last executing test programs:

3m50.051868463s ago: executing program 4 (id=743):
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4200)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000300)={0xfffffffd, 0x0, 0x99, 0x1, 0x0, 0x6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000003788050e00000000"], 0x18}, 0xfc00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000003c0)={0x0, &(0x7f0000000400)}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
chmod(&(0x7f0000000200)='./file0\x00', 0x25)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x4008)

3m49.020299315s ago: executing program 4 (id=746):
socket$nl_route(0x10, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x505000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getgid()
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1ffffffffffffdf4, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffe0e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0xc30c148400cf67f9, {0x2, 0x2, 0x4}}, 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x17, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)

3m48.003277442s ago: executing program 4 (id=747):
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf252600000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x855}, 0x850)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="23a9d725bea0c59ee256c9fea1ec21d20a8fa5077f0c659f5a2e36b50bc2091bda373f4993f41c08af9b7676f19103ce519127212653b03bac430e62284d7636b3a9a48b6d97ad68ae83515730347ea7f2a396a029203aeac1895fc0a40570c270fba2a22ded39149225047f82d288c79a203160e6ab6b18a5223ba3b8b2ebc6af6ff8ee53998196fee105365dfd39a438ddb9a52d74d66563b7f900000000", @ANYRES16=r7, @ANYBLOB="2503feffffff0000000016000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x2a0, 0x130, 0x350, 0x130, 0x2a0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x48}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0x0, 'lo\x00', 'lo\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x80, 0x3}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@ip={@empty, @multicast2, 0xff, 0xffffff00, 'vlan1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
io_setup(0x6, &(0x7f0000001380)=<r9=>0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
io_submit(r9, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, r10}])
io_cancel(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xd0, r8, &(0x7f0000000200)="809be71f849b2f071ed4a2c4e7a58d44f222fbb3bae8afb8f66e82e3675c", 0x1e, 0x5}, &(0x7f00000003c0))
r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f0000000180)=[{r11, 0x1000}, {r11, 0x9088}], 0x2, 0x0, 0x0, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r12, r12, 0x0, 0x101)
ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0xffffffff, 0x9, 0x4, 0x8, 0x8, {}, {0x2, 0x8, 0xfe, 0x6, 0x3, 0x54, "6ac320ca"}, 0x1, 0x1, {&(0x7f0000000100)=[{0x7f, 0xfffffffb, {0x918}, 0x5}, {0x2, 0x6, {0x3}, 0x5}]}, 0xfffffffa, 0x0, r12})
sendfile(r1, r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x7fffffffffffffff)

3m46.899997517s ago: executing program 4 (id=749):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000031978fba6b30d3f970969a6481a391947ab2dfba9a9ea556586cf6b08221e688f1744d211d9da91942dc6f0d9e84779c4ea0159ec8c12a459cd123ade9c2477ebfbd3e0dd0885b87d384612011805fe2e173554f64ea52eafe7c1829ab6ee6678fcb8a3fa4d68ab5f4698c3f9b948451ad263e283e75fd595fb50d4d194e2ef2c0a82a7518bc0900af73086d8528ae95f3f2743a7b55ff348be8460fae11253fff401a96c259be9abbd3a509dd88c9a3cf1c75754e86875b0"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
tgkill(0x0, 0x0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001", @ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x4000040)
mknodat(r6, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0xd0)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)

3m45.529668045s ago: executing program 4 (id=753):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0)

3m43.518790756s ago: executing program 4 (id=758):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

3m27.990244909s ago: executing program 32 (id=758):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

2m35.417938352s ago: executing program 3 (id=957):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m34.720124928s ago: executing program 3 (id=959):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c)
r6 = dup2(r5, r5)
sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890)

2m32.778206142s ago: executing program 3 (id=963):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88<A\r\xe6\xe5\xb8u\x10Q\x13\xef\xfe>`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r7, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

2m31.111502796s ago: executing program 3 (id=968):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r2, 0x0, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20050800)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r6, <r7=>0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x2, 0x0, 0xffffffff, 0x804, {0x8001, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x4000, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000000000000800"}})

2m30.081099574s ago: executing program 3 (id=972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1002, &(0x7f0000000900)=""/4098, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x14, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac193400", "f4bd0000008019000e000000000000f400", [0x6, 0x2000000000001]}})
syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x101040)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001000010800000000040000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0)

2m27.767335175s ago: executing program 3 (id=976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000700)={@empty, @empty, <r4=>0x0}, &(0x7f0000000740)=0xc)
sendmsg$can_j1939(r1, &(0x7f0000000800)={&(0x7f0000000780)={0x1d, r4, 0x3, {0x0, 0xf0, 0x3}}, 0x18, &(0x7f00000007c0)={&(0x7f0000001300)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0xf0, 0x2, 0x80, 0x2d, @loopback, @private0, 0x40, 0x8, 0x8, 0x8}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020)
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r13=>0x0})
r14 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r14, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r14, &(0x7f0000001880)=[{{&(0x7f0000000780)={0xa, 0x4e23, 0x3, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x6}, 0x1c, 0x0}}], 0x2, 0x0)
bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r15=>0x0, 0x4, 0x0, 0x6e, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7807, 0x783e, 0x63a, 0xa7d}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r17=>0x0, @private, @private}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', <r18=>0x0, 0x20, 0x1, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x6, 0x68, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x1c, 0xd9, 0x0, 0xe, [0x1, 0x8, 0x55a, 0x10001, 0x9, 0x80000000]}, @timestamp_prespec={0x44, 0x24, 0xfe, 0x3, 0x1, [{@broadcast, 0x7}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xc0000}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x800001}]}, @end, @cipso={0x86, 0x13, 0x0, [{0x6, 0xd, "fe131b81781d71a260c2fb"}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@empty, <r19=>0x0}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=@RTM_DELMDB={0x158, 0x55, 0x0, 0x70bd25, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x3, 0x3, {@ip4=@private=0xa010101}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x1, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x4, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x0, 0x2, 0x2, {@in6_addr=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r16, 0x1, 0x0, 0x1, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r17, 0x0, 0x3, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r18, 0x0, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r19, 0x0, 0x2, 0x1, {@ip4=@loopback}}}]}, 0x158}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
sync()

