, {0x1, 0x56454c21, 0x3, 0x9, 0x81, 0x9, 0x7fff}, {0x40000007, 0x0, 0x6, 0x3, 0x200040, 0x61f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, 0x0, &(0x7f0000000000))
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0xd8, 0x100, 0x0, {0x7a00000010000000}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
getpid()

3.746101559s ago: executing program 2 (id=1599):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073790530000000000800410073697700140033006c6f0000000000000000000048e4f411cd3d7a2be9be58f71c4583f02a5203d8fae3cd7fa31e5931b4fb13e4a2b5bc8a71446e08d74b0373e8468a9d0e02d174ddc094d5caa8e45f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xae15}]}]}, 0x48}}, 0x20000040)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000380)=0x7)
r6 = fsmount(r5, 0x0, 0x2)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20)
openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)

3.215352037s ago: executing program 4 (id=1600):
socket(0x2b, 0x1, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="d6501abb833079b16e326d0c8334d7b351a228a95e3b3e6fbea57bc99e6f956cf2303f3b2b12623690ec6324b7c953453e48d7e584db0d8c8fc6f0f432f8d83e20027fcee0d3dd0eecbe6d748ed90b19c1dc40f386a25a1090ca79476b1dd5bd29788059bd6ccba29eefb617ded5e274bca3913821a08ce8dae0c6063842215fbbca25e5aaeb4598ac1939c8a8f1b5a15c3e82067a72f36ca6a632f8ad50d6384fe804e753a077c1bae65f80e1f1a724e07d14adae83ce2a17ebdf502ae6ad9f90cf6f06ee0b", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r6, <r7=>0x0})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
syz_io_uring_setup(0x54a9, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)
mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r7, 0x80000})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020)

2.72986629s ago: executing program 3 (id=1601):
openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
lsm_get_self_attr(0x66, &(0x7f0000000140)={0x0, 0x0, 0xcf, 0xaf, ""/175}, &(0x7f0000000240)=0xcf, 0x1)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000740)=0xc)
sendmsg$unix(r5, &(0x7f0000000880)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)="fed2fe62a864bbdaa98200526ac5c2ad2617e784e1672497778fbd682aca9e64cfcd85cf48ca3e283e99250f8b83d31c2c95259543e651ad008fac8955100804f3612d6ebdbd2e05b1a15f22138e383103da32316d7aae93ce00950f9caeba776c440e8b7be7fb5709b65c298b1e791e8dbbaf799455a9b94f5052ae5312bc6d580af9b8f74b6d3c2c7b2fb96a5857deee87a839d30f0068de54ecba14a3ca06d10cd32a7115ec906dc44350b9b8ce91e63f154c3436307d6cb124b8d457f039bcc77666ba2ba399fede5915dade74", 0xcf}], 0x2, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [r5, r0, r1, r6, r0]}}, @rights={{0x20, 0x1, 0x1, [r4, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, r7, r8}}}], 0xc8, 0x20000800}, 0x4800)
sendmmsg$inet6(r6, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0xfe, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x28}}], 0x1, 0x4040084)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_setup(0x3fe, &(0x7f00000001c0)=<r9=>0x0)
io_submit(r9, 0x2, &(0x7f0000000400)=[0x0, 0x0])
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f00000004c0)={0x0, 0x0, 0x26, 0x20, 0x104, 0x1})
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r1, @ANYBLOB="04"], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000)

2.626740627s ago: executing program 4 (id=1602):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$radio(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8, @remote, 0xfffffffb}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r5 = inotify_init()
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r5, 0xffffffffffffffff, 0x0)
dup(r3)

1.245986708s ago: executing program 2 (id=1603):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r5)
socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r8, 0x0, 0x0, 0x1}}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)

215.768925ms ago: executing program 4 (id=1604):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xe}]}, 0x28}}, 0x50)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET(r1, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0})
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0)
recvfrom$inet6(r5, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x0)

171.460541ms ago: executing program 1 (id=1605):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000080)={0x1, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x10c00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@svm={0x1, 0x1, 0x1080, {0xdddd0000}, {"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"}})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = gettid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
rt_sigqueueinfo(r8, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})

69.808496ms ago: executing program 3 (id=1606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x95)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000600)="46bbd15be5ac8f08481114b58a892520d92991f3295f0706dfb7bd2fcc75cdb2ca8d4802f5e32d7bf96a6d16f6817eb9e29e491da78fc2823e2968f4b13ee47108a1d156aff89c25e15e73c2844740201cd5f984e06c141f331a50eecbddfebb8b1c7728b4b753922bee792747e4c3e8532b303e68f5cbaf109da5171173b9df7cb881f4fd2b14bab7e5fdbdd7f62104b040ce76552d31ab059201e014389c4a460697472c1aa40739bd9422b3c5d4e4f7b3d850f3c3ade73951d9683fc5689b7a803ba5dce974b88d7f96099e87fa56dfae40f62347f6829f6ad725", 0xdc})
recvmmsg(r5, 0x0, 0x0, 0x122, 0x0)
shutdown(r5, 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd01", @ANYRES32, @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae8694a5f3059b9cf6cc102d722334"], 0x44}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c000780080006400000002308001340000000020800124083"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)

0s ago: executing program 2 (id=1607):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x20, 0x11}, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x1, 0x0, 0x4bd, 0x7, 0x7b, 0x8, 0x3f, 0x6, 0x0, 0x7, 0x6, 0x8}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xb703}, 0x0, 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

36] pvrusb2: Invalid write control endpoint
[  472.270980][ T2336] pvrusb2: Invalid write control endpoint
[  472.288217][   T29] audit: type=1400 audit(1775517030.994:535): avc:  denied  { read write } for  pid=10492 comm="syz.0.999" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  472.336942][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'.
[  472.356339][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  472.387822][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  472.405126][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  472.434170][ T2336] pvrusb2: Device being rendered inoperable
[  472.450701][   T29] audit: type=1400 audit(1775517030.994:536): avc:  denied  { open } for  pid=10492 comm="syz.0.999" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  472.533789][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1001'.
[  472.622288][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  472.637656][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  472.671203][ T2336] pvrusb2: Attached sub-driver cx25840
[  472.694065][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  472.732468][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  472.846542][   T29] audit: type=1400 audit(1775517031.044:537): avc:  denied  { name_bind } for  pid=10492 comm="syz.0.999" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  473.219885][T10510] 9pnet_virtio: no channels available for device syz
[  473.237987][T10510] siw: device registration error -23
[  473.262959][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'.
[  474.124824][ T5927] usb 2-1: USB disconnect, device number 9
[  474.975498][T10519] binder: BINDER_SET_CONTEXT_MGR already set
[  475.023910][T10519] binder: 10516:10519 ioctl 4018620d 200000004a80 returned -16
[  476.189528][   T29] audit: type=1400 audit(1775517034.244:538): avc:  denied  { connect } for  pid=10520 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  476.197393][   T29] audit: type=1400 audit(1775517034.914:539): avc:  denied  { connect } for  pid=10516 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  477.258591][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'.
[  477.268166][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'.
[  477.277769][T10548] netlink: 'syz.2.1007': attribute type 13 has an invalid length.
[  477.286218][T10548] netlink: 'syz.2.1007': attribute type 12 has an invalid length.
[  477.387279][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'.
[  477.512611][   T29] audit: type=1800 audit(1775517036.124:540): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1007" name="nullb0" dev="tmpfs" ino=1235 res=0 errno=0
[  478.785363][ T1692] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  478.952559][ T1692] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  478.962072][ T1692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.987579][ T1692] usb 1-1: Product: syz
[  478.997596][ T1692] usb 1-1: Manufacturer: syz
[  479.009707][ T1692] usb 1-1: SerialNumber: syz
[  479.026320][ T1692] usb 1-1: config 0 descriptor??
[  479.965973][   T29] audit: type=1400 audit(1775517038.344:541): avc:  denied  { read write } for  pid=10554 comm="syz.0.1012" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  480.118911][T10577] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  480.610749][   T29] audit: type=1400 audit(1775517038.344:542): avc:  denied  { open } for  pid=10554 comm="syz.0.1012" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  480.635511][   T29] audit: type=1400 audit(1775517038.794:543): avc:  denied  { mounton } for  pid=10554 comm="syz.0.1012" path="/187/bus" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  480.658655][   T29] audit: type=1400 audit(1775517038.814:544): avc:  denied  { unlink } for  pid=10554 comm="syz.0.1012" name="#19" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  480.855518][   T29] audit: type=1400 audit(1775517038.814:545): avc:  denied  { mount } for  pid=10554 comm="syz.0.1012" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  481.319010][   T29] audit: type=1800 audit(1775517038.944:546): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1012" name="file1" dev="overlay" ino=1067 res=0 errno=0
[  481.344033][   T29] audit: type=1400 audit(1775517038.944:547): avc:  denied  { read } for  pid=10554 comm="syz.0.1012" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  481.390685][   T29] audit: type=1400 audit(1775517038.944:548): avc:  denied  { open } for  pid=10554 comm="syz.0.1012" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  481.555546][   T29] audit: type=1400 audit(1775517038.944:549): avc:  denied  { ioctl } for  pid=10554 comm="syz.0.1012" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  481.797250][T10589] overlayfs: workdir and upperdir must be separate subtrees
[  482.526052][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  482.526063][   T29] audit: type=1400 audit(1775517041.234:572): avc:  denied  { bind } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  482.574847][   T29] audit: type=1400 audit(1775517041.234:573): avc:  denied  { getopt } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  482.646396][  T794] usb 1-1: USB disconnect, device number 7
[  483.171433][T10604] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1019'.
[  483.181631][   T29] audit: type=1400 audit(1775517041.884:574): avc:  denied  { create } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  483.236357][   T29] audit: type=1400 audit(1775517041.884:575): avc:  denied  { write } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  483.331401][   T29] audit: type=1400 audit(1775517042.044:576): avc:  denied  { create } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  483.681183][T10609] lo speed is unknown, defaulting to 1000
[  484.293380][T10609] lo speed is unknown, defaulting to 1000
[  484.351824][   T29] audit: type=1400 audit(1775517042.044:577): avc:  denied  { bind } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  484.638713][   T29] audit: type=1400 audit(1775517042.044:578): avc:  denied  { create } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  484.955573][   T29] audit: type=1400 audit(1775517042.064:579): avc:  denied  { write } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  484.978230][   T29] audit: type=1400 audit(1775517042.084:580): avc:  denied  { setopt } for  pid=10592 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  484.997826][   T29] audit: type=1400 audit(1775517042.194:581): avc:  denied  { create } for  pid=10606 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  487.362962][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  487.372628][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'.
[  487.903787][   T29] kauditd_printk_skb: 38 callbacks suppressed
[  487.903807][   T29] audit: type=1400 audit(1775517046.054:620): avc:  denied  { perfmon } for  pid=10642 comm="syz.3.1030" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  488.323182][   T29] audit: type=1400 audit(1775517046.054:621): avc:  denied  { prog_run } for  pid=10642 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  488.515245][   T29] audit: type=1400 audit(1775517046.104:622): avc:  denied  { create } for  pid=10642 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  489.007456][   T29] audit: type=1400 audit(1775517046.114:623): avc:  denied  { ioctl } for  pid=10642 comm="syz.3.1030" path="socket:[27373]" dev="sockfs" ino=27373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  489.145534][   T29] audit: type=1400 audit(1775517046.414:624): avc:  denied  { read write } for  pid=10628 comm="syz.1.1027" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  489.321142][   T29] audit: type=1400 audit(1775517046.414:625): avc:  denied  { open } for  pid=10628 comm="syz.1.1027" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  491.502191][   T29] audit: type=1400 audit(1775517046.574:626): avc:  denied  { create } for  pid=10628 comm="syz.1.1027" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  491.523842][   T29] audit: type=1400 audit(1775517046.584:627): avc:  denied  { map } for  pid=10628 comm="syz.1.1027" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  491.548078][   T29] audit: type=1400 audit(1775517046.584:628): avc:  denied  { read write } for  pid=10628 comm="syz.1.1027" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  491.573089][   T29] audit: type=1400 audit(1775517048.214:629): avc:  denied  { map_create } for  pid=10656 comm="syz.2.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  491.977628][T10675] can0: slcan on ttyS3.