2m12.48036365s ago: executing program 33 (id=976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000700)={@empty, @empty, <r4=>0x0}, &(0x7f0000000740)=0xc)
sendmsg$can_j1939(r1, &(0x7f0000000800)={&(0x7f0000000780)={0x1d, r4, 0x3, {0x0, 0xf0, 0x3}}, 0x18, &(0x7f00000007c0)={&(0x7f0000001300)="0f91c637de954bcccd0ed3e9afd0470c9d5cf1fd4806f42762d9ace8140274e7973bc16fed1eb80fc5964a78f9777fc449ab518e15f23dbed1701eb3a2bed40e79e7ba8931481c4b50c8da6fd00d8f8bcc5c57804bec9d30c10dd844137737c86c47b5768c15a9b74fc4f684265ca0a6d1ae197b24642adb8b3651ddea481871b9dd863106dbb8611167055a4c2d1de11e5eb4213cf03da699252ca5e60a164bb0de19b6623210767cf625212e3d452acd320f77bdb003b90dce54041e945b43db78f7cc77d4d7432a4943c60019f0fe9ebce7d1fe877400edef57fdaf4128a9344a6f1c5edde867fe99fcd8d2af40be2761bb6f2f3333a66bf4fe92d1256fc42155098e005718025a1e450fa4ac9ca6a55bf7e3901abc574cc435d3f5294a2c3f5d54c9c6801fa8bfc6643c6b0c07fb7b56b53680f4cd50403385a9a9fc038e3d1c4541adff3c4684fabadf284551dc8b74089bde394602feef32277a766c7c17293b0c8951fe1bd9ebdc3f5f4a23b021dbc6f9f1dee931bcbfa87d32c5e9a3a5e5c99af442d6cc3b4d3269f16d1fe440d3b609fe1619f0497efe85bd3f219d59d3d7b373dd9c7790eba250f768de547bc95a7c72ed437899af95a451ff144f550b11d32503ee4240814f5a9138d2772b72d7e96d2bdced1814ee918517e9e3ed16a21661d52b0e0199888b46969470127eca8281b3cf7d2b81c17a1cc474532058474c617d1010dfcb4b779a2eb1b2cb7cc9f47fcb3103a3255c74437e70239c10e85ed847f663283eb22196f2ec46c878cf7e29c0bef9cdbec8ea5ba032332919146aab29657ca003f1d2b0507b0b438222896cb2254b09e23b2082ed2c616d51abe73129061310d2d8e2f8c28309d8092783137e7860f585d3f141d432bbece34ab318aaedafc80638a1f5b189334ff773df8d3100a73d5900d428c57c99cbfb5ce7511a616ab824eece934ccaedfab05323a0100d5d84682fb5c72e314b9b3140e7921ba4923d8f33bb00f2a6e5fe6e8736384fdf7978915f39a2aaa98c54b2a4ddc4268ced551e6f3abfa2f90741a137de069e7cc5342e3f6f955ce1454e2b352cb5912a4b7450a3efb761ee428530d005fd65371ddf33cf6a0bf6728c2ac24840c8570e5c4de7eb5c8d347c0ee084e2e7e54d48e4537f3c6262be9c209037952e5b1127bc92ca979b999b5f5995e488449edfcfd0709e96c3f81f159c614d1022e085b4806a4ff1dfcc1e93d1bc64353b01ed8153d846a5ce0b42eec2662dd2ed043226382659c23efd49cfad11a119caa7e5fb2de34dafe29ef83fc74f943821dfca7885a2f73929197aa1070dd4973a21981d6059eb4b6945ffc9e21735bddd749e2ce74961a78f00ebdf5326622a31c57c4d6051e60d6680ea954bcac8097b780e1c1ac7aafb50a7c18fea5f0abca3f3de17d66c53a42c7ae04052db1954abbba2150cb0d67e36d874b15d0fa9a7a81af80ac3fb09f5f4efcbb1434d9703f509eba7779f2e8e61a3dd6e9efe02abb66ba54427713b78717476176a24829b43bd115b497ddc0b82f8f72fae9f5aba16e22b8f533e5444b3600eef80b2dc31eac1aef0af9cbc1531f1aad1e0192a4190ed128858a6c6c3355e3c4230e2a5c30e83f851a9918a673cc0f789b73b36acfbaec32cf4f7ef441edf307df9c6260cc5f40d619b30d420603219048349721ea4d405158267dd17bb1746db0f59b9bcc96428ac2d3331ce442bc808a1eb3fb9d05bedfe216d1c52e96432a7cb36711543dcb22b16678a8702170a1de5423ea797ad79b65974c87f2316235a5be6bcf20ebe5548cffa5b22377945ce3a032f3df4bbc9009a75e08c466509bf4d8e4f9039c3be8a48532fc4f6e795b0afb2d5ce3b45e8642009ff68300c4c69c251a3df70ddf8929945e17638146d7e590b5b61a1e239d79077bc4ba1dfda3c7dd9d5876fa80c7703a3e144fc154f5075b083e22e4ff9cccfe36c2620276436fca3626a0ae7fc6fd63f9223506adb4a23b5c48ca85bcbdca429ceeccafa5d1819efd065080dd580bfbe8f8bddba3e8913de4f6aaaa4c3ded239c798197f48b665d05995fe2988857fd159bde4daaa1798748ef5bdb6e57b8574d8ffd986198b6fcfbe2dbe038226257b305b503334dfb96d503cbd29d7e00f63176c26fb57d16d797a60876125ff5851adf1999db82b682f7ef614a6dbb6a1bb46c467374227e570c00cb192e7b149fb1d708c32455de6afb98056b5111fdc2e609545e07de17b78bc50474962032ccb04500ff29b37c9cd0d46d34ef4ceffecea0df01854c0597360061d44f7458866f6f3231591374b27817da167b2d0730c99d633c7c7939e0cb379eb19f7706bfe71cec9fe950235fe4f18d6af2b23e011b80497c782456fa5500849bab7145a813451e5c2290bb874a9e647339d29be130342ebeba9bf3cef0f392c5894727b8e4ff889c35129cf9011ea8211b2e12c46948e1b211cdbfa3d379c78b6088f0d10db14c0d10fd1c7a67bb9db812f761d15bf4e3a80b02da6df791531ca8b7211e484779f3fffda1adf971f348c77a76636686908e079c88422eb475b3c5309e9d3898aef303fe412252991689f91091e664d06d4bed9109458c4fd5d09e1278766b663ad4ffe6223b92054fdc1ffbc77f44a2867324df61e85c01b042996c4c95a0f218736e68fc488b055c2e74591ba68f23d582dd5dec69ab8ba4160f2fb23a2d18fbec978774673dbeebfd37e177a6b67a2db16685853d8ddbff6ce42c569c188f0190545db50ca07f2eb8391478c16ccd531bffea7e58efb198e53aba0cda057ff583a3c1e6fbfd23d8925246456e8b57020eef94ecc32fb1cd17f808820bf69e4f8f66c4091bfcae0f84393adb9dbfda60f1dea29c0970b83c7b102ee35aca19c08790ac30bf54a23baf4a95dacd87c9df7e7f665ab74749648bd12f778c0f34d43b3f7113c1317a9fe41b7d87dc2d3631109bcafb3d052e894ebc5b7844fc19e3a089e937de495822634e9f08b9fd2dc5e05206cdb9e1aa7b623c0580d25e6e4c61f5eb6269c7cd4c2dfdf387f0f1f7658c95dccff859562e8aa988e8dd7d97e709d8abc8d7f1b0e705280ce298338166f3baaf3ef02c4223821d6aae27fbb7695764e3126611fb10dea9d42b153cf78086ec69f4fb1d12436e3c819ad830af0ebc2f74ace660b9d8141241ead66778bc620ceda2b2239bd5780969063c7b67e6eb5f02f4c1b4ad2cbfda26199d8c300ab7a3cdbe5e1c7139baf58ed2eee2ce2683929a39d6a7e53b764dac00238ef8c88b23846b31b2f777c4f6724ecfbd006614911c6f6bd5ef7a7fa9e3e3d0d4e0f6e608ff24e74b0906006d1c5e859d6933421da83552e8a2d69c462e3cc439dfc1eea364472f6fac64db2a7fad40f17711c5edf3b4b73bd4e332dca278e768feec43fe8e3d812e3d71115e9c80b089a0ea798ae70f12816fe0179b3b7f5dbdead3d4aae1e15527c791851790834e0e6e5666e9dcdad0f57c2e437de4e9f2da722a9e26d6cb7e67c23daa4ae669cc07556afeffd8a28ff06940c7c758382a0c1621dc1a0bde586214dfe733d47c17ef535543f97144d0611f890d69810fbca699195d60e44072adb41a00ec20b2321c9dc06f1568da5edd3b3962cf6e504fac35ea267e00f3199830da76205a761593848c7c4d0a7068559b99ca0b3bd0ca16bf0f45a97def8f2d92f772882bffda7f24706daa020b11855a8d4f4b38aa0e6ffe6b11f4a9b1a61b252de6cb297906ddfa67529ae413abd1ab5bbf60f53d351ad0f5912c48bafc00a060b452543e782c3d2a2bc5024f6efbce118c9ee668ade6bac18634861414310abe9c7303706b67918b6dbdd2c03abd4a3ad024204a806bc45ea87da796cc7b60de5a490ec7385126d420798930833bb3f03b9dc2e76bc37ce200cbcfc0fbd61ee3ea40b025b5b1f3100a87d2e3d0195929f7e4166caf9956570fe32871712294a1966807a8fb740fe08e30834a526dbe82c3d50745ff29ad24acc90a63e77120a965f46a4680eebaf2099b2af753d36044fcb80b20dd8e4fe68959efbca3f43b03a33311785c320daa6e48ae3fa43c4a52c198a1c98c1a79ec242b58601792cf0582ce1e178cdc8681fdbc3e80699b469b6b82cb5d07ffa6858ad70625c6a349604231bfc4fa3570e586ad8ba480db8b101a98463513692323332ae9f99a7801de7ea8ed7c06172a0cdf3e69e90cb717a6f4baafd7aa4b29803ec204f23fe72215554fd1714c078d8a3cac226ed2916ea3bb0cc1e620274d6ac2aea71a6ec0bcc54ec82e73610cbde67ce7cae2525bc6368f25c00dd3a095c7bafc69380ba7aaee418877647b1dffcd30ecce0966ed40e81f8b420a837d9eae1754fc01b214ab68cdaa4ed34d44949c24856b8a5440b1e860be3c84429710870c0579736978a34788c124231020e393dffa9ec02dc37d386d2432de1ef55b5b1b428910ed58464b3ef25ad3e619ead8f19cf5b73d52cc31d4e11e6dc3c2b6acf00eaf48189a65bccbc608e0e08c7c22c295576e8b523d137b8e1289ebb944b69ef48d1ac213d2fda8369810a437d980cd3525fb7ef5054119b742fbdbf4724c0188f01ff431e4fe622e33a6b5a4a28c1b22e5b0d3db32d1865a8d068c1cfd1eb675571e6f730212f60f4b3a126d51793fd4fe16162cd249543530dc6a1bce342af30bef236d0a62b992a62b75753bf3858dbca3e555e27b0261d2f7d03f6c983ad8838a84d7bbab212e428a5baa41cf17a0958f4d6604e7068091aa96ca269567e44657607334ac2920d3e24635b72b0edef9599cc2929b3baf3dd3bc6677f377086c0fe2c26513a074cd3e422ed5d98bae9ceb8e9bdb0a20463849fd933e87a1fbf0ed285e0c22364f27af4c7eb4b0481af6031b78ef5264d6e6d67f3072f58cb2420b62b665e0469cf67ebbe953a30f3d3421470c7694864a00143b2e140dbc25a54d8e4e0a880f37dedfc852867ff8300959bb4acd50813d7b3ba65c3a3d632148bc541d4b8513362f774c0d0283cc4229e7f9ea931cbb4c345e933580949419ce989e17fb50e231a136f38428ad7294dc08963b140f2d696a5076aef56ac58a8ffc8b077b37cad3e31eff5dc9a9445d47662be38b76b7f30472b19905146dcebb044ffa3b53af3503f2a744b0938d32d698b326b9b3c1e92eb782dc0d62177806f4f137a0d423b303a8e1ac23b8e04511d2fd33aa84aef27f50abe0ccfd3e87a04ef03a04a8b47f19859e923f530d0d76452dea367cd062d37a466d05c0c5b19e6f7bcec0681398f9f70752c452f01b827fdeeffed304896b156417347ef5985e11798d57b596e12df62e1607059ab1dce2904a8fdf792d9592928f0f767ea77811e410f799168a2e6bc8228f0cc2ba9fd40e9130c70335c00b2080c39178495cfbfbcce83b53436ce8867cc65dc9ba153d8da3591518352d7d3b75d02a2662b4d03a8b29862d51101ff5292b108dab3b53d7bde9019247da7f3bfc7c701eab7ba6d92df68176032d26d0131244e96be4c12122439f88e0016e1e7588db968911fa05cd8963466814942cbedf92ffd42bfc5ad3b2a34606bae3d85e446e8163df96baa8eedba2e18cdafafdafe49dc406edb505110b394619b04fc52797475354e6c852866f9da45519bffd8814afbf0b2b221e5a0c07416ca66d8f464b6b6c2b753234039f47d1c7ad3449e0c01d9273ecbd548787fbcf3b2b996cada9018b9f0530ac6cb62ea0dce211574f479164aa939ad3736c6ffd609d9c3b280bbf14c5f29", 0x1000}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0xf0, 0x2, 0x80, 0x2d, @loopback, @private0, 0x40, 0x8, 0x8, 0x8}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020)
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r13=>0x0})
r14 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r14, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r14, &(0x7f0000001880)=[{{&(0x7f0000000780)={0xa, 0x4e23, 0x3, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x6}, 0x1c, 0x0}}], 0x2, 0x0)
bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r15=>0x0, 0x4, 0x0, 0x6e, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7807, 0x783e, 0x63a, 0xa7d}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r17=>0x0, @private, @private}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', <r18=>0x0, 0x20, 0x1, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x6, 0x68, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x1c, 0xd9, 0x0, 0xe, [0x1, 0x8, 0x55a, 0x10001, 0x9, 0x80000000]}, @timestamp_prespec={0x44, 0x24, 0xfe, 0x3, 0x1, [{@broadcast, 0x7}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xc0000}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x800001}]}, @end, @cipso={0x86, 0x13, 0x0, [{0x6, 0xd, "fe131b81781d71a260c2fb"}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@empty, <r19=>0x0}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=@RTM_DELMDB={0x158, 0x55, 0x0, 0x70bd25, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x3, 0x3, {@ip4=@private=0xa010101}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x1, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x4, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x0, 0x2, 0x2, {@in6_addr=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r16, 0x1, 0x0, 0x1, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r17, 0x0, 0x3, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r18, 0x0, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r19, 0x0, 0x2, 0x1, {@ip4=@loopback}}}]}, 0x158}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
sync()

18.52853415s ago: executing program 0 (id=1346):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4200)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000300)={0xfffffffd, 0x0, 0x99, 0x1, 0x0, 0x6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000003788050e00000000"], 0x18}, 0xfc00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000003c0)={0x0, &(0x7f0000000400)}, 0x10)
r9 = socket(0x10, 0x3, 0x0)
chmod(&(0x7f0000000200)='./file0\x00', 0x25)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x4008)

14.704360804s ago: executing program 5 (id=1358):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000))
syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000000000071113f00000000008510000002000000850000000500000095000000000000009500a505000000009ee69818"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20)
syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0)

12.408178739s ago: executing program 0 (id=1362):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$isdn(0x22, 0x2, 0x26)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYBLOB], 0x50)
socket$isdn(0x22, 0x2, 0x26)
dup3(r2, r3, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

11.549007347s ago: executing program 1 (id=1363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000031978fba6b30d3f970969a6481a391947ab2dfba9a9ea556586cf6b08221e688f1744d211d9da91942dc6f0d9e84779c4ea0159ec8c12a459cd123ade9c2477ebfbd3e0dd0885b87d384612011805fe2e173554f64ea52eafe7c1829ab6ee6678fcb8a3fa4d68ab5f4698c3f9b948451ad263e283e75fd595fb50d4d194e2ef2c0a82a7518bc0900af73086d8528ae95f3f2743a7b55ff348be8460fae11253fff401a96c259be9abbd3a509dd88c9a3cf1c75754e86875b0"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
tgkill(0x0, 0x0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001", @ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x4000040)
mknodat(0xffffffffffffffff, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000080)=0xd0)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)

11.335078835s ago: executing program 6 (id=1365):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x0)
r1 = msgget$private(0x0, 0x88)
msgsnd(r1, &(0x7f0000000000)={0x0, "e49aac59a792298d11293b0d4e915aa696f2a2bc4c0f625c1c86c5ebe97fb706ed835a7cb89032d227785a727bc6"}, 0x36, 0x800)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0x9, "d12f3eb8"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/95)

10.332069723s ago: executing program 1 (id=1366):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124c2520cc172010bfb40102030109020400de46"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0)
syz_io_uring_setup(0x6d9d, &(0x7f0000000780)={0x0, 0xbc9d, 0x10100, 0x0, 0x21b}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x8)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x14)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000fe"], 0x0)

10.208811326s ago: executing program 2 (id=1367):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14)
r0 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x54)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x0, 0x2, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x5, 0x8, 0x0, 0x200, 0xe821, 0xfffffff9, 0xa000, 0xd, r3, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
listen(r5, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1720}], 0x1, &(0x7f0000000100), 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
mount$afs(&(0x7f00000019c0)=ANY=[@ANYBLOB='#'], &(0x7f0000001a00)='.\x00', &(0x7f0000001a40), 0x1, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

9.554271277s ago: executing program 5 (id=1368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x1002, &(0x7f0000000900)=""/4098, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x14, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac193400", "f4bd0000008019000e000000000000f400", [0x6, 0x2000000000001]}})
syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x101040)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
munlockall()
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001000010800000000040000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0)

8.704881576s ago: executing program 6 (id=1369):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102378, 0x18fea)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
connect$ax25(r3, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

8.554762651s ago: executing program 5 (id=1370):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}], 0x48}}], 0x1, 0x68034)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000089ef65f1b4f9cadb5b9ae03008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r4})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0xff, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
sendmmsg$sock(r8, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)

8.389246238s ago: executing program 0 (id=1371):
socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x6000)
openat$fuse(0xffffff9c, 0x0, 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0))
syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x200a00)

8.321953974s ago: executing program 6 (id=1372):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x10000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, r0, 0x80000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f00000000c0)='./file0\x00', 0x80)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, 0x1, 0x2, 0x3}}, 0x26)
socket$inet6(0xa, 0x805, 0x0)
syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x40100)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c92012000e00050014030a0001000300da4503000300414101b1bc252ea3428ae9186328e8207f5299c3224c1100d7b153c4be5c96fad4"], 0x17)
syz_open_dev$tty1(0xc, 0x4, 0x3)

8.321511253s ago: executing program 1 (id=1373):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
socket$inet6(0xa, 0x1, 0xfffffff9)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)

8.258003506s ago: executing program 6 (id=1374):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
write$nbd(0xffffffffffffffff, 0x0, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20050800)
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r5, <r6=>0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x2, 0x0, 0xffffffff, 0x804, {0x8001, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x4000, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000000000000800"}})

6.899398919s ago: executing program 1 (id=1375):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001ff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x19, 0x1, 0x2, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3447504d})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
getpid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0xcc, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x58a5a960}, {0x6, 0x11, 0x3193}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x9}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001f0001000000000000000000040100"], 0x114}], 0x1}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = syz_io_uring_setup(0x236, &(0x7f0000000380)={0x0, 0x80fd, 0x8, 0x4, 0x2cf}, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000002c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}})
io_uring_enter(r7, 0x1864, 0x6429, 0x1, 0x0, 0x0)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)

6.633835364s ago: executing program 0 (id=1376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000031978fba6b30d3f970969a6481a391947ab2dfba9a9ea556586cf6b08221e688f1744d211d9da91942dc6f0d9e84779c4ea0159ec8c12a459cd123ade9c2477ebfbd3e0dd0885b87d384612011805fe2e173554f64ea52eafe7c1829ab6ee6678fcb8a3fa4d68ab5f4698c3f9b948451ad263e283e75fd595fb50d4d194e2ef2c0a82a7518bc0900af73086d8528ae95f3f2743a7b55ff348be8460fae11253fff401a96c259be9abbd3a509dd88c9a3cf1c75754e86875b0"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
tgkill(0x0, 0x0, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001", @ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x4000040)
mknodat(r6, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0xd0)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)

6.202462634s ago: executing program 2 (id=1377):
socket$nl_route(0x10, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x505000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getgid()
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0xf, 0x0, &(0x7f0000000640))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1ffffffffffffdf4, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffe0e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = dup2(r5, r5)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0xc30c148400cf67f9, {0x2, 0x2, 0x4}}, 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x17, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)

4.649602808s ago: executing program 6 (id=1378):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000000000071113f00000000008510000002000000850000000500000095000000000000009500a505000000009ee69818"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

4.585133838s ago: executing program 0 (id=1379):
r0 = getpgrp(0xffffffffffffffff)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000300), 0x4003)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0xc, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x9]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c03, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
write(r4, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000760e0000950000000000000054c4f7c69d54f9cad8ed858a1b347e1a283e407085635b8ae42d3c4837c5326ac349647b443f56f7854476710de25869ef7c2405da8597a05abd527ba500ff8f30e83b919173c3e581e91bc23b23e60fdcbc67af090e780c54c9be577c3f6ef1a40c53e63eeae4e5c42d660336f1ecd5ea61eec9aefbcb3f5497e9b7cbb09f64ee27980c36fc30491f01b21d8ce951733eb13462cb396a613378c7965d0f5d06cc768fec164a03f79d20a78fc7c3196ee8d2868d004b452c32ae44e2a69c74bbb14c936c8d77a04fad6028bfff347f5bdf1a0d1ac522d21afe260746"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000002c0)={0x4, {0x28, 0xe, 0xbfe7, 0x8, 0x6d}})
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r6, 0x0)

4.520516595s ago: executing program 5 (id=1380):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88<A\r\xe6\xe5\xb8u\x10Q\x13\xef\xfe>`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

4.188541113s ago: executing program 2 (id=1381):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$isdn(0x22, 0x2, 0x26)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYBLOB], 0x50)
socket$isdn(0x22, 0x2, 0x26)
dup3(r2, r3, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

4.187964675s ago: executing program 5 (id=1382):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, r2, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x3, @void, @value}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89a1, 0x0)
close(r3)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
r6 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000100)=0xf5)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0))
sendmmsg$inet6(r7, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x600}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000ac0)="c0", 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0x9, @local, 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000008c0)="88", 0x1}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x170}}], 0x2, 0x4000004)
r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000540)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x83, &(0x7f0000000480), 0x8)

3.42209543s ago: executing program 1 (id=1383):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x3, 0x6, 0x1, 0x0, 0x591, 0x5e, 0x4, 0xb6, 0xb9, 0x3, 0x8, 0x5, 0x0, 0xf, 0xfffffff9, 0x56, 0x4, 0x4d, 0x5, '\x00', 0xe, 0x8cc})
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x485c, 0x3, 0xfffffff8, 0x50}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
inotify_init1(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="76993779", @ANYRES16=r4, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x2000)
socket$rds(0x15, 0x5, 0x0)
socket(0x28, 0x1, 0x0)
syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x8, 0x2, 0x40}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)