[  493.035607][T10680] lo speed is unknown, defaulting to 1000
[  493.762700][T10680] lo speed is unknown, defaulting to 1000
[  494.106120][T10669] can0 (unregistered): slcan off ttyS3.
[  494.219295][T10683] lo speed is unknown, defaulting to 1000
[  494.297005][T10683] lo speed is unknown, defaulting to 1000
[  494.401416][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  494.401432][   T29] audit: type=1400 audit(1775517053.114:642): avc:  denied  { setopt } for  pid=10688 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  494.402155][ T5817] Bluetooth: hci4: unexpected event for opcode 0x040d
[  494.413915][   T29] audit: type=1400 audit(1775517053.124:643): avc:  denied  { connect } for  pid=10688 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  494.504367][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'.
[  494.992560][   T29] audit: type=1400 audit(1775517053.204:644): avc:  denied  { create } for  pid=10686 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  495.111853][T10697] netlink: zone id is out of range
[  495.139496][T10697] netlink: zone id is out of range
[  495.161902][T10697] netlink: zone id is out of range
[  495.167731][T10697] netlink: zone id is out of range
[  495.173071][T10697] netlink: zone id is out of range
[  495.266534][T10697] netlink: zone id is out of range
[  495.531159][T10697] netlink: zone id is out of range
[  495.575564][   T29] audit: type=1400 audit(1775517053.204:645): avc:  denied  { ioctl } for  pid=10686 comm="syz.0.1040" path="socket:[27522]" dev="sockfs" ino=27522 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  495.607540][T10697] netlink: zone id is out of range
[  495.613602][T10697] netlink: zone id is out of range
[  495.615816][T10704] batadv_slave_0: entered promiscuous mode
[  495.626216][T10697] netlink: zone id is out of range
[  495.627760][T10704] batman_adv: batadv0: Adding interface: macvtap1
[  495.648248][   T29] audit: type=1400 audit(1775517053.204:646): avc:  denied  { shutdown } for  pid=10686 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  495.726348][T10704] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  495.776597][T10704] batman_adv: batadv0: Interface activated: macvtap1
[  495.862066][   T29] audit: type=1400 audit(1775517053.864:647): avc:  denied  { create } for  pid=10695 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  495.862108][   T29] audit: type=1400 audit(1775517053.864:648): avc:  denied  { setopt } for  pid=10695 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  495.862143][   T29] audit: type=1400 audit(1775517053.864:649): avc:  denied  { bind } for  pid=10695 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  495.862179][   T29] audit: type=1400 audit(1775517053.864:650): avc:  denied  { name_bind } for  pid=10695 comm="syz.1.1042" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  495.862219][   T29] audit: type=1400 audit(1775517053.864:651): avc:  denied  { node_bind } for  pid=10695 comm="syz.1.1042" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  495.906591][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  495.906673][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  497.179091][T10721] can0: slcan on ttyS3.
[  499.083025][T10732] lo speed is unknown, defaulting to 1000
[  499.159993][T10732] lo speed is unknown, defaulting to 1000
[  499.227753][T10716] can0 (unregistered): slcan off ttyS3.
[  499.856052][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  499.856070][   T29] audit: type=1400 audit(1775517058.124:670): avc:  denied  { map_read map_write } for  pid=10739 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  500.656875][   T29] audit: type=1400 audit(1775517059.364:671): avc:  denied  { create } for  pid=10750 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  500.726867][   T29] audit: type=1400 audit(1775517059.364:672): avc:  denied  { create } for  pid=10750 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  500.790181][   T29] audit: type=1400 audit(1775517059.364:673): avc:  denied  { connect } for  pid=10750 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  500.975706][   T29] audit: type=1400 audit(1775517059.544:674): avc:  denied  { ioctl } for  pid=10748 comm="syz.1.1052" path="socket:[27645]" dev="sockfs" ino=27645 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  501.627029][T10763] 9p: Bad value for 'rfdno'
[  502.544442][   T29] audit: type=1400 audit(1775517059.564:675): avc:  denied  { ioctl } for  pid=10748 comm="syz.1.1052" path="socket:[27647]" dev="sockfs" ino=27647 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  502.569622][   T29] audit: type=1400 audit(1775517059.564:676): avc:  denied  { create } for  pid=10748 comm="syz.1.1052" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  502.590581][   T29] audit: type=1400 audit(1775517059.824:677): avc:  denied  { create } for  pid=10759 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  502.610330][   T29] audit: type=1400 audit(1775517059.834:678): avc:  denied  { read write } for  pid=10759 comm="syz.3.1055" name="sg0" dev="devtmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  502.745400][   T29] audit: type=1400 audit(1775517059.834:679): avc:  denied  { open } for  pid=10759 comm="syz.3.1055" path="/dev/sg0" dev="devtmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  503.035542][ T5927] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  503.275862][ T5927] usb 4-1: Using ep0 maxpacket: 8
[  503.503505][ T5927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  503.533025][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.574976][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400
[  503.647921][ T5927] pvrusb2: **********
[  503.675469][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  503.714910][ T5927] pvrusb2: Important functionality might not be entirely working.
[  503.750281][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  504.600272][ T5927] pvrusb2: **********
[  504.613594][ T2336] pvrusb2: Invalid write control endpoint
[  504.718781][T10798] SELinux: syz.3.1058 (10798) set checkreqprot to 1. This is no longer supported.
[  504.935838][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  504.935871][   T29] audit: type=1400 audit(1775517063.434:694): avc:  denied  { setcheckreqprot } for  pid=10771 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  505.809438][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1062'.
[  505.809588][   T29] audit: type=1400 audit(1775517064.524:695): avc:  denied  { write } for  pid=10800 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  505.997221][   T29] audit: type=1400 audit(1775517064.614:696): avc:  denied  { setopt } for  pid=10800 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  505.998275][ T2336] pvrusb2: Invalid write control endpoint
[  506.112751][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  506.195665][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  506.214081][T10811] usb 4-1: USB disconnect, device number 5
[  506.243578][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  506.274628][ T2336] pvrusb2: Device being rendered inoperable
[  506.292381][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  506.315181][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  506.346496][ T2336] pvrusb2: Attached sub-driver cx25840
[  506.358843][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  506.375610][ T5927] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  506.395112][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  506.585301][ T5927] usb 1-1: Using ep0 maxpacket: 16
[  506.632073][ T5927] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  506.746429][T10826] hfs: can't find a HFS filesystem on dev nullb0
[  506.835215][   T29] audit: type=1400 audit(1775517065.454:697): avc:  denied  { mounton } for  pid=10821 comm="syz.3.1066" path="/syzcgroup/unified/syz3" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  507.024955][T10825] lo speed is unknown, defaulting to 1000
[  507.102181][T10825] lo speed is unknown, defaulting to 1000
[  507.130194][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  507.145085][ T5927] usb 1-1: Product: syz
[  507.149268][ T5927] usb 1-1: SerialNumber: syz
[  507.164748][ T5927] usb 1-1: config 0 descriptor??
[  507.183043][ T5927] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  507.196329][ T5927] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  507.220367][ T5927] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  507.235691][ T5927] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  507.813167][T10832] xt_TPROXY: Can be used only with -p tcp or -p udp
[  508.243581][   T29] audit: type=1400 audit(1775517066.857:698): avc:  denied  { create } for  pid=10815 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  508.302388][   T29] audit: type=1400 audit(1775517066.857:699): avc:  denied  { bind } for  pid=10815 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  509.300451][   T29] audit: type=1400 audit(1775517067.896:700): avc:  denied  { write } for  pid=10850 comm="syz.3.1072" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  510.102534][T10859] dummy0: entered allmulticast mode
[  510.199479][   T29] audit: type=1400 audit(1775517068.710:701): avc:  denied  { create } for  pid=10842 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  510.401977][   T29] audit: type=1400 audit(1775517068.710:702): avc:  denied  { write } for  pid=10842 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  510.922684][   T29] audit: type=1326 audit(1775517068.916:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10864 comm="syz.2.1074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfdb79c819 code=0x0
[  511.027325][T10869] SET target dimension over the limit!
[  511.106790][   T29] audit: type=1400 audit(1775517069.590:704): avc:  denied  { ioctl } for  pid=10850 comm="syz.3.1072" path="socket:[28620]" dev="sockfs" ino=28620 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  511.149645][   T29] audit: type=1400 audit(1775517069.618:705): avc:  denied  { sys_module } for  pid=10864 comm="syz.2.1074" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  511.191403][T10853] bridge0: port 3(erspan0) entered blocking state
[  511.198305][T10853] bridge0: port 3(erspan0) entered disabled state
[  511.205209][T10853] erspan0: entered allmulticast mode
[  511.223795][T10853] erspan0: entered promiscuous mode
[  511.341469][ T1692] usb 1-1: USB disconnect, device number 8
[  512.058432][T10885] netlink: 'syz.0.1076': attribute type 10 has an invalid length.
[  512.066815][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1076'.
[  512.076762][T10885] bridge0: port 3(dummy0) entered blocking state
[  512.083815][T10885] bridge0: port 3(dummy0) entered disabled state
[  512.090442][T10885] dummy0: entered allmulticast mode
[  512.100492][T10885] dummy0: entered promiscuous mode
[  512.106951][T10885] bridge0: port 3(dummy0) entered blocking state
[  512.113582][T10885] bridge0: port 3(dummy0) entered forwarding state
[  512.133424][   T29] audit: type=1400 audit(1775517070.479:706): avc:  denied  { read } for  pid=10877 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  512.423824][T10891] overlayfs: missing 'lowerdir'
[  512.597022][T10892] lo speed is unknown, defaulting to 1000
[  513.161719][T10892] lo speed is unknown, defaulting to 1000
[  513.334261][   T29] audit: type=1400 audit(1775517070.900:707): avc:  denied  { append } for  pid=10888 comm="syz.3.1078" name="sg0" dev="devtmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  514.176596][ T5886] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  514.215961][T10885] netlink: 'syz.0.1076': attribute type 23 has an invalid length.
[  514.290609][   T29] audit: type=1400 audit(1775517072.566:708): avc:  denied  { create } for  pid=10898 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  514.515970][ T5886] usb 4-1: config 0 has no interfaces?
[  514.527261][ T5886] usb 4-1: config 0 has no interfaces?
[  514.536454][ T5886] usb 4-1: config 0 has no interfaces?
[  514.548308][ T5886] usb 4-1: string descriptor 0 read error: -22
[  514.555160][ T5886] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  514.573110][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.577007][   T29] audit: type=1400 audit(1775517072.566:709): avc:  denied  { ioctl } for  pid=10898 comm="syz.2.1081" path="socket:[29754]" dev="sockfs" ino=29754 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  514.651548][ T5886] usb 4-1: config 0 descriptor??
[  514.683814][   T29] audit: type=1400 audit(1775517072.566:710): avc:  denied  { write } for  pid=10898 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  516.233840][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  516.236503][   T29] audit: type=1400 audit(1775517074.390:714): avc:  denied  { watch watch_reads } for  pid=10912 comm="syz.0.1083" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  516.991463][ T5886] usb 4-1: USB disconnect, device number 6
[  516.995699][   T29] audit: type=1400 audit(1775517075.092:715): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  517.962374][   T29] audit: type=1400 audit(1775517075.822:716): avc:  denied  { mount } for  pid=10926 comm="syz.4.1087" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  518.053952][   T29] audit: type=1400 audit(1775517075.934:717): avc:  denied  { read write } for  pid=10926 comm="syz.4.1087" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  518.097428][   T29] audit: type=1400 audit(1775517075.934:718): avc:  denied  { open } for  pid=10926 comm="syz.4.1087" path="/209/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  518.121335][T10938] veth0: entered promiscuous mode
[  518.148105][   T29] audit: type=1400 audit(1775517075.944:719): avc:  denied  { ioctl } for  pid=10926 comm="syz.4.1087" path="/209/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  518.277194][T10926] veth0: left promiscuous mode
[  518.517264][   T29] audit: type=1400 audit(1775517076.356:720): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  518.701322][   T29] audit: type=1400 audit(1775517076.692:721): avc:  denied  { create } for  pid=10941 comm="syz.2.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  519.488353][   T29] audit: type=1400 audit(1775517077.413:722): avc:  denied  { mount } for  pid=10953 comm="syz.4.1091" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  519.542872][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'.