3.295017085s ago: executing program 2 (id=1384):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88<A\r\xe6\xe5\xb8u\x10Q\x13\xef\xfe>`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r7, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

1.919720739s ago: executing program 6 (id=1385):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000740)=ANY=[], 0x60)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x5, r2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
writev(r7, &(0x7f0000000240)=[{&(0x7f0000000080)="dac16cca4a3e2c1e35", 0x9}, {&(0x7f00000000c0)="43b408ec2c283a072935b76d33c9060bd9c97e1b60835ae8fb669bee33d2ccb557e06f1151f5591d8bef4aeeba8c8f414e73b1", 0x33}, {&(0x7f00000001c0)="9a13956c30292d76baa7b8455090471ad4fe81e5d71bde2fe62ea3ff087d398f2c21a64529f4b55081b8f67ce601d2a34efeb6d1aa913fdfc7f9c1668acc93f3fd637aa587537a9aae1ac1bc2ec548c8f3153f2878addd7828740d6535dd266f810cde6fa138651d", 0x68}, {&(0x7f0000001300)="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", 0xf5c}], 0x4)

709.771409ms ago: executing program 1 (id=1386):
socket$nl_route(0x10, 0x3, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000bd15f5c1e9aa5f6540c37b90115cf44fe901cf13fce60db6fef22f222241e4aaae4b2307cb8cbf95cbdaf1fa46a14ef51595bc19286b4c56ff1c6061bd6227a557ac9d950e91ca665a9665036484516aa5f36d81635cb3220083c0eda0a1d3207fe036829002618e7d3c8fc9ab134a135be19fc0b8bc862d6e935803c6fffea35e7ea9fa81bab0f7d7b77951202613dad06e", @ANYRESHEX=r0, @ANYBLOB, @ANYRES64=r0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
socket$unix(0x1, 0x1, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
dup(r4)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x18, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

709.368618ms ago: executing program 2 (id=1387):
unshare(0x20000400)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0xfffffffffffffffe)

72.95268ms ago: executing program 5 (id=1388):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000000000071113f00000000008510000002000000850000000500000095000000000000009500a505000000009ee69818"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

52.187121ms ago: executing program 0 (id=1389):
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000002480)="d4", 0x1}], 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x87, @broadcast, 0x4e23, 0x4, 'sh\x00', 0x37, 0x7, 0x31}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e21, 0x10000, 0x7, 0x6, 0xa}}, 0x44)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x4, 0xfff}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x2, 0xa70, 0x40, 0x1, 0x7fff, '\x00', 0x0, r2, 0x0, 0x5, 0x3, 0x4, @void, @value, @void, @value}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x6, 0x1}, {0x30}, {0x1, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
socket(0x11, 0x800000003, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)

0s ago: executing program 2 (id=1390):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000080)=""/224)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

kernel console output (not intermixed with test programs):

   T30] audit: type=1400 audit(2000000096.720:328): avc:  denied  { append } for  pid=7370 comm="syz.2.352" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  182.771489][ T7371] loop7: detected capacity change from 0 to 16384
[  183.501930][ T7374] loop7: detected capacity change from 16384 to 0
[  183.565986][   T30] audit: type=1400 audit(2000000097.580:329): avc:  denied  { read write } for  pid=7378 comm="syz.4.354" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  183.599032][   T30] audit: type=1400 audit(2000000097.600:330): avc:  denied  { open } for  pid=7378 comm="syz.4.354" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  183.614498][    C1] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  183.735338][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[  183.767416][ T7385] netlink: 'syz.0.356': attribute type 2 has an invalid length.
[  183.792188][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'.
[  183.822627][   T30] audit: type=1400 audit(2000000097.830:331): avc:  denied  { create } for  pid=7383 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  183.847596][   T30] audit: type=1400 audit(2000000097.830:332): avc:  denied  { connect } for  pid=7383 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  184.683621][   T30] audit: type=1400 audit(2000000098.680:333): avc:  denied  { setopt } for  pid=7397 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  185.051473][  T971] kernel read not supported for file inotify (pid: 971 comm: kworker/0:2)
[  185.306835][ T7423] netlink: 240 bytes leftover after parsing attributes in process `syz.0.365'.
[  186.044769][ T7429] random: crng reseeded on system resumption
[  186.306741][ T7417] fuse: Bad value for 'fd'
[  186.806905][ T7431] delete_channel: no stack
[  186.816988][ T7431] delete_channel: no stack
[  186.960309][ T7429] afs: Unknown parameter 'dyncpu_alloc_percpu'
[  187.926588][ T7438] FAULT_INJECTION: forcing a failure.
[  187.926588][ T7438] name failslab, interval 1, probability 0, space 0, times 0
[  187.939658][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.3.369 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) 
[  187.939683][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  187.939694][ T7438] Call Trace:
[  187.939699][ T7438]  <TASK>
[  187.939706][ T7438]  dump_stack_lvl+0x16c/0x1f0
[  187.939737][ T7438]  should_fail_ex+0x512/0x640
[  187.939760][ T7438]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  187.939781][ T7438]  should_failslab+0xc2/0x120
[  187.939800][ T7438]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  187.939815][ T7438]  ? __might_fault+0xe3/0x190
[  187.939830][ T7438]  ? __might_fault+0x13b/0x190
[  187.939844][ T7438]  ? getname_flags.part.0+0x4c/0x550
[  187.939871][ T7438]  getname_flags.part.0+0x4c/0x550
[  187.939894][ T7438]  getname_flags+0x93/0xf0
[  187.939917][ T7438]  user_path_at+0x24/0x60
[  187.939940][ T7438]  __x64_sys_mount+0x1fc/0x310
[  187.939952][ T7438]  ? __pfx___x64_sys_mount+0x10/0x10
[  187.939969][ T7438]  do_syscall_64+0xcd/0x260
[  187.939986][ T7438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.939997][ T7438] RIP: 0033:0x7fcbf558e969
[  187.940006][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.940017][ T7438] RSP: 002b:00007fcbf6413038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  187.940028][ T7438] RAX: ffffffffffffffda RBX: 00007fcbf57b6080 RCX: 00007fcbf558e969
[  187.940034][ T7438] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000140
[  187.940041][ T7438] RBP: 00007fcbf6413090 R08: 0000000000000000 R09: 0000000000000000
[  187.940047][ T7438] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001
[  187.940053][ T7438] R13: 0000000000000000 R14: 00007fcbf57b6080 R15: 00007ffd3e6b3b68
[  187.940067][ T7438]  </TASK>
[  188.941445][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'.
[  190.380529][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.773871][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  190.773904][   T30] audit: type=1400 audit(2000000104.730:374): avc:  denied  { setopt } for  pid=7470 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  190.813691][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  190.819841][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[  190.826761][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  190.832864][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  190.957978][ T5817] Bluetooth: hci1: command 0x0406 tx timeout
[  191.547695][ T7486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.597670][   T30] audit: type=1400 audit(2000000106.380:375): avc:  denied  { write } for  pid=7492 comm="syz.0.385" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  192.787862][ T7502] netlink: 240 bytes leftover after parsing attributes in process `syz.2.381'.
[  193.674047][ T7508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  193.871825][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  193.878610][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.033693][   T30] audit: type=1400 audit(2000000107.930:376): avc:  denied  { read write } for  pid=7489 comm="syz.3.382" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  194.057500][   T30] audit: type=1400 audit(2000000107.930:377): avc:  denied  { open } for  pid=7489 comm="syz.3.382" path="/74/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  194.119629][   T30] audit: type=1400 audit(2000000107.940:378): avc:  denied  { ioctl } for  pid=7489 comm="syz.3.382" path="/74/file0/file0" dev="fuse" ino=5 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  194.736606][    C0] vkms_vblank_simulate: vblank timer overrun
[  194.821719][ T7525] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.198464][ T7539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.348070][ T7578] netlink: 240 bytes leftover after parsing attributes in process `syz.1.402'.
[  197.451651][ T7582] sctp: [Deprecated]: syz.3.404 (pid 7582) Use of int in max_burst socket option deprecated.
[  197.451651][ T7582] Use struct sctp_assoc_value instead
[  197.482426][   T30] audit: type=1400 audit(2000000111.490:379): avc:  denied  { write } for  pid=7580 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  198.734120][ T7598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.741026][ T7603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.943035][   T30] audit: type=1400 audit(2000000112.950:380): avc:  denied  { sys_module } for  pid=7593 comm="syz.3.407" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  200.203150][ T7621] syz_tun: entered allmulticast mode
[  200.365782][ T7621] dvmrp1: entered allmulticast mode
[  200.374610][ T7626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  200.907455][   T30] audit: type=1400 audit(2000000114.920:381): avc:  denied  { mount } for  pid=7612 comm="syz.4.412" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  200.943232][ T7621] overlayfs: failed to resolve '/¦5„2Q|)çý°	òE?ƒ@^aGE£úr‡UJ�yùQ(â¡ÍRAÜ': -2
[  200.973054][   T30] audit: type=1400 audit(2000000114.950:382): avc:  denied  { mounton } for  pid=7612 comm="syz.4.412" path="/76/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  201.262386][ T7612] syz_tun: left allmulticast mode
[  201.288755][ T7612] dvmrp1: left allmulticast mode
[  201.644554][ T7639] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.417'.
[  201.806966][   T30] audit: type=1400 audit(2000000115.820:383): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  202.008754][ T7644] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  202.709531][ T7656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.714496][ T7654] 9pnet_fd: Insufficient options for proto=fd
[  202.725777][   T30] audit: type=1400 audit(2000000116.720:384): avc:  denied  { mounton } for  pid=7653 comm="syz.3.422" path="/79/file1" dev="autofs" ino=13693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  203.050758][ T7662] netlink: 256 bytes leftover after parsing attributes in process `syz.3.424'.
[  204.093280][   T30] audit: type=1400 audit(2000000118.100:385): avc:  denied  { ioctl } for  pid=7669 comm="syz.2.426" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  204.219353][   T30] audit: type=1326 audit(2000000118.220:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  204.323755][   T30] audit: type=1326 audit(2000000118.220:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  204.444639][   T30] audit: type=1326 audit(2000000118.220:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  204.506268][   T30] audit: type=1326 audit(2000000118.230:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  204.621416][   T30] audit: type=1326 audit(2000000118.230:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  204.675144][   T30] audit: type=1326 audit(2000000118.230:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  204.699232][   T30] audit: type=1326 audit(2000000118.230:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  205.027031][ T7694] netlink: 240 bytes leftover after parsing attributes in process `syz.4.431'.
[  205.196498][   T30] audit: type=1326 audit(2000000118.230:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5631f8e969 code=0x7ffc0000
[  205.400940][ T7697] fuse: Unknown parameter 'group_id00000000000000000000'
[  205.636636][ T7701] 9pnet_fd: Insufficient options for proto=fd
[  207.572746][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'.
[  207.900192][ T7729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.425687][ T7738] xt_cgroup: xt_cgroup: no path or classid specified
[  209.514106][ T7745] fuse: Bad value for 'user_id'
[  209.539335][ T7745] fuse: Bad value for 'user_id'
[  209.664004][ T7749] 9pnet_fd: Insufficient options for proto=fd
[  211.581136][ T7767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.224612][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  212.224628][   T30] audit: type=1400 audit(2000000125.760:399): avc:  denied  { ioctl } for  pid=7750 comm="syz.2.447" path="socket:[13855]" dev="sockfs" ino=13855 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  212.273431][ T7765] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  212.302470][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.522638][   T30] audit: type=1400 audit(2000000126.530:400): avc:  denied  { write } for  pid=7750 comm="syz.2.447" path="socket:[13827]" dev="sockfs" ino=13827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  212.547267][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.552544][ T7780] netlink: 240 bytes leftover after parsing attributes in process `syz.1.451'.
[  213.740130][ T7789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  214.018737][ T7794] fuse: Bad value for 'user_id'
[  214.031702][ T7794] fuse: Bad value for 'user_id'
[  216.316664][ T7819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.414923][ T7844] fuse: Bad value for 'user_id'
[  218.419931][ T7844] fuse: Bad value for 'user_id'
[  220.615546][ T7850] xt_cgroup: xt_cgroup: no path or classid specified
[  222.685980][ T7884] netlink: 240 bytes leftover after parsing attributes in process `syz.2.484'.
[  223.016030][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'.
[  223.669415][ T7908] fuse: Bad value for 'fd'
[  223.805268][ T7912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.588671][ T7932] netlink: 256 bytes leftover after parsing attributes in process `syz.1.493'.
[  225.984957][ T7931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.518276][ T7953] fuse: Bad value for 'fd'
[  228.816603][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.500'.
[  231.907048][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[  232.643243][ T8004] fuse: Bad value for 'fd'
[  234.207855][ T8020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'.
[  235.261507][ T8036] netlink: 240 bytes leftover after parsing attributes in process `syz.3.516'.
[  235.752428][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'.
[  237.617595][ T8060] fuse: Bad value for 'fd'
[  237.959092][   T58] IPVS: starting estimator thread 0...
[  238.126312][ T8064] IPVS: using max 39 ests per chain, 93600 per kthread
[  240.540951][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'.
[  240.878013][ T8103] netlink: 240 bytes leftover after parsing attributes in process `syz.3.532'.
[  241.386816][ T8110] fuse: Bad value for 'fd'
[  241.593751][ T8116] netlink: 256 bytes leftover after parsing attributes in process `syz.1.537'.
[  244.617409][ T8136] delete_channel: no stack
[  244.621941][ T8136] delete_channel: no stack
[  245.176400][ T8161] xt_cgroup: xt_cgroup: no path or classid specified
[  245.398667][ T8154] netlink: 240 bytes leftover after parsing attributes in process `syz.4.546'.
[  245.402177][ T8168] fuse: Bad value for 'fd'
[  245.623698][   T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  246.174836][   T58] usb 2-1: Using ep0 maxpacket: 32
[  246.185335][   T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.205008][   T58] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  246.290561][   T58] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  246.317507][   T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.424560][   T58] usb 2-1: Product: syz
[  246.428757][   T58] usb 2-1: Manufacturer: syz
[  246.433378][   T58] usb 2-1: SerialNumber: syz
[  246.458280][   T58] usb 2-1: config 0 descriptor??
[  246.468401][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'.
[  246.505069][   T58] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  246.665669][   T58] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[  246.797268][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.427968][ T5864] usb 2-1: USB disconnect, device number 8
[  248.339293][ T8188] mmap: syz.2.553 (8188) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  248.369425][ T8188] pim6reg: entered allmulticast mode
[  248.382437][ T8188] pim6reg: left allmulticast mode
[  248.526453][ T8198] delete_channel: no stack
[  248.663881][ T8198] delete_channel: no stack
[  250.132936][ T8215] fuse: Invalid rootmode
[  250.352674][ T8219] netlink: 240 bytes leftover after parsing attributes in process `syz.1.560'.
[  250.446448][ T8211] xt_cgroup: xt_cgroup: no path or classid specified
[  250.574794][ T8224] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  250.607662][ T8224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  252.593710][ T5864] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  253.495435][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'.
[  253.546769][ T5864] usb 4-1: Using ep0 maxpacket: 32
[  253.589513][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.688897][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  253.827849][ T8265] xt_cgroup: xt_cgroup: no path or classid specified
[  253.880230][ T5864] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  254.061434][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.101107][ T5864] usb 4-1: Product: syz