[  519.806311][T10965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10965 comm=syz.0.1093
[  519.846305][T10965] netlink: 'syz.0.1093': attribute type 1 has an invalid length.
[  519.857085][T10965] netlink: 'syz.0.1093': attribute type 2 has an invalid length.
[  520.757682][T10972] overlayfs: failed to clone upperpath
[  521.137811][T10811] IPVS: starting estimator thread 0...
[  521.229269][T10978] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1095'.
[  521.636519][T10976] IPVS: using max 50 ests per chain, 120000 per kthread
[  522.954950][   T29] audit: type=1400 audit(1775517080.679:723): avc:  denied  { ioctl } for  pid=10990 comm="syz.3.1100" path="socket:[29149]" dev="sockfs" ino=29149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  523.041958][T10996] kernel read not supported for file /cpuacct.usage_percpu (pid: 10996 comm: syz.0.1101)
[  523.043074][   T29] audit: type=1400 audit(1775517080.754:724): avc:  denied  { mount } for  pid=10995 comm="syz.0.1101" name="/" dev="mqueue" ino=5340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  523.058072][T10997] netlink: 'syz.3.1100': attribute type 11 has an invalid length.
[  523.191329][T10997] netlink: 'syz.3.1100': attribute type 23 has an invalid length.
[  523.254463][T11000] ./file0: Can't lookup blockdev
[  523.271510][   T29] audit: type=1400 audit(1775517080.960:725): avc:  denied  { mounton } for  pid=10993 comm="syz.1.1099" path="/207/file0" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  523.315507][T10997] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1100'.
[  523.446997][   T29] audit: type=1800 audit(1775517081.016:726): pid=10996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1101" name="cpuacct.usage_percpu" dev="mqueue" ino=29901 res=0 errno=0
[  523.552815][   T29] audit: type=1400 audit(1775517081.025:727): avc:  denied  { create } for  pid=10990 comm="syz.3.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  523.580037][T10811] IPVS: starting estimator thread 0...
[  523.590303][   T29] audit: type=1400 audit(1775517081.025:728): avc:  denied  { ioctl } for  pid=10990 comm="syz.3.1100" path="socket:[29914]" dev="sockfs" ino=29914 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  523.624614][T10991] net_ratelimit: 10 callbacks suppressed
[  523.624632][T10991] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  523.624657][   T29] audit: type=1400 audit(1775517081.025:729): avc:  denied  { connect } for  pid=10990 comm="syz.3.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  523.666780][T11008] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1100'.
[  523.680585][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'.
[  523.711042][T11009] IPVS: using max 49 ests per chain, 117600 per kthread
[  524.650094][   T29] audit: type=1400 audit(1775517082.223:730): avc:  denied  { name_bind } for  pid=11015 comm="syz.3.1104" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  525.547870][   T29] audit: type=1400 audit(1775517082.232:731): avc:  denied  { ioctl } for  pid=11015 comm="syz.3.1104" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  525.610932][   T29] audit: type=1400 audit(1775517082.728:732): avc:  denied  { bind } for  pid=11021 comm="syz.0.1106" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  528.113644][T10811] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  528.345837][T10811] usb 1-1: device descriptor read/64, error -71
[  528.603921][T10811] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  528.799026][T11067] ./file0: Can't lookup blockdev
[  528.805010][T10811] usb 1-1: device descriptor read/64, error -71
[  529.002333][T10811] usb usb1-port1: attempt power cycle
[  529.102591][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  529.297001][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1116'.
[  529.551890][T10811] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  529.612135][T11070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11070 comm=syz.4.1116
[  529.673349][T11070] netlink: 'syz.4.1116': attribute type 1 has an invalid length.
[  529.681133][T11070] netlink: 'syz.4.1116': attribute type 2 has an invalid length.
[  529.693263][T10811] usb 1-1: device descriptor read/8, error -71
[  529.913327][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  529.913792][   T29] audit: type=1400 audit(1775517087.183:739): avc:  denied  { bind } for  pid=11074 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  529.942603][   T29] audit: type=1400 audit(1775517087.220:740): avc:  denied  { listen } for  pid=11075 comm="syz.3.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  529.971261][T10811] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  530.011965][T10811] usb 1-1: device descriptor read/8, error -71
[  530.066857][T11078] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  530.068887][   T29] audit: type=1400 audit(1775517087.333:741): avc:  denied  { create } for  pid=11074 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  530.082446][T11078] 9p: Bad value for 'rfdno'
[  530.311943][   T29] audit: type=1400 audit(1775517087.333:742): avc:  denied  { read append } for  pid=11075 comm="syz.3.1118" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  530.430818][T10811] usb usb1-port1: unable to enumerate USB device
[  530.436290][   T29] audit: type=1400 audit(1775517087.333:743): avc:  denied  { open } for  pid=11075 comm="syz.3.1118" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  530.512770][T11082] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  530.526550][   T29] audit: type=1400 audit(1775517087.361:744): avc:  denied  { ioctl } for  pid=11074 comm="syz.4.1117" path="socket:[29327]" dev="sockfs" ino=29327 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  530.649840][   T29] audit: type=1400 audit(1775517087.361:745): avc:  denied  { getopt } for  pid=11074 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  530.671334][   T29] audit: type=1400 audit(1775517087.361:746): avc:  denied  { write } for  pid=11074 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  530.693162][   T29] audit: type=1400 audit(1775517087.735:747): avc:  denied  { connect } for  pid=11081 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  531.134086][   T29] audit: type=1400 audit(1775517087.744:748): avc:  denied  { bind } for  pid=11081 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  531.165498][T11089] tmpfs: Unknown parameter 'grpquota_block_har›º»(i'
[  531.382807][T11093] fuse: Bad value for 'fd'
[  532.032168][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'.
[  532.060657][T11114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11114 comm=syz.0.1127
[  532.084922][T11114] netlink: 'syz.0.1127': attribute type 1 has an invalid length.
[  532.093083][T11114] netlink: 'syz.0.1127': attribute type 2 has an invalid length.
[  533.960852][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[  533.971406][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[  534.438151][ T5811] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  534.648395][ T5811] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  534.659147][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.677197][ T5811] usb 1-1: config 0 descriptor??
[  535.680154][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  535.680230][   T29] audit: type=1400 audit(1775517092.573:752): avc:  denied  { mount } for  pid=11149 comm="syz.1.1138" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  536.077607][   T29] audit: type=1400 audit(1775517092.573:753): avc:  denied  { getopt } for  pid=11149 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  536.207052][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'.
[  536.712448][T11167] nfs: Unknown parameter 'ÿÿÿÿ'
[  536.725081][T11161] comedi comedi1: comedi_config --init_data is deprecated
[  536.899149][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'.
[  536.947520][   T29] audit: type=1400 audit(1775517093.574:754): avc:  denied  { create } for  pid=11158 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  537.025151][T11168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11168 comm=syz.2.1139
[  537.051715][T11168] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  537.060762][T11168] netlink: 'syz.2.1139': attribute type 2 has an invalid length.
[  537.077659][T10811] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  537.248221][T10811] usb 5-1: Using ep0 maxpacket: 32
[  537.254983][T10811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.265418][T10811] usb 5-1: config 0 has no interfaces?
[  537.282464][T10811] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  537.291673][T10811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.303243][T10811] usb 5-1: Product: syz
[  537.313288][T10811] usb 5-1: Manufacturer: syz
[  537.340399][T10811] usb 5-1: SerialNumber: syz
[  537.392818][ T5811] usb 1-1: Cannot read MAC address
[  537.405661][ T5811] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  537.552879][T10811] usb 5-1: config 0 descriptor??
[  537.555453][ T5811] usb 1-1: USB disconnect, device number 13
[  538.126479][T11179] 9p: Bad value for 'rfdno'
[  539.164497][  T794] usb 5-1: USB disconnect, device number 4
[  539.464256][   T29] audit: type=1400 audit(1775517096.120:755): avc:  denied  { watch watch_reads } for  pid=11181 comm="syz.0.1145" path="/212" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  539.581818][T11188] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffffd,2)
[  540.379262][T11197] FAT-fs (loop7): unable to read boot sector
[  541.511371][T11206] dummy0: entered allmulticast mode
[  541.679587][T11209] bridge0: entered promiscuous mode
[  541.686153][T11209] bridge0: port 4(vlan2) entered blocking state
[  541.692562][T11209] bridge0: port 4(vlan2) entered disabled state
[  541.699941][T11209] vlan2: entered allmulticast mode
[  541.705717][T11209] bridge0: entered allmulticast mode
[  541.772664][T11209] vlan2: left allmulticast mode
[  541.798152][T11209] bridge0: left allmulticast mode
[  541.852373][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1153'.
[  541.864585][T11209] bridge0: left promiscuous mode
[  541.877860][T11218] kAFS: unable to lookup cell 'ÿ'
[  541.884291][T11218] kAFS: unable to lookup cell '(,c¾Ì'
[  541.907864][T11215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11215 comm=syz.2.1153
[  541.923448][T11215] netlink: 'syz.2.1153': attribute type 1 has an invalid length.
[  541.931648][T11215] netlink: 'syz.2.1153': attribute type 2 has an invalid length.
[  541.987864][T11218] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  541.996920][T11218] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  542.008473][T11218] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  542.043732][   T29] audit: type=1400 audit(1775517098.506:756): avc:  denied  { firmware_load } for  pid=11210 comm="syz.0.1151" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  542.310334][   T29] audit: type=1400 audit(1775517098.684:757): avc:  denied  { ioctl } for  pid=11216 comm="syz.3.1154" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  542.502387][  T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  542.837009][  T794] usb 4-1: Using ep0 maxpacket: 16
[  542.893309][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'.
[  542.979594][  T794] usb 4-1: config 1 has an invalid interface number: 6 but max is 2
[  543.017941][  T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.032050][  T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  543.101361][  T794] usb 4-1: config 1 has no interface number 0
[  543.133412][  T794] usb 4-1: config 1 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  543.273390][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'.
[  543.372756][T11234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11234 comm=syz.1.1158
[  543.403588][T11234] netlink: 'syz.1.1158': attribute type 1 has an invalid length.
[  543.411390][T11234] netlink: 'syz.1.1158': attribute type 2 has an invalid length.
[  543.800611][  T794] usb 4-1: string descriptor 0 read error: -22
[  543.806846][  T794] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  543.929413][T11237] loop6: detected capacity change from 0 to 2640
[  543.938028][T11237] buffer_io_error: 5 callbacks suppressed
[  543.938042][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.951970][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.961009][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.968934][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.977003][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.988718][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.997546][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  544.006866][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  544.014902][T11237] ldm_validate_partition_table(): Disk read failed.
[  544.021670][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  544.029754][T11237] Buffer I/O error on dev loop6, logical block 0, async page read
[  544.037972][T11237] Dev loop6: unable to read RDB block 0
[  544.044378][T11237]  loop6: unable to read partition table
[  544.067860][T11237] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³è) failed (rc=-5)
[  544.296178][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.317561][  T794] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  544.442793][  T794] snd-usb-audio 4-1:1.6: probe with driver snd-usb-audio failed with error -22
[  544.652798][T11244] loop5: detected capacity change from 0 to 7
[  544.671737][T11244] Dev loop5: unable to read RDB block 7
[  544.678051][T11244]  loop5: AHDI p1
[  544.681808][T11244] loop5: partition table partially beyond EOD, truncated
[  544.711005][T11244] netlink: 'syz.0.1160': attribute type 10 has an invalid length.
[  544.719508][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1160'.
[  544.754864][   T29] audit: type=1400 audit(1775517100.958:758): avc:  denied  { read } for  pid=11241 comm="syz.0.1160" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  545.242044][   T29] audit: type=1400 audit(1775517100.958:759): avc:  denied  { open } for  pid=11241 comm="syz.0.1160" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  545.696714][   T29] audit: type=1400 audit(1775517100.967:760): avc:  denied  { ioctl } for  pid=11241 comm="syz.0.1160" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  545.786949][   T29] audit: type=1400 audit(1775517100.967:761): avc:  denied  { append } for  pid=11241 comm="syz.0.1160" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  546.240374][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'.