[  254.114010][ T5864] usb 4-1: Manufacturer: syz
[  254.118690][ T5864] usb 4-1: SerialNumber: syz
[  254.146049][ T5864] usb 4-1: config 0 descriptor??
[  254.179986][ T5864] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  254.361374][ T8269] fuse: Invalid rootmode
[  254.362134][ T5864] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  254.407495][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.455923][ T5864] usb 4-1: USB disconnect, device number 11
[  254.971944][ T8281] netlink: 256 bytes leftover after parsing attributes in process `syz.2.577'.
[  255.014406][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'.
[  255.297962][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.306597][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  255.666976][ T8288] netlink: 240 bytes leftover after parsing attributes in process `syz.1.576'.
[  258.825824][ T8316] xt_cgroup: xt_cgroup: no path or classid specified
[  259.277729][ T8326] fuse: Invalid rootmode
[  259.403796][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'.
[  259.496128][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.585'.
[  260.105296][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  260.503730][   T24] usb 1-1: Using ep0 maxpacket: 32
[  260.775620][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.819443][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  260.871163][   T24] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  261.038532][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.707227][   T24] usb 1-1: Product: syz
[  261.737033][   T24] usb 1-1: Manufacturer: syz
[  261.748310][   T24] usb 1-1: SerialNumber: syz
[  261.867129][   T24] usb 1-1: config 0 descriptor??
[  261.902136][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  262.478368][   T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  262.527863][   T24] usb 1-1: USB disconnect, device number 7
[  262.541580][ T8361] netlink: 240 bytes leftover after parsing attributes in process `syz.2.594'.
[  262.566402][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.498320][ T8369] xt_cgroup: xt_cgroup: no path or classid specified
[  263.921927][ T8374] fuse: Unknown parameter '00000000000000000000'
[  265.675410][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'.
[  269.245104][ T8423] netlink: 240 bytes leftover after parsing attributes in process `syz.1.609'.
[  271.226068][   T24] IPVS: starting estimator thread 0...
[  271.413682][ T2145] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  271.563806][ T8454] IPVS: using max 40 ests per chain, 96000 per kthread
[  271.775489][ T2145] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  271.797672][ T2145] usb 1-1: config 0 has no interface number 0
[  271.807781][ T2145] usb 1-1: config 0 interface 122 has no altsetting 0
[  271.869035][ T2145] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  271.919457][ T2145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.931073][ T2145] usb 1-1: Product: syz
[  272.281141][   T24] IPVS: starting estimator thread 0...
[  272.405740][ T2145] usb 1-1: Manufacturer: syz
[  272.415009][ T2145] usb 1-1: SerialNumber: syz
[  272.426310][ T2145] usb 1-1: config 0 descriptor??
[  272.503825][ T8464] IPVS: using max 43 ests per chain, 103200 per kthread
[  272.533685][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  273.306855][   T24] usb 2-1: config 0 has an invalid interface number: 122 but max is 0
[  273.315683][   T24] usb 2-1: config 0 has no interface number 0
[  273.347618][   T24] usb 2-1: config 0 interface 122 has no altsetting 0
[  273.377317][   T24] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  273.436256][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.500804][   T24] usb 2-1: Product: syz
[  273.507212][   T24] usb 2-1: Manufacturer: syz
[  273.511914][   T24] usb 2-1: SerialNumber: syz
[  273.522757][   T24] usb 2-1: config 0 descriptor??
[  274.646371][   T24] usb 1-1: USB disconnect, device number 8
[  274.678562][   T24] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  276.215204][ T5864] usb 2-1: USB disconnect, device number 9
[  276.221561][ T5864] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  276.655493][ T8485] netlink: 240 bytes leftover after parsing attributes in process `syz.2.623'.
[  277.079694][ T8510] netlink: 256 bytes leftover after parsing attributes in process `syz.4.625'.
[  277.523659][ T5860] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  278.113589][ T5860] usb 1-1: Using ep0 maxpacket: 32
[  278.151562][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.165307][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  278.626945][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'.
[  278.844773][ T5860] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  279.340662][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.368308][ T5860] usb 1-1: Product: syz
[  279.372541][ T5860] usb 1-1: Manufacturer: syz
[  279.567168][ T5860] usb 1-1: SerialNumber: syz
[  279.578685][ T5860] usb 1-1: config 0 descriptor??
[  280.271101][ T5860] usb 1-1: can't set config #0, error -71
[  280.456612][ T8537] netlink: 256 bytes leftover after parsing attributes in process `syz.2.635'.
[  280.665243][ T5860] usb 1-1: USB disconnect, device number 9
[  280.830392][ T8545] xt_cgroup: xt_cgroup: no path or classid specified
[  281.841986][ T8555] binder: 8554:8555 ioctl c0306201 200000000240 returned -11
[  282.210110][ T8558] netlink: 240 bytes leftover after parsing attributes in process `syz.4.641'.
[  291.067054][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'.
[  293.527876][ T8694] fuse: Unknown parameter 'user_i00000000000000000000'
[  294.743907][ T8715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.677'.
[  297.713251][ T8744] fuse: Unknown parameter 'user_i00000000000000000000'
[  299.488352][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'.
[  302.773783][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.954495][ T5868] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  304.080014][ T8802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.140772][ T5868] usb 1-1: Using ep0 maxpacket: 32
[  304.699252][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.709575][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.725748][ T5868] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  304.743571][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.751578][ T5868] usb 1-1: Product: syz
[  304.765875][ T5868] usb 1-1: Manufacturer: syz
[  304.770491][ T5868] usb 1-1: SerialNumber: syz
[  305.144334][ T5868] usb 1-1: config 0 descriptor??
[  305.155190][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  305.244484][ T5864] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  305.516675][ T8812] netlink: 256 bytes leftover after parsing attributes in process `syz.4.703'.
[  305.584200][ T5864] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  305.592400][ T5864] usb 4-1: config 0 has no interface number 0
[  306.232925][ T5868] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  306.243331][ T5864] usb 4-1: config 0 interface 122 has no altsetting 0
[  306.255515][ T5864] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  306.265491][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.274127][ T5864] usb 4-1: Product: syz
[  306.278299][ T5864] usb 4-1: Manufacturer: syz
[  306.282911][ T5864] usb 4-1: SerialNumber: syz
[  306.298258][ T5864] usb 4-1: config 0 descriptor??
[  306.341549][ T5960] usb 1-1: USB disconnect, device number 10
[  307.007969][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.103279][ T5864] usb 4-1: USB disconnect, device number 12
[  308.153749][ T5864] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  311.522924][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.868284][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'.
[  314.356668][ T8893] netlink: 256 bytes leftover after parsing attributes in process `syz.3.721'.
[  316.752131][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  316.759003][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  317.989850][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'.
[  327.427605][ T9018] netlink: 256 bytes leftover after parsing attributes in process `syz.2.752'.
[  328.937362][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.754'.
[  329.579269][ T9041] netlink: 256 bytes leftover after parsing attributes in process `syz.1.757'.
[  336.315953][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'.
[  336.789993][ T9099] xt_cgroup: xt_cgroup: no path or classid specified
[  337.473897][ T9109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'.
[  338.469511][ T9120] netlink: 256 bytes leftover after parsing attributes in process `syz.2.778'.
[  339.154012][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'.
[  340.486317][ T9142] netlink: 256 bytes leftover after parsing attributes in process `syz.2.785'.
[  344.823754][ T9184] netlink: 256 bytes leftover after parsing attributes in process `syz.3.796'.
[  345.608974][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  345.638832][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  345.648966][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  345.657175][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  345.668218][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.641541][ T9201] chnl_net:caif_netlink_parms(): no params data found
[  347.700152][ T5822] Bluetooth: hci5: command tx timeout
[  347.852915][ T9231] xt_cgroup: xt_cgroup: no path or classid specified
[  347.905671][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.938955][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.961624][ T9201] bridge_slave_0: entered allmulticast mode
[  347.989713][ T9201] bridge_slave_0: entered promiscuous mode
[  348.080358][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.087582][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.101670][ T9201] bridge_slave_1: entered allmulticast mode
[  348.110763][ T9201] bridge_slave_1: entered promiscuous mode
[  348.180211][ T9240] netlink: 256 bytes leftover after parsing attributes in process `syz.1.809'.
[  349.083394][ T9201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.096593][ T9201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.260375][ T9201] team0: Port device team_slave_0 added
[  349.275457][ T9201] team0: Port device team_slave_1 added
[  349.386255][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.406083][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.457804][   T30] audit: type=1400 audit(2000000263.470:401): avc:  denied  { create } for  pid=9258 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  349.482259][ T9201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.506532][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.518783][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.606750][ T9201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.745526][ T9201] hsr_slave_0: entered promiscuous mode
[  349.751966][ T9201] hsr_slave_1: entered promiscuous mode
[  349.777420][ T5822] Bluetooth: hci5: command tx timeout
[  349.786840][ T9201] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.799272][ T9201] Cannot create hsr debugfs directory
[  351.815930][ T5864] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  351.854554][ T5822] Bluetooth: hci5: command tx timeout
[  351.979784][ T9201] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  352.016856][ T5864] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  352.052212][ T9201] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  352.064590][ T5864] usb 4-1: config 0 has no interface number 0
[  352.081540][ T5864] usb 4-1: config 0 interface 122 has no altsetting 0
[  352.097756][ T9201] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  352.269818][ T5864] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  352.283167][ T9201] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  352.290161][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.299643][ T5864] usb 4-1: Product: syz
[  352.304932][ T5864] usb 4-1: Manufacturer: syz
[  352.309560][ T5864] usb 4-1: SerialNumber: syz
[  352.324860][ T5864] usb 4-1: config 0 descriptor??
[  352.924863][ T9201] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.093185][ T9295] netlink: 256 bytes leftover after parsing attributes in process `syz.2.822'.
[  353.798667][ T9201] 8021q: adding VLAN 0 to HW filter on device team0
[  353.857174][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.861781][ T5864] usb 4-1: USB disconnect, device number 13
[  353.864345][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.870591][ T5864] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  353.915610][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.923607][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.970564][ T5822] Bluetooth: hci5: command tx timeout
[  354.277054][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  355.214086][   T10] usb 1-1: Using ep0 maxpacket: 32
[  355.243038][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.274041][   T10] usb 1-1: config 0 has no interfaces?
[  355.279598][   T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  355.452199][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.478940][   T10] usb 1-1: config 0 descriptor??
[  355.485279][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.315860][   T10] usb 1-1: USB disconnect, device number 11
[  356.780631][   T30] audit: type=1400 audit(2000000270.790:402): avc:  denied  { name_bind } for  pid=9341 comm="syz.3.830" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  356.801607][    C1] vkms_vblank_simulate: vblank timer overrun
[  357.693185][ T9201] veth0_vlan: entered promiscuous mode
[  357.738874][ T9201] veth1_vlan: entered promiscuous mode
[  357.859449][ T9201] veth0_macvtap: entered promiscuous mode
[  357.886639][ T9201] veth1_macvtap: entered promiscuous mode
[  357.902914][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.966604][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.107782][ T9201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.274573][ T9201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.283579][ T9201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.448382][ T9201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.550800][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'.
[  358.735713][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.838'.
[  359.217427][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.250028][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.313067][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.327897][ T9383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.841'.