[  546.788508][  T794] usb 4-1: USB disconnect, device number 7
[  547.764125][   T29] audit: type=1400 audit(1775517103.709:762): avc:  denied  { bind } for  pid=11272 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  547.849768][   T29] audit: type=1400 audit(1775517103.718:763): avc:  denied  { listen } for  pid=11272 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  548.000814][   T29] audit: type=1400 audit(1775517103.718:764): avc:  denied  { write } for  pid=11272 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  548.518850][T11266] 9pnet_virtio: no channels available for device 127.0.0.1
[  549.412018][T11298] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  549.767215][T11305] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  549.915432][T11303] ip6t_REJECT: ECHOREPLY is not supported
[  550.757056][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'.
[  550.862233][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  550.970042][T11313] netlink: 'syz.2.1177': attribute type 12 has an invalid length.
[  550.982577][T11313] SET target dimension over the limit!
[  551.159867][ T5927] usb 4-1: Using ep0 maxpacket: 16
[  551.613594][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.712112][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.748726][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.771834][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  551.799485][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.864317][ T5927] usb 4-1: config 0 descriptor??
[  552.318261][T11334] loop6: detected capacity change from 0 to 2640
[  552.325036][T11334] buffer_io_error: 336 callbacks suppressed
[  552.325051][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.339982][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.348405][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.356231][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.364679][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.373998][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.383431][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.392887][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.400786][T11334] ldm_validate_partition_table(): Disk read failed.
[  552.408537][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.417942][T11334] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.427265][T11334] Dev loop6: unable to read RDB block 0
[  552.434233][T11334]  loop6: unable to read partition table
[  552.440132][T11334] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  552.476914][T11334] blk_print_req_error: 5 callbacks suppressed
[  552.476931][T11334] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  552.493613][T11334] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  552.504399][T11334] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  552.514941][T11334] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  552.526198][T11334] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1
[  552.537084][T11334] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1
[  552.549087][T11334] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1
[  552.560180][T11334] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1
[  552.727834][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'.
[  554.406659][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'.
[  554.976282][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  555.038529][   T29] audit: type=1400 audit(1775517110.185:765): avc:  denied  { map } for  pid=11347 comm="syz.1.1185" path="socket:[30921]" dev="sockfs" ino=30921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  555.085271][ T5927] usbhid 4-1:0.0: can't add hid device: -71
[  555.091280][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  555.107649][ T5927] usb 4-1: USB disconnect, device number 8
[  555.279120][   T29] audit: type=1400 audit(1775517110.185:766): avc:  denied  { read accept } for  pid=11347 comm="syz.1.1185" path="socket:[30921]" dev="sockfs" ino=30921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  555.758844][   T29] audit: type=1400 audit(1775517111.364:767): avc:  denied  { connect } for  pid=11349 comm="syz.0.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  555.999034][T11367] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777'
[  556.106425][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  556.117619][   T29] audit: type=1400 audit(1775517111.476:768): avc:  denied  { read write } for  pid=11364 comm="syz.1.1189" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  556.148159][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  556.162515][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  556.202721][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  556.216531][   T29] audit: type=1400 audit(1775517111.476:769): avc:  denied  { open } for  pid=11364 comm="syz.1.1189" path="/227/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  556.323541][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  556.332536][   T29] audit: type=1400 audit(1775517111.691:770): avc:  denied  { accept } for  pid=11376 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  556.357569][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'.
[  556.473846][ T5927] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  556.493945][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  556.507043][ T5927] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  556.519665][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  556.772776][T11382] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  556.779457][T11382] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  556.918446][ T6797] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  557.005111][ T5927] usb 2-1: Product: syz
[  557.016040][ T5927] usb 2-1: Manufacturer: syz
[  557.027666][ T5927] usb 2-1: SerialNumber: syz
[  557.153820][T11385] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  557.163696][ T5927] usb 2-1: config 0 descriptor??
[  557.173757][ T5927] usb 2-1: selecting invalid altsetting 0
[  557.740430][   T29] audit: type=1400 audit(1775517113.226:771): avc:  denied  { bind } for  pid=11383 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  557.763459][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'.
[  558.440751][ T5927] usb 2-1: USB disconnect, device number 10
[  558.491193][T10557] udevd[10557]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  559.588956][   T29] audit: type=1400 audit(1775517114.808:772): avc:  denied  { write } for  pid=11405 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  561.388369][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  561.394889][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  562.509956][   T29] audit: type=1400 audit(1775517116.904:773): avc:  denied  { watch watch_reads } for  pid=11414 comm="syz.3.1200" path="/syzcgroup/unified/syz3" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  562.764474][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'.
[  563.272447][T11430] overlayfs: failed to resolve './file1': -2
[  563.364746][   T29] audit: type=1400 audit(1775517118.485:774): avc:  denied  { bind } for  pid=11433 comm="syz.3.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  563.425556][T11437] binder: binder_mmap: 11433 2000003d3000-2000003d7000 bad vm_flags failed -1
[  563.582240][   T29] audit: type=1400 audit(1775517118.541:775): avc:  denied  { map } for  pid=11433 comm="syz.3.1206" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  565.381248][   T29] audit: type=1400 audit(1775517120.366:776): avc:  denied  { getopt } for  pid=11450 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  565.653801][T11466] dummy0: entered allmulticast mode
[  565.868115][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1213'.
[  565.953908][   T29] audit: type=1400 audit(1775517120.872:777): avc:  denied  { write } for  pid=11468 comm="syz.4.1214" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  565.980644][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'.
[  566.541976][   T29] audit: type=1400 audit(1775517120.890:778): avc:  denied  { setattr } for  pid=11461 comm="syz.2.1213" name="NETLINK" dev="sockfs" ino=31907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  566.991224][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'.
[  567.023285][T11473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11473 comm=syz.2.1215
[  567.026466][T11473] netlink: 'syz.2.1215': attribute type 1 has an invalid length.
[  567.026478][T11473] netlink: 'syz.2.1215': attribute type 2 has an invalid length.
[  567.041657][   T29] audit: type=1400 audit(1775517121.873:779): avc:  denied  { read } for  pid=11474 comm="syz.3.1216" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  567.041704][   T29] audit: type=1400 audit(1775517121.873:780): avc:  denied  { open } for  pid=11474 comm="syz.3.1216" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  567.041812][   T29] audit: type=1400 audit(1775517121.882:781): avc:  denied  { ioctl } for  pid=11474 comm="syz.3.1216" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  568.004404][T11489] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  568.017124][   T29] audit: type=1400 audit(1775517122.846:782): avc:  denied  { write } for  pid=11483 comm="syz.4.1219" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  568.263110][T11487] orangefs_mount: mount request failed with -4
[  568.508468][T11495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11495 comm=syz.0.1220
[  568.547281][T11495] netlink: 'syz.0.1220': attribute type 1 has an invalid length.
[  568.547335][T11495] netlink: 'syz.0.1220': attribute type 2 has an invalid length.
[  569.506805][   T29] audit: type=1400 audit(1775517124.231:783): avc:  denied  { ioctl } for  pid=11509 comm="syz.3.1223" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  569.812544][T11516] random: crng reseeded on system resumption
[  570.079816][   T29] audit: type=1400 audit(1775517124.512:784): avc:  denied  { setopt } for  pid=11509 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  570.142568][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'.
[  570.950656][T11525] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  571.054347][   T29] audit: type=1400 audit(1775517124.521:785): avc:  denied  { write } for  pid=11509 comm="syz.3.1223" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  571.087765][   T29] audit: type=1400 audit(1775517124.521:786): avc:  denied  { open } for  pid=11509 comm="syz.3.1223" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  571.209103][   T29] audit: type=1400 audit(1775517125.822:787): avc:  denied  { wake_alarm } for  pid=11530 comm="syz.0.1228" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  571.861285][T11539] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  571.958302][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'.
[  572.003286][T11542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11542 comm=syz.2.1229
[  572.019647][T11542] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  572.027764][T11542] netlink: 'syz.2.1229': attribute type 2 has an invalid length.
[  572.336480][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1231'.
[  572.695339][   T29] audit: type=1400 audit(1775517127.207:788): avc:  denied  { listen } for  pid=11549 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  573.217284][T11559] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  573.287420][T11559] 9p: Bad value for 'rfdno'
[  573.510920][T10811] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  573.559439][T11561] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1233'.
[  573.660873][   T29] audit: type=1400 audit(1775517128.012:789): avc:  denied  { write } for  pid=11553 comm="syz.1.1233" path="socket:[31308]" dev="sockfs" ino=31308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  574.151948][T11045] Bluetooth: hci4: command 0x0406 tx timeout
[  574.620339][T11571] lo speed is unknown, defaulting to 1000
[  574.811965][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.822023][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.875469][T11571] lo speed is unknown, defaulting to 1000
[  574.951433][   T29] audit: type=1400 audit(1775517128.835:790): avc:  denied  { accept } for  pid=11555 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  575.135948][   T29] audit: type=1400 audit(1775517129.004:791): avc:  denied  { read } for  pid=11555 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  575.183513][   T29] audit: type=1400 audit(1775517129.004:792): avc:  denied  { ioctl } for  pid=11555 comm="syz.3.1234" path="socket:[32141]" dev="sockfs" ino=32141 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  575.209608][   T29] audit: type=1400 audit(1775517129.004:793): avc:  denied  { read } for  pid=11555 comm="syz.3.1234" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  575.281869][   T29] audit: type=1400 audit(1775517129.004:794): avc:  denied  { open } for  pid=11555 comm="syz.3.1234" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  575.306487][   T29] audit: type=1400 audit(1775517129.004:795): avc:  denied  { ioctl } for  pid=11555 comm="syz.3.1234" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  575.611645][   T29] audit: type=1400 audit(1775517129.949:796): avc:  denied  { setopt } for  pid=11576 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  575.873856][   T29] audit: type=1400 audit(1775517130.042:797): avc:  denied  { create } for  pid=11576 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  575.896173][   T29] audit: type=1400 audit(1775517130.080:798): avc:  denied  { sys_admin } for  pid=11576 comm="syz.4.1238" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  576.417960][T10811] usb 4-1: unable to get BOS descriptor or descriptor too short
[  576.461064][T10811] usb 4-1: unable to read config index 0 descriptor/start: -71
[  576.507463][T10811] usb 4-1: can't read configurations, error -71
[  577.492401][T10819] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  577.631337][T10819] usb 5-1: device descriptor read/64, error -71
[  578.006637][T11604] binder: 11601:11604 ioctl c0306201 0 returned -14
[  578.026916][T10819] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  578.176342][T10819] usb 5-1: device descriptor read/64, error -71
[  578.294180][T10819] usb usb5-port1: attempt power cycle
[  578.660592][T10819] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  578.690361][T10819] usb 5-1: device descriptor read/8, error -71
[  580.122004][T11621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  580.141794][  T794] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  580.599949][  T794] usb 1-1: Using ep0 maxpacket: 8
[  580.616392][  T794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  580.645085][  T794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  580.682486][T11625] FAT-fs (loop7): unable to read boot sector
[  580.690568][  T794] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  580.842514][  T794] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  580.860616][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.021526][  T794] hub 1-1:1.0: bad descriptor, ignoring hub
[  581.034098][  T794] hub 1-1:1.0: probe with driver hub failed with error -5
[  581.048559][  T794] cdc_wdm 1-1:1.0: skipping garbage
[  581.131403][T11636] max out of range
[  581.406235][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  581.406269][   T29] audit: type=1400 audit(1775517135.105:801): avc:  denied  { mount } for  pid=11629 comm="syz.4.1249" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  581.445100][  T794] cdc_wdm 1-1:1.0: skipping garbage
[  581.659395][  T794] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  582.040758][   T29] audit: type=1400 audit(1775517135.114:802): avc:  denied  { remount } for  pid=11629 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  582.077162][   T29] audit: type=1400 audit(1775517135.835:803): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  582.193531][T11644] x_tables: ip6_tables: mh match: only valid for protocol 135
[  582.315680][   T29] audit: type=1400 audit(1775517136.106:804): avc:  denied  { write } for  pid=11641 comm="syz.4.1252" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  583.555006][  T794] usb 1-1: USB disconnect, device number 14
[  583.561276][   T29] audit: type=1400 audit(1775517137.379:805): avc:  denied  { create } for  pid=11651 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  584.006373][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  584.341963][   T29] audit: type=1400 audit(1775517138.118:806): avc:  denied  { ioctl } for  pid=11662 comm="syz.3.1256" path="socket:[31481]" dev="sockfs" ino=31481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  584.839632][T11676] IPv6: Can't replace route, no match found
[  584.848450][T11676] IPv6: Can't replace route, no match found
[  585.652073][T11683] FAT-fs (loop7): unable to read boot sector
[  586.282941][   T29] audit: type=1400 audit(1775517139.934:807): avc:  denied  { set_context_mgr } for  pid=11684 comm="syz.0.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  586.863240][T11698] lo speed is unknown, defaulting to 1000
[  586.944357][T11698] lo speed is unknown, defaulting to 1000
[  588.540273][ T5817] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  588.965983][   T29] audit: type=1400 audit(1775517142.198:808): avc:  denied  { read write } for  pid=11711 comm="syz.4.1270" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  589.001364][   T29] audit: type=1400 audit(1775517142.198:809): avc:  denied  { open } for  pid=11711 comm="syz.4.1270" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  589.089449][   T29] audit: type=1400 audit(1775517142.208:810): avc:  denied  { remount } for  pid=11711 comm="syz.4.1270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  589.121131][   T29] audit: type=1400 audit(1775517142.217:811): avc:  denied  { append } for  pid=11711 comm="syz.4.1270" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  589.255494][T11723] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  589.272209][T11720] xt_CT: No such helper "snmp_trap"
[  589.664777][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'.
[  590.326190][T11741] dummy0: entered allmulticast mode
[  591.651761][   T29] audit: type=1400 audit(1775517144.968:812): avc:  denied  { read } for  pid=11749 comm="syz.0.1278" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  591.688323][   T29] audit: type=1400 audit(1775517144.968:813): avc:  denied  { open } for  pid=11749 comm="syz.0.1278" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  593.570163][   T29] audit: type=1400 audit(1775517146.756:814): avc:  denied  { connect } for  pid=11767 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  593.769408][   T29] audit: type=1400 audit(1775517146.943:815): avc:  denied  { ioctl } for  pid=11772 comm="syz.1.1283" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31708 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  594.583344][   T29] audit: type=1400 audit(1775517147.692:816): avc:  denied  { write } for  pid=11782 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  594.739978][T11788] ISOFS: Unable to identify CD-ROM format.
[  594.803728][T11788] netlink: 'syz.1.1285': attribute type 10 has an invalid length.
[  594.825781][T11788] team0: Device ipvlan1 failed to register rx_handler
[  595.072838][   T29] audit: type=1400 audit(1775517148.131:817): avc:  denied  { bind } for  pid=11785 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  595.722947][T11045] Bluetooth: hci4: command 0x0406 tx timeout
[  596.996776][T10819] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  597.193702][T11807] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1291'.
[  597.203369][T10819] usb 4-1: Using ep0 maxpacket: 16
[  597.251855][T10819] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  597.293978][T11804] 8021q: adding VLAN 0 to HW filter on device bond1
[  597.333844][T10819] usb 4-1: config 1 has no interface number 1
[  597.359367][T10819] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  597.400625][T10819] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  597.449308][T10819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  597.797309][T10819] usb 4-1: string descriptor 0 read error: -71
[  597.803694][T10819] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  597.813599][T10819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.851452][T10819] usb 4-1: can't set config #1, error -71
[  597.858663][T10819] usb 4-1: USB disconnect, device number 11
[  598.085683][   T29] audit: type=1400 audit(1775517150.958:818): avc:  denied  { watch } for  pid=11811 comm="syz.2.1292" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  599.177503][   T29] audit: type=1400 audit(1775517151.678:819): avc:  denied  { map } for  pid=11825 comm="syz.2.1295" path="socket:[32787]" dev="sockfs" ino=32787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  599.548395][   T29] audit: type=1400 audit(1775517151.678:820): avc:  denied  { read accept } for  pid=11825 comm="syz.2.1295" path="socket:[32787]" dev="sockfs" ino=32787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  602.102258][T11861] FAT-fs (loop7): unable to read boot sector
[  602.172696][T11859] 9p: Bad value for 'rfdno'
[  602.219687][   T29] audit: type=1400 audit(1775517154.813:821): avc:  denied  { name_bind } for  pid=11856 comm="syz.1.1303" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  603.531945][   T29] audit: type=1400 audit(1775517156.058:822): avc:  denied  { ioctl } for  pid=11871 comm="syz.2.1306" path="socket:[33921]" dev="sockfs" ino=33921 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  603.610693][T11881] netlink: 'syz.2.1306': attribute type 4 has an invalid length.
[  604.108465][   T29] audit: type=1400 audit(1775517156.600:823): avc:  denied  { write } for  pid=11883 comm="syz.1.1310" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  604.694269][T11891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1311'.
[  604.986019][T11895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11895 comm=syz.4.1311
[  605.010018][T11895] netlink: 'syz.4.1311': attribute type 1 has an invalid length.
[  605.017820][T11895] netlink: 'syz.4.1311': attribute type 2 has an invalid length.
[  605.234719][T11900] ./file0: Can't lookup blockdev
[  605.432338][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'.
[  607.049169][T10811] hid-generic 0080:0005:FFFFFFFE.0001: unknown main item tag 0x0
[  607.082104][T10811] hid-generic 0080:0005:FFFFFFFE.0001: unknown main item tag 0x0
[  607.116532][T10811] hid-generic 0080:0005:FFFFFFFE.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  607.249397][   T29] audit: type=1400 audit(1775517159.211:824): avc:  denied  { read write } for  pid=11902 comm="syz.4.1314" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  607.456218][   T29] audit: type=1400 audit(1775517159.211:825): avc:  denied  { open } for  pid=11902 comm="syz.4.1314" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  607.621199][T11925] fido_id[11925]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  607.818566][T11923] Mount JFS Failure: -22
[  607.823890][T11923] jfs_mount failed w/return code = -22
[  608.086540][  T794] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  608.118721][T10811] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  608.159559][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'.
[  608.664329][  T794] usb 2-1: Using ep0 maxpacket: 16
[  608.701409][  T794] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  608.756192][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.801756][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.817842][  T794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  608.952114][  T794] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  609.026959][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.048831][  T794] usb 2-1: config 0 descriptor??
[  609.093854][T10811] usb 1-1: not running at top speed; connect to a high speed hub
[  609.263794][T11948] overlayfs: failed to resolve './bus': -2
[  609.334669][T11950] netlink: 'syz.3.1322': attribute type 4 has an invalid length.
[  609.846934][T11953] FAT-fs (loop9): unable to read boot sector
[  610.312418][  T794] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0002/input/input13
[  610.409050][   T29] audit: type=1400 audit(1775517162.515:826): avc:  denied  { read } for  pid=5164 comm="acpid" name="mouse1" dev="devtmpfs" ino=2976 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  610.502992][  T794] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0002/input/input14
[  610.627915][   T29] audit: type=1400 audit(1775517162.515:827): avc:  denied  { open } for  pid=5164 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2976 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  610.784513][   T29] audit: type=1400 audit(1775517162.590:828): avc:  denied  { ioctl } for  pid=5164 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2976 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  610.887768][T10811] usb 1-1: unable to read config index 0 descriptor/start: -71
[  610.897133][   T29] audit: type=1400 audit(1775517162.767:829): avc:  denied  { mount } for  pid=11959 comm="syz.2.1325" name="/" dev="autofs" ino=34062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  610.929495][T10811] usb 1-1: can't read configurations, error -71
[  610.948465][  T794] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[  612.331869][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1338'.
[  612.550795][T11974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11974 comm=syz.0.1338
[  612.635815][ T5927] usb 2-1: USB disconnect, device number 11
[  612.643803][T11971] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  612.652131][T11971] netlink: 'syz.0.1338': attribute type 2 has an invalid length.
[  612.985718][T11982] netlink: 'syz.2.1328': attribute type 10 has an invalid length.
[  613.002176][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1328'.
[  613.049211][T11982] bridge0: port 4(dummy0) entered blocking state
[  613.073320][T11982] bridge0: port 4(dummy0) entered disabled state
[  613.570670][T11982] dummy0: entered promiscuous mode
[  613.708011][T11982] netlink: 'syz.2.1328': attribute type 23 has an invalid length.
[  614.027266][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'.
[  614.069875][T11997] random: crng reseeded on system resumption
[  614.207765][T10819] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  614.608187][T10819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.620287][T10819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  614.829451][T10819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  614.850824][T10819] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  614.861515][T10819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.883429][T10819] usb 5-1: config 0 descriptor??
[  615.571409][T10819] usbhid 5-1:0.0: can't add hid device: -71
[  615.597926][T10819] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  615.681153][T12017] max out of range
[  616.044115][T10819] usb 5-1: USB disconnect, device number 10
[  616.902559][T10819] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  617.357986][T10819] usb 1-1: Using ep0 maxpacket: 16
[  617.388052][T10819] usb 1-1: config 1 has an invalid interface number: 6 but max is 2
[  617.399979][T10819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  617.432575][T10819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  617.756083][T10819] usb 1-1: config 1 has no interface number 0
[  617.768328][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'.
[  617.880125][T10819] usb 1-1: config 1 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  617.929983][T10819] usb 1-1: string descriptor 0 read error: -22
[  617.936203][T10819] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  617.982047][T10819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.047637][T10819] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  618.884863][T10819] snd-usb-audio 1-1:1.6: probe with driver snd-usb-audio failed with error -22
[  619.129088][T10819] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0
[  619.161886][T10819] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0
[  619.227455][T10819] hid-generic 0080:0005:FFFFFFFE.0003: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  619.723548][T10819] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  619.884918][T10819] usb 2-1: Using ep0 maxpacket: 16
[  619.895254][T10819] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  619.903557][T10819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  619.922208][T10819] usb 2-1: config 0 has no interface number 0
[  619.935075][T10819] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  619.951766][T10819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.962119][T10819] usb 2-1: Product: syz
[  619.966605][T10819] usb 2-1: Manufacturer: syz
[  619.973003][T10819] usb 2-1: SerialNumber: syz
[  619.981205][T10819] usb 2-1: config 0 descriptor??
[  619.989312][T10819] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  619.998715][T10819] uvcvideo 2-1:0.105: No valid video chain found.
[  620.755403][T10819] usb 1-1: USB disconnect, device number 17
[  623.658755][T12109] IPVS: set_ctl: invalid protocol: 56 224.0.0.2:0
[  623.860436][ T5886] usb 2-1: USB disconnect, device number 12
[  624.196523][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1361'.
[  625.227584][ T5817] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  625.237911][   T29] audit: type=1400 audit(1775517176.374:830): avc:  denied  { listen } for  pid=12133 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  625.294601][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'.
[  625.562032][T12136] nbd: socks must be embedded in a SOCK_ITEM attr
[  626.405338][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  626.416077][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  626.585630][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1368'.
[  626.833106][T12150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12150 comm=syz.3.1368
[  626.883839][T12150] netlink: 'syz.3.1368': attribute type 1 has an invalid length.
[  626.891847][T12150] netlink: 'syz.3.1368': attribute type 2 has an invalid length.
[  627.557739][T10556] udevd[10556]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  627.805348][T10824] udevd[10824]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  628.831862][T12174] netlink: zone id is out of range
[  628.837037][T12174] netlink: zone id is out of range
[  628.842825][T12174] netlink: zone id is out of range
[  628.847961][T12174] netlink: zone id is out of range
[  628.853585][T12174] netlink: zone id is out of range
[  629.486702][T12177] /dev/nullb0: Can't lookup blockdev
[  630.353883][T11045] Bluetooth: hci0: unexpected event for opcode 0x1004
[  630.380170][T12189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'.
[  631.085602][T12193] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  631.172825][   T29] audit: type=1400 audit(1775517181.942:831): avc:  denied  { call } for  pid=12190 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  631.593610][   T29] audit: type=1400 audit(1775517182.335:832): avc:  denied  { append } for  pid=12200 comm="syz.0.1379" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  631.941370][   T29] audit: type=1400 audit(1775517182.662:833): avc:  denied  { bind } for  pid=12200 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  631.992368][T12207] netlink: 'syz.4.1380': attribute type 23 has an invalid length.