[  359.334348][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.368225][   T30] audit: type=1400 audit(2000000273.370:403): avc:  denied  { mounton } for  pid=9201 comm="syz-executor" path="/root/syzkaller.tI3XF6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  359.513369][ T9391] lo speed is unknown, defaulting to 1000
[  359.520783][ T9391] lo speed is unknown, defaulting to 1000
[  359.528356][ T9391] lo speed is unknown, defaulting to 1000
[  359.538618][ T9391] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  359.554780][ T9391] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  359.583924][ T9391] lo speed is unknown, defaulting to 1000
[  359.592285][ T9391] lo speed is unknown, defaulting to 1000
[  359.599528][ T9391] lo speed is unknown, defaulting to 1000
[  359.607567][ T9391] lo speed is unknown, defaulting to 1000
[  359.614933][ T9391] lo speed is unknown, defaulting to 1000
[  359.622138][ T9391] lo speed is unknown, defaulting to 1000
[  359.654853][   T30] audit: type=1400 audit(2000000273.440:404): avc:  denied  { mount } for  pid=9201 comm="syz-executor" name="/" dev="gadgetfs" ino=7265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  359.787698][ T9381] netlink: 'syz.2.839': attribute type 10 has an invalid length.
[  359.825494][ T9381] netlink: 152 bytes leftover after parsing attributes in process `syz.2.839'.
[  360.253990][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.797'.
[  361.169237][ T9412] netlink: 256 bytes leftover after parsing attributes in process `syz.5.844'.
[  361.250723][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'.
[  362.612648][   T30] audit: type=1400 audit(2000000276.620:405): avc:  denied  { read } for  pid=9429 comm="syz.5.850" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  362.845066][   T30] audit: type=1400 audit(2000000276.620:406): avc:  denied  { open } for  pid=9429 comm="syz.5.850" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  363.917545][ T9444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'.
[  364.960264][   T30] audit: type=1400 audit(2000000278.970:407): avc:  denied  { name_bind } for  pid=9455 comm="syz.1.855" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  365.236447][ T9456] xt_cgroup: xt_cgroup: no path or classid specified
[  365.780173][ T9476] netlink: 20 bytes leftover after parsing attributes in process `syz.5.859'.
[  366.365570][ T9486] netlink: 'syz.3.863': attribute type 10 has an invalid length.
[  367.424209][ T9486] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  367.664215][ T5868] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  368.302942][ T5868] usb 3-1: config 0 has an invalid interface number: 122 but max is 0
[  368.319473][ T5868] usb 3-1: config 0 has no interface number 0
[  368.326078][ T5868] usb 3-1: config 0 interface 122 has no altsetting 0
[  368.335637][ T5868] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  368.417185][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.425475][ T5868] usb 3-1: Product: syz
[  368.429993][ T5868] usb 3-1: Manufacturer: syz
[  368.435178][ T5868] usb 3-1: SerialNumber: syz
[  368.461030][ T5868] usb 3-1: config 0 descriptor??
[  369.119449][ T9509] xt_cgroup: xt_cgroup: no path or classid specified
[  369.174237][ T9502] delete_channel: no stack
[  369.182839][ T9502] delete_channel: no stack
[  369.268787][ T9511] batadv_slave_1: entered promiscuous mode
[  369.290457][ T9510] batadv_slave_1: left promiscuous mode
[  370.291288][ T5868] usb 3-1: USB disconnect, device number 9
[  370.297652][ T5868] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  370.472090][ T9531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.295241][ T9539] fuse: Unknown parameter 'ro]]J~Ç3ÄN0ÿÿÿÿ00000000000040Õä´
	000€'
[  372.346718][ T5868] IPVS: starting estimator thread 0...
[  372.449331][ T9547] xt_cgroup: xt_cgroup: no path or classid specified
[  372.456976][ T9553] IPVS: using max 38 ests per chain, 91200 per kthread
[  372.595453][ T5899] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  372.795440][ T5899] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  373.561648][ T5899] usb 6-1: config 0 has no interface number 0
[  374.599832][ T5899] usb 6-1: config 0 interface 122 has no altsetting 0
[  375.043325][ T5899] usb 6-1: string descriptor 0 read error: -71
[  375.052030][ T5899] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  375.061421][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.074808][ T5899] usb 6-1: config 0 descriptor??
[  375.082312][ T5899] usb 6-1: can't set config #0, error -71
[  375.124874][ T5899] usb 6-1: USB disconnect, device number 2
[  375.163699][ T9576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.889'.
[  375.192941][ T9576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  375.220147][   T30] audit: type=1400 audit(2000000289.230:408): avc:  denied  { listen } for  pid=9582 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  375.244715][ T9578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.890'.
[  375.257593][ T9578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  375.278999][   T30] audit: type=1400 audit(2000000289.260:409): avc:  denied  { accept } for  pid=9582 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  375.391951][   T30] audit: type=1400 audit(2000000289.400:410): avc:  denied  { bind } for  pid=9582 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  375.644584][ T5899] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  375.698864][ T9597] xt_cgroup: xt_cgroup: no path or classid specified
[  375.873641][ T5899] usb 6-1: Using ep0 maxpacket: 8
[  375.927679][ T5899] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  376.050130][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.373380][ T5899] usb 6-1: config 0 descriptor??
[  377.005239][ T5899] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  377.674812][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.891'.
[  377.884543][   T30] audit: type=1400 audit(2000000291.890:411): avc:  denied  { getopt } for  pid=9579 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  377.908599][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.918503][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.966366][ T5899] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  377.977681][   T30] audit: type=1400 audit(2000000291.950:412): avc:  denied  { read write } for  pid=9617 comm="syz.2.901" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  378.009832][ T5899] asix 6-1:0.0: probe with driver asix failed with error -71
[  378.045496][ T5899] usb 6-1: USB disconnect, device number 3
[  378.052133][   T30] audit: type=1400 audit(2000000291.950:413): avc:  denied  { open } for  pid=9617 comm="syz.2.901" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  378.172010][   T30] audit: type=1400 audit(2000000291.950:414): avc:  denied  { ioctl } for  pid=9617 comm="syz.2.901" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  378.202737][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.210090][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  378.220562][ T9625] siw: device registration error -23
[  378.286415][ T9627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.904'.
[  378.300337][ T9627] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  378.425706][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.923930][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'.
[  379.822010][ T9638] xt_cgroup: xt_cgroup: no path or classid specified
[  381.546329][ T9670] syz.1.915 uses obsolete (PF_INET,SOCK_PACKET)
[  382.972864][ T9681] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  383.782117][ T9689] xt_cgroup: xt_cgroup: no path or classid specified
[  384.544200][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.922'.
[  385.444573][   T30] audit: type=1400 audit(2000000298.720:415): avc:  denied  { append } for  pid=9694 comm="syz.3.923" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  387.083293][ T9718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.605932][ T9732] xt_l2tp: v2 doesn't support IP mode
[  388.907978][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'.
[  389.206726][  T971] lo speed is unknown, defaulting to 1000
[  389.681815][ T9740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'.
[  390.128824][ T9752] xt_cgroup: xt_cgroup: no path or classid specified
[  391.240236][ T9764] Cannot find set identified by id 0 to match
[  394.089769][   T30] audit: type=1400 audit(2000000308.100:416): avc:  denied  { wake_alarm } for  pid=9784 comm="syz.2.945" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  394.118300][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'.
[  394.585884][   T30] audit: type=1400 audit(2000000308.130:417): avc:  denied  { bind } for  pid=9784 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  394.725414][   T30] audit: type=1400 audit(2000000308.130:418): avc:  denied  { setopt } for  pid=9784 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  396.378504][ T9805] xt_cgroup: xt_cgroup: no path or classid specified
[  398.083286][ T9828] binder: 9825:9828 ioctl c0306201 200000000240 returned -11
[  398.580427][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'.
[  400.289203][   T30] audit: type=1400 audit(2000000314.300:419): avc:  denied  { mount } for  pid=9836 comm="syz.2.961" name="/" dev="overlay" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  400.529289][   T30] audit: type=1400 audit(2000000314.330:420): avc:  denied  { create } for  pid=9836 comm="syz.2.961" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  400.552409][   T30] audit: type=1400 audit(2000000314.330:421): avc:  denied  { link } for  pid=9836 comm="syz.2.961" name="file1" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  400.743797][   T30] audit: type=1400 audit(2000000314.660:422): avc:  denied  { mount } for  pid=9849 comm="syz.0.962" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  401.806955][ T9859] xt_cgroup: xt_cgroup: no path or classid specified
[  401.928126][ T9863] usb usb8: usbfs: process 9863 (syz.2.965) did not claim interface 0 before use
[  402.873850][ T9873] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  403.254157][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'.
[  404.215762][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'.
[  405.314812][ T5866] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  405.553030][ T9905] vxcan0: tx drop: invalid da for name 0x0000000000000003
[  405.780602][ T5866] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  405.991734][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'.
[  406.394706][ T5866] usb 6-1: config 0 has no interface number 0
[  406.426692][ T5866] usb 6-1: config 0 interface 122 has no altsetting 0
[  406.490233][ T5866] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  406.567205][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.653457][ T5866] usb 6-1: Product: syz
[  406.689884][ T5866] usb 6-1: Manufacturer: syz
[  406.734488][ T5866] usb 6-1: SerialNumber: syz
[  407.085403][ T5866] usb 6-1: config 0 descriptor??
[  407.753307][   T30] audit: type=1326 audit(2000000321.760:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  407.796370][   T30] audit: type=1326 audit(2000000321.760:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.484051][   T30] audit: type=1326 audit(2000000321.800:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.509903][   T30] audit: type=1326 audit(2000000321.800:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.549698][   T30] audit: type=1326 audit(2000000321.800:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.649096][   T30] audit: type=1326 audit(2000000321.800:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.723144][   T30] audit: type=1326 audit(2000000321.800:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.780501][ T9829] usb 6-1: USB disconnect, device number 4
[  408.787853][ T9829] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  408.885384][   T30] audit: type=1326 audit(2000000321.800:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.946823][   T30] audit: type=1326 audit(2000000321.800:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  408.991535][   T30] audit: type=1326 audit(2000000321.800:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1d58e969 code=0x7ffc0000
[  409.158250][ T9938] IPv6: syztnl0: Disabled Multicast RS
[  409.205501][ T9938] block nbd0: NBD_DISCONNECT
[  409.212446][ T9938] block nbd0: Send disconnect failed -22
[  410.134840][ T9937] block nbd0: Disconnected due to user request.
[  410.141652][ T9937] block nbd0: shutting down sockets
[  410.847470][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'.
[  412.716831][T10014] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  412.806726][T10014] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\
[  412.812639][T10014] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP
[  412.825550][T10014] [U] 4°×XZ^Yˆ±„™)�ÛÀ´´ÈMÕC°¼.ŒOÅÈžÛPšO¼­W
[  412.831887][T10014] [U] ‚ä%�Z
[  412.839841][T10014] [U] ¾8`Ñ}—[TÃÚJ#ZÏ~»Ž3µݥI~ÇD‚%8@7J÷ÝÍ|{9Dœ¤C¤ÏÜE+ÇOÆK?%§6
[  412.849979][T10010] [U] ®ÛP>BÐ�Ì–ÖZ%
[  412.974861][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  413.159624][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  413.299486][T10030] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1003'.
[  414.182243][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.196574][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  414.206510][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.702918][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'.
[  414.977868][   T10] usb 2-1: config 0 descriptor??
[  415.411808][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.564131][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.497640][T10044] delete_channel: no stack
[  416.507078][T10044] delete_channel: no stack
[  416.531824][   T10] magicmouse 0003:05AC:0265.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0
[  417.235272][ T5864] usb 2-1: USB disconnect, device number 10
[  417.371991][T10074] fuse: Unknown parameter 'œfd'
[  417.403654][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  417.403671][   T30] audit: type=1400 audit(2000000331.400:443): avc:  denied  { nlmsg_write } for  pid=10072 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  417.470118][   T30] audit: type=1400 audit(2000000331.400:444): avc:  denied  { audit_write } for  pid=10072 comm="syz.0.1010" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  417.534861][   T30] audit: type=1107 audit(2000000331.410:445): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  420.225704][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1018'.