[  632.139093][T12206] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  634.069223][T12229] loop6: detected capacity change from 0 to 2640
[  634.128650][T12229] buffer_io_error: 6 callbacks suppressed
[  634.128665][T12229] Buffer I/O error on dev loop6, logical block 0, async page read
[  634.443995][T12229] Buffer I/O error on dev loop6, logical block 0, async page read
[  634.453077][T12229] Buffer I/O error on dev loop6, logical block 0, async page read
[  634.462052][T12229] Buffer I/O error on dev loop6, logical block 0, async page read
[  634.476398][T12229]  loop6: unable to read partition table
[  634.492034][T12233] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  634.524214][T12229] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³è) failed (rc=-5)
[  634.602547][T12238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  634.715208][T12233] Buffer I/O error on dev loop6, logical block 1, lost async page write
[  634.728146][T11045] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  634.739443][T11045] Bluetooth: hci0: Injecting HCI hardware error event
[  634.753544][T11045] Bluetooth: hci0: hardware error 0x00
[  634.887228][T10811] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  635.063331][T10811] usb 5-1: Using ep0 maxpacket: 32
[  635.084918][T12233] Buffer I/O error on dev loop6, logical block 2, lost async page write
[  635.121082][T10811] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  635.143599][T12233] Buffer I/O error on dev loop6, logical block 3, lost async page write
[  635.152031][T12233] Buffer I/O error on dev loop6, logical block 4, lost async page write
[  635.165539][T10811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.165612][T12233] Buffer I/O error on dev loop6, logical block 5, lost async page write
[  635.173539][T10811] usb 5-1: Product: syz
[  635.173558][T10811] usb 5-1: Manufacturer: syz
[  635.173571][T10811] usb 5-1: SerialNumber: syz
[  635.212338][   T29] audit: type=1400 audit(1775517185.723:834): avc:  denied  { ioctl } for  pid=12239 comm="syz.1.1387" path="socket:[33652]" dev="sockfs" ino=33652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  635.238463][T10811] usb 5-1: config 0 descriptor??
[  635.242144][ T5179] ldm_validate_partition_table(): Disk read failed.
[  635.262120][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'.
[  635.265216][T10811] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  635.271621][ T5179] Dev loop6: unable to read RDB block 0
[  635.307540][T10811] dvb-usb: bulk message failed: -22 (4/0)
[  635.311506][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'.
[  635.313495][T10811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  635.323188][ T5179]  loop6: unable to read partition table
[  635.392829][T10811] dvb-usb: bulk message failed: -22 (5/0)
[  635.398619][T10811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  635.471470][T10811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  635.565494][T10811] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  635.580708][T10811] usb 5-1: media controller created
[  635.622453][T10811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  635.636671][T10819] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  635.654830][T10811] usb 5-1: selecting invalid altsetting 3
[  635.662025][T10811] ttusb2: set interface to alts=3 failed
[  636.116351][T10819] usb 2-1: Using ep0 maxpacket: 32
[  636.123228][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1390'.
[  636.136420][T10819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  636.151973][T10819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  636.174769][T10811] DVB: Unable to find symbol tda10086_attach()
[  636.185435][T10819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  636.197191][T10811] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  636.209203][T10811] dvb-usb: bulk message failed: -22 (4/0)
[  636.220394][T10811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  636.251023][T10819] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  636.281185][T10811] dvb-usb: bulk message failed: -22 (5/0)
[  636.304562][T10819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.323308][T10811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  636.335140][T10819] usb 2-1: Product: syz
[  636.341279][T10819] usb 2-1: Manufacturer: syz
[  636.345981][T10811] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  636.355568][T10819] usb 2-1: SerialNumber: syz
[  636.409977][T10819] usb 2-1: config 0 descriptor??
[  636.425073][T12241] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  636.436815][T10819] hub 2-1:0.0: bad descriptor, ignoring hub
[  636.442984][T10819] hub 2-1:0.0: probe with driver hub failed with error -5
[  636.462516][T10819] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15
[  636.806893][T10819] usb 2-1: USB disconnect, device number 13
[  636.813254][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  637.293065][T11045] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  637.519650][   T29] audit: type=1400 audit(1775517187.519:835): avc:  denied  { mount } for  pid=12264 comm="syz.0.1395" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  637.671137][ T5811] usb 5-1: USB disconnect, device number 11
[  637.701993][   T29] audit: type=1400 audit(1775517187.632:836): avc:  denied  { mounton } for  pid=12264 comm="syz.0.1395" path="/" dev="autofs" ino=33719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  637.724984][ T5811] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  637.746718][T12268] FAT-fs (loop7): unable to read boot sector
[  637.971271][   T29] audit: type=1400 audit(1775517188.287:837): avc:  denied  { ioctl } for  pid=12272 comm="syz.4.1396" path="socket:[34891]" dev="sockfs" ino=34891 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  641.299007][T12310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1405'.
[  641.369528][T12311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1405'.
[  641.382175][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'.
[  641.614978][T12314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1404'.
[  642.021570][T12318] x_tables: unsorted underflow at hook 3
[  643.071071][T12323] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  645.164069][T12353] kernel profiling enabled (shift: 9)
[  646.316728][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'.
[  648.727399][T12386] kAFS: unable to lookup cell 'ÿ'
[  648.733384][T12386] kAFS: unable to lookup cell '(,c¾Ì'
[  650.041163][T12394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  650.048392][T12394] IPv6: NLM_F_CREATE should be set when creating new route
[  650.056721][T12394] IPv6: NLM_F_CREATE should be set when creating new route
[  650.063964][T12394] IPv6: NLM_F_CREATE should be set when creating new route
[  650.454095][T12405] netlink: 'syz.4.1424': attribute type 4 has an invalid length.
[  650.823964][T12414] comedi comedi2: pcl812: I/O port conflict (0x8001,16)
[  651.345179][   T29] audit: type=1400 audit(1775517200.798:838): avc:  denied  { create } for  pid=12415 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  651.448105][   T29] audit: type=1400 audit(1775517200.798:839): avc:  denied  { connect } for  pid=12415 comm="syz.3.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  651.528016][   T29] audit: type=1400 audit(1775517200.798:840): avc:  denied  { write } for  pid=12415 comm="syz.3.1427" path="socket:[36133]" dev="sockfs" ino=36133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  652.769361][   T29] audit: type=1400 audit(1775517202.155:841): avc:  denied  { setopt } for  pid=12429 comm="syz.1.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  653.274373][   T29] audit: type=1326 audit(1775517202.623:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca0d9c819 code=0x7ffc0000
[  653.745086][   T29] audit: type=1326 audit(1775517202.623:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca0d9c819 code=0x7ffc0000
[  653.900902][   T29] audit: type=1326 audit(1775517202.623:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faca0d9c819 code=0x7ffc0000
[  654.015445][   T29] audit: type=1326 audit(1775517202.623:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca0d9c819 code=0x7ffc0000
[  654.049421][   T29] audit: type=1326 audit(1775517202.623:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca0d9c819 code=0x7ffc0000
[  654.415766][   T29] audit: type=1326 audit(1775517202.623:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faca0d5d04e code=0x7ffc0000
[  654.691424][T12453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1435'.
[  655.949612][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  656.239130][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  656.249380][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.260965][ T5886] usb 5-1: config 0 descriptor??
[  656.271935][ T5886] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  657.653768][T12509] netlink: 'syz.4.1438': attribute type 4 has an invalid length.
[  657.662794][T12509] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1438'.
[  657.687375][T12509] .`: renamed from bond0 (while UP)
[  657.957660][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  658.029631][ T5886] usb 5-1: USB disconnect, device number 12
[  658.154741][   T29] kauditd_printk_skb: 35 callbacks suppressed
[  658.154752][   T29] audit: type=1400 audit(1775517207.199:883): avc:  denied  { create } for  pid=12515 comm="syz.3.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  659.235826][T12530] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  659.548301][T12534] loop6: detected capacity change from 0 to 2640
[  659.560325][T12534] buffer_io_error: 340 callbacks suppressed
[  659.560354][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.575204][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.583676][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.591694][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.600180][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.608635][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.616817][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.625605][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.633557][T12534] ldm_validate_partition_table(): Disk read failed.
[  659.640800][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.649197][T12534] Buffer I/O error on dev loop6, logical block 0, async page read
[  659.657846][T12534] Dev loop6: unable to read RDB block 0
[  659.665057][T12534]  loop6: unable to read partition table
[  659.673353][T12534] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³è) failed (rc=-5)
[  661.332127][   T29] audit: type=1400 audit(1775517210.128:884): avc:  denied  { shutdown } for  pid=12545 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  661.799728][T12552] /dev/nullb0: Can't lookup blockdev
[  661.808375][T12552] netlink: 'syz.2.1454': attribute type 10 has an invalid length.
[  661.824485][T12552] team0: Device ipvlan1 failed to register rx_handler
[  661.841120][T12554] binder: 12553:12554 ioctl 4018620d 0 returned -22
[  662.097885][   T29] audit: type=1400 audit(1775517210.839:885): avc:  denied  { bind } for  pid=12553 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  662.782467][T12566] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  662.853507][   T29] audit: type=1400 audit(1775517211.579:886): avc:  denied  { mount } for  pid=12559 comm="syz.0.1457" name="/" dev="rpc_pipefs" ino=35582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  664.931547][   T29] audit: type=1400 audit(1775517213.525:887): avc:  denied  { read } for  pid=12571 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  665.045458][T12596] netlink: 'syz.3.1464': attribute type 10 has an invalid length.
[  665.106735][T12596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1464'.
[  665.270043][T12596] bridge0: port 4(dummy0) entered blocking state
[  665.301681][T12596] bridge0: port 4(dummy0) entered disabled state
[  665.436613][T12596] dummy0: entered promiscuous mode
[  665.941991][T12596] netlink: 'syz.3.1464': attribute type 23 has an invalid length.
[  666.125210][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1467'.
[  666.450090][T12608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12608 comm=syz.0.1467
[  666.483633][T12608] netlink: 'syz.0.1467': attribute type 1 has an invalid length.
[  666.492902][T12608] netlink: 'syz.0.1467': attribute type 2 has an invalid length.
[  667.109340][T10819] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  667.443851][T12625] mkiss: ax0: crc mode is auto.
[  667.634990][T12627] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.1473'.
[  667.647380][T12627] netlink: 'syz.2.1473': attribute type 2 has an invalid length.
[  667.656029][T12627] netlink: 'syz.2.1473': attribute type 1 has an invalid length.
[  667.892096][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1473'.
[  668.326280][T10819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  668.785125][T10819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  668.796930][T10819] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  668.814464][T10819] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  668.869071][T10819] usb 2-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40
[  668.890117][T10819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.908972][T10819] usb 2-1: Product: syz
[  668.916478][T10819] usb 2-1: Manufacturer: syz
[  668.936507][T10819] usb 2-1: SerialNumber: syz
[  668.957699][T12610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  669.211547][T12610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  669.219598][T12610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  669.300243][T12643] tmpfs: Bad value for 'mpol'
[  669.653308][   T29] audit: type=1400 audit(1775517217.951:888): avc:  denied  { write } for  pid=12631 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  669.821807][T12645] tipc: Enabled bearer <eth:wlan1>, priority 10
[  669.953322][T10811] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  670.004455][T12645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  672.938846][   T29] audit: type=1400 audit(1775517220.993:889): avc:  denied  { mounton } for  pid=12650 comm="syz.3.1478" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  673.250368][   T29] audit: type=1400 audit(1775517221.002:890): avc:  denied  { mount } for  pid=12650 comm="syz.3.1478" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  673.385285][T10819] cdc_ncm 2-1:1.0: bind() failure
[  673.412355][T10819] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  673.485273][T10819] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  673.496013][T10819] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  673.532417][T10819] usb 2-1: USB disconnect, device number 14
[  673.721309][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'.
[  673.903967][T10811] usb 5-1: device descriptor read/all, error -71
[  674.268954][T12660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12660 comm=syz.1.1480
[  674.284365][T12660] netlink: 'syz.1.1480': attribute type 1 has an invalid length.
[  674.292565][T12660] netlink: 'syz.1.1480': attribute type 2 has an invalid length.
[  674.441580][T12661] binder: 12656:12661 ioctl c0306201 0 returned -14
[  674.731086][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'.
[  677.544987][T12734] binder: 12733:12734 ioctl c00c620f 0 returned -14
[  677.961026][T12745] siw: device registration error -23
[  678.351785][   T29] audit: type=1400 audit(1775517225.812:891): avc:  denied  { accept } for  pid=12738 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  678.410098][T12746] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1488'.
[  679.978974][   T29] audit: type=1400 audit(1775517227.618:892): avc:  denied  { read } for  pid=12759 comm="syz.3.1492" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  680.214197][   T29] audit: type=1400 audit(1775517227.646:893): avc:  denied  { open } for  pid=12759 comm="syz.3.1492" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  680.521431][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1493'.
[  680.977978][ T5886] IPVS: starting estimator thread 0...
[  681.125793][ T5811] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  681.393443][T12776] IPVS: using max 50 ests per chain, 120000 per kthread
[  682.151498][ T5927] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  682.314162][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  682.337822][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  682.366724][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.384771][ T5927] usb 2-1: config 0 descriptor??
[  682.865247][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'.
[  682.965834][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'.
[  683.082133][T12803] ubi0: attaching mtd0
[  683.096823][T12803] ubi0: scanning is finished
[  683.101495][T12803] ubi0: empty MTD device detected
[  683.893560][ T5927]  (null): keene_cmd_main failed (-110)
[  683.905447][ T5927] video4linux radio48: keene_cmd_main failed (-32)
[  683.912869][ T5927] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  684.725854][ T5811] usb 4-1: unable to get BOS descriptor or descriptor too short
[  684.808162][ T5811] usb 4-1: unable to read config index 0 descriptor/start: -71
[  684.843262][T12803] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  684.851172][T12803] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes
[  684.858747][T12803] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  684.866057][T12803] ubi0: VID header offset: 258 (aligned 258), data offset: 322
[  684.873578][T12803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  684.880703][T12803] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21
[  684.890032][T12803] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 635174248
[  684.900361][T12803] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  684.921515][ T5811] usb 4-1: can't read configurations, error -71
[  684.933382][T12810] ubi0: background thread "ubi_bgt0d" started, PID 12810
[  685.119354][T12812] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1504'.
[  686.064516][  T794] usb 2-1: USB disconnect, device number 15
[  688.218846][T12846] loop6: detected capacity change from 0 to 2640
[  688.228852][T12846] buffer_io_error: 336 callbacks suppressed
[  688.228880][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.245701][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.255187][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.263175][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.271795][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.281313][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.291828][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.301373][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.310836][T12846] ldm_validate_partition_table(): Disk read failed.
[  688.319019][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.327040][T12846] Buffer I/O error on dev loop6, logical block 0, async page read
[  688.336374][T12846] Dev loop6: unable to read RDB block 0
[  688.342723][T12846]  loop6: unable to read partition table
[  688.348849][T12846] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³è) failed (rc=-5)
[  690.157851][T12853] loop6: detected capacity change from 0 to 2640
[  690.164877][T12853] ldm_validate_partition_table(): Disk read failed.
[  690.171890][T12853] Dev loop6: unable to read RDB block 0
[  690.177933][T12853]  loop6: unable to read partition table
[  690.183632][T12853] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³è) failed (rc=-5)
[  692.697204][T12886] lo speed is unknown, defaulting to 1000
[  692.719244][T12885] hfs: can't find a HFS filesystem on dev nullb0
[  692.789545][T12886] lo speed is unknown, defaulting to 1000
[  693.367806][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  693.376242][T12891] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  693.388465][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  694.660608][T12914] loop6: detected capacity change from 0 to 2640
[  694.667926][T12914] buffer_io_error: 682 callbacks suppressed
[  694.667935][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.682019][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.689941][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.697796][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.705593][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.714222][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.722462][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.730733][T12914] Buffer I/O error on dev loop6, logical block 0, async page read
[  694.738535][T12914] ldm_validate_partition_table(): Disk read failed.
[  694.743071][T12918] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  694.745874][T12914]  loop6: unable to read partition table
[  694.754118][T12918] Buffer I/O error on dev loop6, logical block 1, lost async page write
[  694.759811][T12914] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³è) failed (rc=-5)
[  695.765533][ T5927] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  695.902183][T12941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'.
[  695.919007][  T794] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  695.928020][T12941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12941 comm=syz.2.1540
[  695.944431][T12941] netlink: 'syz.2.1540': attribute type 1 has an invalid length.
[  695.968412][ T5927] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  695.979726][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  695.993569][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.217387][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  696.236445][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  696.255120][  T794] usb 4-1: config 0 has no interfaces?
[  696.261515][  T794] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  696.278735][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.289564][  T794] usb 4-1: config 0 descriptor??
[  696.290671][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.312884][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  696.321968][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  696.333090][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.372298][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  696.373371][T12946] lo speed is unknown, defaulting to 1000
[  696.461675][T12949] binder: 12947:12949 ioctl 4018620d 0 returned -22
[  696.507570][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  696.558611][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  696.742817][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  697.733690][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  697.756397][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  697.794120][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  697.809084][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  698.574549][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  698.673551][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0
[  698.712290][ T5927] usb 2-1: unable to read config index 6 descriptor/start: -71
[  698.735602][ T5927] usb 2-1: can't read configurations, error -71
[  698.968312][   T29] audit: type=1400 audit(1775517245.380:894): avc:  denied  { write } for  pid=12954 comm="syz.4.1544" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  699.116431][T12965] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1545'.
[  699.545730][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'.
[  699.848386][T12970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12970 comm=syz.1.1547
[  699.953705][T11045] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  699.957062][ T5817] Bluetooth: hci5: command 0xfc11 tx timeout
[  700.058209][ T5811] usb 4-1: USB disconnect, device number 14
[  700.089618][T12946] lo speed is unknown, defaulting to 1000
[  700.232653][T12975] random: crng reseeded on system resumption
[  700.585285][   T29] audit: type=1400 audit(1775517246.568:895): avc:  denied  { setopt } for  pid=12971 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  701.062030][   T29] audit: type=1400 audit(1775517246.924:896): avc:  denied  { create } for  pid=12971 comm="syz.0.1548" name="#23" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  701.083161][   T29] audit: type=1400 audit(1775517246.924:897): avc:  denied  { link } for  pid=12971 comm="syz.0.1548" name="#23" dev="tmpfs" ino=1634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  701.134421][   T29] audit: type=1400 audit(1775517246.924:898): avc:  denied  { rename } for  pid=12971 comm="syz.0.1548" name="#24" dev="tmpfs" ino=1634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  701.356738][T12985] netlink: 'syz.1.1551': attribute type 4 has an invalid length.
[  701.480283][T12990] netlink: 'syz.1.1551': attribute type 4 has an invalid length.
[  701.595642][T10819] lo speed is unknown, defaulting to 1000
[  701.601823][ T5927] lo speed is unknown, defaulting to 1000
[  702.033044][T12985] xt_CT: You must specify a L4 protocol and not use inversions on it
[  702.984046][T13010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  702.991307][T13010] IPv6: NLM_F_CREATE should be set when creating new route
[  702.998517][T13010] IPv6: NLM_F_CREATE should be set when creating new route
[  703.005761][T13010] IPv6: NLM_F_CREATE should be set when creating new route
[  704.384043][   T29] audit: type=1400 audit(1775517250.452:899): avc:  denied  { setopt } for  pid=13012 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  705.454530][   T29] audit: type=1400 audit(1775517251.453:900): avc:  denied  { bind } for  pid=13023 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  705.558857][T13025] netlink: 'syz.0.1560': attribute type 4 has an invalid length.
[  705.567117][T13025] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1560'.
[  705.592790][T13025] .`: renamed from bond0 (while UP)
[  706.517881][   T29] audit: type=1400 audit(1775517252.249:901): avc:  denied  { accept } for  pid=13030 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  707.139007][T13043] lo speed is unknown, defaulting to 1000
[  709.243196][   T29] audit: type=1400 audit(1775517254.710:902): avc:  denied  { name_connect } for  pid=13057 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  709.946059][T13059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  709.953300][T13059] IPv6: NLM_F_CREATE should be set when creating new route
[  709.960561][T13059] IPv6: NLM_F_CREATE should be set when creating new route
[  709.967791][T13059] IPv6: NLM_F_CREATE should be set when creating new route
[  709.979661][   T29] audit: type=1400 audit(1775517255.262:903): avc:  denied  { accept } for  pid=13057 comm="syz.2.1572" lport=46835 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  710.029220][   T29] audit: type=1400 audit(1775517255.365:904): avc:  denied  { read } for  pid=13057 comm="syz.2.1572" lport=46835 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  710.283034][   T29] audit: type=1400 audit(1775517255.468:905): avc:  denied  { setopt } for  pid=13057 comm="syz.2.1572" lport=46835 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  710.352777][T13043] lo speed is unknown, defaulting to 1000
[  710.601243][T13083] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  710.721390][T13084] openvswitch: netlink: IP tunnel dst address not specified
[  711.048695][T13082] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  711.138881][T13089] binder: BINDER_SET_CONTEXT_MGR already set
[  711.145574][T13089] binder: 13069:13089 ioctl 4018620d 200000004a80 returned -16
[  711.218377][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  711.473963][ T5927] usb 4-1: Using ep0 maxpacket: 32
[  711.530600][ T5927] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  711.582054][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.611651][ T5927] usb 4-1: Product: syz
[  711.665522][ T5927] usb 4-1: Manufacturer: syz
[  711.740688][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  711.741120][ T5927] usb 4-1: SerialNumber: syz
[  711.774049][ T5927] usb 4-1: config 0 descriptor??
[  713.102975][ T5927] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  713.111321][ T5927] dvb-usb: bulk message failed: -22 (4/0)
[  713.117097][ T5927] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  713.128053][ T5927] dvb-usb: bulk message failed: -22 (5/0)
[  713.134562][ T5927] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  713.151607][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  713.161393][ T5927] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  713.172080][ T5927] usb 4-1: media controller created
[  713.264186][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  714.071949][ T5927] usb 4-1: selecting invalid altsetting 3
[  714.174841][ T5927] ttusb2: set interface to alts=3 failed
[  714.517073][T13117] blktrace: Concurrent blktraces are not allowed on loop4
[  714.853364][   T29] audit: type=1400 audit(1775517259.922:906): avc:  denied  { write } for  pid=13111 comm="syz.2.1582" name="file0" dev="tmpfs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  715.384752][ T5927] DVB: Unable to find symbol tda10086_attach()
[  715.390947][ T5927] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  715.407137][ T5927] dvb-usb: bulk message failed: -22 (4/0)
[  715.412879][ T5927] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  715.434860][ T5927] dvb-usb: bulk message failed: -22 (5/0)
[  715.443837][ T5927] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  716.161214][ T5927] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  716.203898][   T29] audit: type=1400 audit(1775517259.922:907): avc:  denied  { open } for  pid=13111 comm="syz.2.1582" path="/353/file0" dev="tmpfs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  716.227770][ T5927] usb 4-1: USB disconnect, device number 15
[  716.506290][T11045] Bluetooth: hci2: unexpected event for opcode 0x1005
[  716.708465][   T29] audit: type=1400 audit(1775517259.931:908): avc:  denied  { ioctl } for  pid=13111 comm="syz.2.1582" path="/353/file0" dev="tmpfs" ino=1962 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  716.710175][ T5927] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  716.745184][   T29] audit: type=1400 audit(1775517261.850:909): avc:  denied  { read } for  pid=13125 comm="syz.4.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  716.768332][   T29] audit: type=1400 audit(1775517261.850:910): avc:  denied  { getopt } for  pid=13125 comm="syz.4.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  716.788664][   T29] audit: type=1400 audit(1775517261.869:911): avc:  denied  { setopt } for  pid=13125 comm="syz.4.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  716.845512][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1584'.
[  717.099673][T13146] FAT-fs (loop9): unable to read boot sector
[  717.616666][T10811] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  717.670802][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1587'.
[  718.120346][T13155] lo speed is unknown, defaulting to 1000
[  718.349930][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.361916][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.452589][T13155] lo speed is unknown, defaulting to 1000
[  719.652929][T13163] netlink: 'syz.4.1593': attribute type 2 has an invalid length.
[  719.663139][   T29] audit: type=1400 audit(1775517264.760:912): avc:  denied  { connect } for  pid=13162 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  719.664006][T13163] netlink: 'syz.4.1593': attribute type 2 has an invalid length.
[  719.711477][T13163] netlink: 'syz.4.1593': attribute type 1 has an invalid length.
[  719.932241][   T29] audit: type=1400 audit(1775517265.004:913): avc:  denied  { append } for  pid=13165 comm="syz.4.1594" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  720.089681][T10811] usb 1-1: unable to get BOS descriptor or descriptor too short
[  720.107114][T10811] usb 1-1: unable to read config index 0 descriptor/start: -71
[  720.675648][T10811] usb 1-1: can't read configurations, error -71
[  720.969913][T13178] ./file0: Can't lookup blockdev
[  721.214965][   T29] audit: type=1400 audit(1775517266.183:914): avc:  denied  { ioctl } for  pid=13179 comm="syz.0.1598" path="socket:[37888]" dev="sockfs" ino=37888 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  721.474795][T13186] siw: device registration error -23
[  721.944260][T13187] netlink: 'syz.0.1598': attribute type 2 has an invalid length.
[  721.952841][T13187] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1598'.
[  722.663948][T13201] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  723.329599][T13200] pimreg: entered allmulticast mode
[  723.996578][T13205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13205 comm=syz.2.1603
[  724.717405][T13210] blktrace: Concurrent blktraces are not allowed on sg0
[  724.884361][    C1] ------------[ cut here ]------------
[  724.890235][    C1] ODEBUG: free active (active state 0) object: ffff8880545ebc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150
[  724.903118][    C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: swapper/1/0
[  724.912847][    C1] Modules linked in:
[  724.916973][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  724.927506][    C1] Tainted: [L]=SOFTLOCKUP
[  724.931816][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  724.941897][    C1] RIP: 0010:debug_print_object+0x19b/0x2a0
[  724.947688][    C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 42 0c e5 0b 41 56 48 8b 14 dd e0 2f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec c8 da 0b 01 48 83 c4 18 5b 5d 41 5c 41
[  724.967341][    C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246
[  724.973423][    C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  724.981393][    C1] RDX: ffffffff8c1b2f20 RSI: ffffffff8c1b2b40 RDI: ffffffff90e44a50
[  724.989357][    C1] RBP: 0000000000000001 R08: ffff8880545ebc90 R09: ffffffff8bb2bba0
[  724.997336][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2b40
[  725.005300][    C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cfa80 R15: ffffc90000a08b38
[  725.013271][    C1] FS:  0000000000000000(0000) GS:ffff888124439000(0000) knlGS:0000000000000000
[  725.022178][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  725.028781][    C1] CR2: 0000200000046000 CR3: 000000003e4ea000 CR4: 00000000003526f0
[  725.036761][    C1] Call Trace:
[  725.040029][    C1]  <IRQ>
[  725.042854][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  725.048500][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  725.054297][    C1]  debug_check_no_obj_freed+0x4da/0x630
[  725.059867][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  725.065946][    C1]  ? mark_held_locks+0x40/0x70
[  725.070729][    C1]  ? kasan_quarantine_put+0x104/0x240
[  725.076093][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  725.081313][    C1]  ? rose_timer_expiry+0x53f/0x630
[  725.086407][    C1]  kfree+0x38f/0x6b0
[  725.090314][    C1]  rose_timer_expiry+0x53f/0x630
[  725.095232][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  725.100698][    C1]  call_timer_fn+0x19a/0x670
[  725.105270][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  725.110389][    C1]  ? debug_object_activate+0x331/0x490
[  725.115856][    C1]  ? __run_timers+0x747/0xb30
[  725.120535][    C1]  ? rcu_is_watching+0x12/0xc0
[  725.125281][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  725.130728][    C1]  __run_timers+0x757/0xb30
[  725.135231][    C1]  ? __pfx___run_timers+0x10/0x10
[  725.140241][    C1]  ? _raw_spin_lock_irq+0x45/0x50
[  725.145267][    C1]  run_timer_base+0x114/0x190
[  725.149935][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  725.155143][    C1]  run_timer_softirq+0x1a/0x50
[  725.159898][    C1]  handle_softirqs+0x1eb/0x9e0
[  725.164657][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  725.169936][    C1]  __irq_exit_rcu+0xef/0x150
[  725.174529][    C1]  irq_exit_rcu+0x9/0x30
[  725.178760][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  725.184392][    C1]  </IRQ>
[  725.187315][    C1]  <TASK>
[  725.190227][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  725.196198][    C1] RIP: 0010:sched_core_balance+0x9f/0xe20
[  725.201891][    C1] Code: 79 7e 8e e8 53 fd 0d 00 e8 7e 48 ba 09 41 5a 85 c0 0f 85 28 0a 00 00 4c 89 ef e8 fc 2c ff ff e8 77 ef 39 00 fb 48 63 44 24 50 <48> c7 c3 c0 21 10 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 4c
[  725.221507][    C1] RSP: 0018:ffffc90000197b60 EFLAGS: 00000206
[  725.227570][    C1] RAX: 0000000000000001 RBX: ffff8880b853b1c0 RCX: 0000000000000000
[  725.235522][    C1] RDX: 0000000000000000 RSI: ffffffff8de7ad42 RDI: ffffffff8c1b1e20
[  725.243506][    C1] RBP: ffffc90000197c78 R08: 0000000000000001 R09: 0000000000000000
[  725.251532][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e6924c0
[  725.260396][    C1] R13: ffff8880b853b1c0 R14: 0000000000000000 R15: dffffc0000000000
[  725.268367][    C1]  ? lock_acquire+0x1cf/0x380
[  725.273052][    C1]  ? __pfx___perf_event_task_sched_out+0x10/0x10
[  725.279385][    C1]  finish_task_switch.isra.0+0x446/0xb80
[  725.285027][    C1]  __schedule+0xff6/0x6120
[  725.289431][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  725.294641][    C1]  ? __pfx___schedule+0x10/0x10
[  725.299478][    C1]  ? rcu_is_watching+0x12/0xc0
[  725.304238][    C1]  schedule_idle+0x54/0x80
[  725.308636][    C1]  do_idle+0x2dd/0x590
[  725.312710][    C1]  ? __pfx_do_idle+0x10/0x10
[  725.317284][    C1]  cpu_startup_entry+0x4f/0x60
[  725.322038][    C1]  start_secondary+0x21d/0x2d0
[  725.326802][    C1]  ? __pfx_start_secondary+0x10/0x10
[  725.332099][    C1]  common_startup_64+0x13e/0x148
[  725.337079][    C1]  </TASK>
[  725.340098][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  725.347378][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  725.357857][    C1] Tainted: [L]=SOFTLOCKUP
[  725.362169][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  725.372205][    C1] Call Trace:
[  725.375481][    C1]  <IRQ>
[  725.378326][    C1]  dump_stack_lvl+0x100/0x190
[  725.383023][    C1]  vpanic+0x552/0x970
[  725.387078][    C1]  ? __pfx_vpanic+0x10/0x10
[  725.391592][    C1]  panic+0xd1/0xe0
[  725.395328][    C1]  ? __pfx_panic+0x10/0x10
[  725.399745][    C1]  ? check_panic_on_warn+0x1f/0x90
[  725.404842][    C1]  check_panic_on_warn.cold+0x19/0x34
[  725.410195][    C1]  ? debug_print_object+0x18e/0x2a0
[  725.415380][    C1]  __warn.cold+0x191/0x348
[  725.419778][    C1]  __report_bug+0x296/0x3d0
[  725.424262][    C1]  ? debug_print_object+0x18e/0x2a0
[  725.429441][    C1]  ? __pfx___report_bug+0x10/0x10
[  725.434442][    C1]  ? lock_acquire+0x1cf/0x380
[  725.439104][    C1]  ? mark_held_locks+0x40/0x70
[  725.443861][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  725.449657][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  725.454848][    C1]  report_bug_entry+0xe1/0x290
[  725.459611][    C1]  ? debug_print_object+0x19b/0x2a0
[  725.464791][    C1]  handle_bug+0x1cd/0x2a0
[  725.469096][    C1]  exc_invalid_op+0x17/0x50
[  725.473584][    C1]  asm_exc_invalid_op+0x1a/0x20
[  725.478429][    C1] RIP: 0010:debug_print_object+0x19b/0x2a0
[  725.484227][    C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 42 0c e5 0b 41 56 48 8b 14 dd e0 2f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec c8 da 0b 01 48 83 c4 18 5b 5d 41 5c 41
[  725.503818][    C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246
[  725.509882][    C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  725.517843][    C1] RDX: ffffffff8c1b2f20 RSI: ffffffff8c1b2b40 RDI: ffffffff90e44a50
[  725.525788][    C1] RBP: 0000000000000001 R08: ffff8880545ebc90 R09: ffffffff8bb2bba0
[  725.533743][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2b40
[  725.541685][    C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cfa80 R15: ffffc90000a08b38
[  725.549642][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  725.555258][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  725.560862][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  725.566649][    C1]  debug_check_no_obj_freed+0x4da/0x630
[  725.572179][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  725.578235][    C1]  ? mark_held_locks+0x40/0x70
[  725.582972][    C1]  ? kasan_quarantine_put+0x104/0x240
[  725.588322][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  725.593513][    C1]  ? rose_timer_expiry+0x53f/0x630
[  725.598608][    C1]  kfree+0x38f/0x6b0
[  725.602482][    C1]  rose_timer_expiry+0x53f/0x630
[  725.607396][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  725.612834][    C1]  call_timer_fn+0x19a/0x670
[  725.617416][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  725.622565][    C1]  ? debug_object_activate+0x331/0x490
[  725.628027][    C1]  ? __run_timers+0x747/0xb30
[  725.632695][    C1]  ? rcu_is_watching+0x12/0xc0
[  725.637443][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  725.642885][    C1]  __run_timers+0x757/0xb30
[  725.647378][    C1]  ? __pfx___run_timers+0x10/0x10
[  725.652387][    C1]  ? _raw_spin_lock_irq+0x45/0x50
[  725.657392][    C1]  run_timer_base+0x114/0x190
[  725.662050][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  725.667247][    C1]  run_timer_softirq+0x1a/0x50
[  725.672005][    C1]  handle_softirqs+0x1eb/0x9e0
[  725.676751][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  725.682023][    C1]  __irq_exit_rcu+0xef/0x150
[  725.686588][    C1]  irq_exit_rcu+0x9/0x30
[  725.690807][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  725.696438][    C1]  </IRQ>
[  725.699355][    C1]  <TASK>
[  725.702262][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  725.708216][    C1] RIP: 0010:sched_core_balance+0x9f/0xe20
[  725.713910][    C1] Code: 79 7e 8e e8 53 fd 0d 00 e8 7e 48 ba 09 41 5a 85 c0 0f 85 28 0a 00 00 4c 89 ef e8 fc 2c ff ff e8 77 ef 39 00 fb 48 63 44 24 50 <48> c7 c3 c0 21 10 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 4c
[  725.733509][    C1] RSP: 0018:ffffc90000197b60 EFLAGS: 00000206
[  725.739560][    C1] RAX: 0000000000000001 RBX: ffff8880b853b1c0 RCX: 0000000000000000
[  725.747509][    C1] RDX: 0000000000000000 RSI: ffffffff8de7ad42 RDI: ffffffff8c1b1e20
[  725.755458][    C1] RBP: ffffc90000197c78 R08: 0000000000000001 R09: 0000000000000000
[  725.763403][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e6924c0
[  725.771350][    C1] R13: ffff8880b853b1c0 R14: 0000000000000000 R15: dffffc0000000000
[  725.779320][    C1]  ? lock_acquire+0x1cf/0x380
[  725.784071][    C1]  ? __pfx___perf_event_task_sched_out+0x10/0x10
[  725.790378][    C1]  finish_task_switch.isra.0+0x446/0xb80
[  725.795991][    C1]  __schedule+0xff6/0x6120
[  725.800392][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  725.805591][    C1]  ? __pfx___schedule+0x10/0x10
[  725.810426][    C1]  ? rcu_is_watching+0x12/0xc0
[  725.815172][    C1]  schedule_idle+0x54/0x80
[  725.819579][    C1]  do_idle+0x2dd/0x590
[  725.823634][    C1]  ? __pfx_do_idle+0x10/0x10
[  725.828241][    C1]  cpu_startup_entry+0x4f/0x60
[  725.833000][    C1]  start_secondary+0x21d/0x2d0
[  725.837748][    C1]  ? __pfx_start_secondary+0x10/0x10
[  725.843026][    C1]  common_startup_64+0x13e/0x148
[  725.847952][    C1]  </TASK>
[  725.851231][    C1] Kernel Offset: disabled
[  725.855531][    C1] Rebooting in 86400 seconds..