[  421.407923][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  421.430929][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  421.448732][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  421.456645][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  421.464205][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  421.645634][T10138] lo speed is unknown, defaulting to 1000
[  423.438949][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1025'.
[  423.545646][   T53] Bluetooth: hci6: command tx timeout
[  423.914673][T10138] chnl_net:caif_netlink_parms(): no params data found
[  424.189330][   T30] audit: type=1400 audit(2000000338.060:446): avc:  denied  { connect } for  pid=10171 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  424.245456][   T30] audit: type=1400 audit(2000000338.070:447): avc:  denied  { create } for  pid=10171 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  425.200065][   T30] audit: type=1400 audit(2000000338.710:448): avc:  denied  { block_suspend } for  pid=10171 comm="syz.2.1028" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  425.371674][   T30] audit: type=1400 audit(2000000338.970:449): avc:  denied  { accept } for  pid=10171 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  425.806178][   T53] Bluetooth: hci6: command tx timeout
[  425.872441][T10138] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.882538][T10138] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.892428][T10138] bridge_slave_0: entered allmulticast mode
[  425.914669][T10138] bridge_slave_0: entered promiscuous mode
[  426.474994][T10138] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.482186][T10138] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.490163][T10138] bridge_slave_1: entered allmulticast mode
[  426.505548][T10138] bridge_slave_1: entered promiscuous mode
[  426.537809][T10187] delete_channel: no stack
[  426.545478][T10187] delete_channel: no stack
[  426.573787][T10138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.601027][T10138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.710858][   T30] audit: type=1400 audit(2000000340.720:450): avc:  denied  { write } for  pid=10201 comm="syz.2.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  426.840981][T10138] team0: Port device team_slave_0 added
[  426.867649][T10138] team0: Port device team_slave_1 added
[  427.521816][T10212] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1035'.
[  427.865103][   T53] Bluetooth: hci6: command tx timeout
[  427.913377][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.920679][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.955873][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.049056][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.056372][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.122757][   T30] audit: type=1400 audit(2000000342.110:451): avc:  denied  { mount } for  pid=10215 comm="syz.5.1036" name="/" dev="ramfs" ino=26364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  428.130151][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.396085][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.405414][T10217] batadv_slave_0: entered promiscuous mode
[  428.594184][T10228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'.
[  429.170126][T10138] hsr_slave_0: entered promiscuous mode
[  429.177585][T10138] hsr_slave_1: entered promiscuous mode
[  429.191534][T10138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.203183][T10138] Cannot create hsr debugfs directory
[  429.357722][T10235] bridge2: entered allmulticast mode
[  429.620253][   T30] audit: type=1400 audit(2000000343.630:452): avc:  denied  { connect } for  pid=10239 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  429.639701][    C0] vkms_vblank_simulate: vblank timer overrun
[  429.729749][   T30] audit: type=1400 audit(2000000343.680:453): avc:  denied  { read } for  pid=10239 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  429.935399][   T53] Bluetooth: hci6: command tx timeout
[  430.364673][T10138] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  430.396884][T10138] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  430.455726][T10138] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  430.497030][T10138] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  431.464693][T10252] delete_channel: no stack
[  431.480480][T10252] delete_channel: no stack
[  431.570683][T10138] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.607914][T10138] 8021q: adding VLAN 0 to HW filter on device team0
[  431.641195][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.648542][ T9648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.738145][T10264] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1048'.
[  431.753584][ T2145] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  432.016701][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.023863][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.605937][ T2145] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  432.711045][ T2145] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  432.721806][ T2145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  432.731460][ T2145] usb 2-1: Product: syz
[  432.738963][ T2145] usb 2-1: Manufacturer: syz
[  432.744124][ T2145] usb 2-1: SerialNumber: syz
[  432.773279][T10138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  432.801525][T10138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  433.695204][ T2145] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  433.873102][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1050'.
[  434.255960][   T30] audit: type=1400 audit(2000000348.250:454): avc:  denied  { setattr } for  pid=10260 comm="syz.1.1047" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  434.306052][ T2145] usb 2-1: USB disconnect, device number 11
[  434.350388][ T2145] usblp0: removed
[  434.361761][   T30] audit: type=1400 audit(2000000348.280:455): avc:  denied  { write } for  pid=10260 comm="syz.1.1047" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  434.493089][   T30] audit: type=1400 audit(2000000348.280:456): avc:  denied  { open } for  pid=10260 comm="syz.1.1047" path="/198/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  434.568710][   T30] audit: type=1400 audit(2000000348.560:457): avc:  denied  { ioctl } for  pid=10288 comm="syz.2.1053" path="socket:[26662]" dev="sockfs" ino=26662 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  434.611416][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.406748][   T30] audit: type=1400 audit(2000000349.400:458): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  435.416094][T10293] delete_channel: no stack
[  435.441003][T10293] delete_channel: no stack
[  435.549235][T10303] 9pnet_fd: Insufficient options for proto=fd
[  435.682636][   T30] audit: type=1400 audit(2000000349.690:459): avc:  denied  { mount } for  pid=10305 comm="syz.1.1056" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  435.830374][T10307] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.1056'.
[  435.833753][   T30] audit: type=1400 audit(2000000349.730:460): avc:  denied  { read } for  pid=10305 comm="syz.1.1056" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  435.864924][   T30] audit: type=1400 audit(2000000349.730:461): avc:  denied  { open } for  pid=10305 comm="syz.1.1056" path="/199/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  435.912006][T10312] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  436.274710][ T2145] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  436.487344][ T2145] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  436.510252][   T30] audit: type=1400 audit(2000000350.520:462): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  436.513314][ T2145] usb 1-1: config 0 has no interface number 0
[  436.539607][T10138] veth0_vlan: entered promiscuous mode
[  436.555645][T10319] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  436.560279][T10138] veth1_vlan: entered promiscuous mode
[  436.586114][ T2145] usb 1-1: config 0 interface 122 has no altsetting 0
[  436.595441][ T2145] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  436.605989][ T2145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.609668][T10319] bond1: entered promiscuous mode
[  436.614946][ T2145] usb 1-1: Product: syz
[  436.624494][T10319] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.632012][ T2145] usb 1-1: Manufacturer: syz
[  436.636941][ T2145] usb 1-1: SerialNumber: syz
[  436.642619][T10322] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  436.645278][ T2145] usb 1-1: config 0 descriptor??
[  436.679573][T10325] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.686817][T10325] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  436.697711][T10325] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  436.710800][T10325] bond1: (slave ip6gre1): making interface the new active one
[  436.722619][T10325] ip6gre1: entered promiscuous mode
[  436.729891][T10325] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  436.775838][T10138] veth0_macvtap: entered promiscuous mode
[  436.802926][T10138] veth1_macvtap: entered promiscuous mode
[  436.917795][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.935014][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.958843][T10138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.465451][T10138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.474381][T10138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.483116][T10138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.568014][T10330] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1063'.
[  438.402280][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.553132][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.585448][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.645708][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  439.652107][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  439.656344][ T5864] usb 1-1: USB disconnect, device number 12
[  439.682738][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1067'.
[  440.288789][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.525140][ T5864] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  440.894055][T10352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1068'.
[  441.154111][   T30] audit: type=1400 audit(2000000355.160:463): avc:  denied  { read } for  pid=10353 comm="syz.2.1070" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  441.275008][   T30] audit: type=1400 audit(2000000355.160:464): avc:  denied  { open } for  pid=10353 comm="syz.2.1070" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  441.299175][    C1] vkms_vblank_simulate: vblank timer overrun
[  441.366497][   T30] audit: type=1400 audit(2000000355.360:465): avc:  denied  { ioctl } for  pid=10359 comm="syz.1.1072" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  441.403578][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  441.424477][T10361] netlink: 'syz.2.1070': attribute type 10 has an invalid length.
[  441.432398][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1070'.
[  441.481281][T10363] CUSE: unknown device info "ÿ
"
[  441.486533][T10363] CUSE: zero length info key specified
[  441.666341][   T30] audit: type=1400 audit(2000000355.670:466): avc:  denied  { create } for  pid=10362 comm="syz.5.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  442.245673][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  442.256147][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  442.266393][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  442.276978][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  442.289304][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  442.294098][T10361] team0: Port device geneve0 added
[  442.304093][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.355910][   T10] usb 1-1: config 0 descriptor??
[  442.451864][T10366] macvtap1: entered promiscuous mode
[  442.608021][T10366] vlan0: entered promiscuous mode
[  442.620168][   T10] hdpvr 1-1:0.0: firmware version 0x0 dated 
[  442.637982][   T10] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  443.134297][T10366] macvtap1: entered allmulticast mode
[  443.146625][T10366] vlan0: entered allmulticast mode
[  443.168710][T10366] veth0_vlan: entered allmulticast mode
[  443.182919][T10366] vlan0: left allmulticast mode
[  443.202492][T10366] veth0_vlan: left allmulticast mode
[  443.208333][T10366] vlan0: left promiscuous mode
[  443.396707][   T30] audit: type=1400 audit(2000000357.400:467): avc:  denied  { setopt } for  pid=10372 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  443.496684][T10379] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1076'.
[  444.294230][   T10] hdpvr 1-1:0.0: Could not setup controls
[  444.312930][   T10] hdpvr 1-1:0.0: registering videodev failed
[  444.343738][   T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[  444.368568][   T10] usb 1-1: USB disconnect, device number 13
[  446.621636][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'.
[  446.663379][   T30] audit: type=1400 audit(2000000360.650:468): avc:  denied  { unmount } for  pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  447.194540][   T30] audit: type=1400 audit(2000000361.200:469): avc:  denied  { setopt } for  pid=10403 comm="syz.5.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  447.589218][T10415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10415 comm=syz.2.1085
[  448.739322][T10426] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1087'.
[  449.172520][   T30] audit: type=1400 audit(2000000363.180:470): avc:  denied  { module_request } for  pid=10429 comm="syz.2.1088" kmod="crypto-cryptd(__generic-gcm-aesni-avx)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  450.260808][   T30] audit: type=1400 audit(2000000363.440:471): avc:  denied  { override_creds } for  pid=10438 comm="syz.5.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  450.454218][   T30] audit: type=1400 audit(2000000364.190:472): avc:  denied  { read } for  pid=10438 comm="syz.5.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  451.277443][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1091'.
[  451.827093][T10461] capability: warning: `syz.0.1095' uses 32-bit capabilities (legacy support in use)
[  452.034091][T10465] loop9: detected capacity change from 0 to 8
[  452.289923][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'.
[  452.567548][T10465]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  452.573257][T10465] loop9: partition table partially beyond EOD, truncated
[  452.594364][T10461] cgroup: Name too long
[  452.601388][   T30] audit: type=1400 audit(2000000366.610:473): avc:  denied  { connect } for  pid=10459 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  452.710711][T10465] loop9: p1 size 81768186 extends beyond EOD, truncated
[  453.181111][T10463] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  453.181111][T10463]    program syz.6.1096 not setting count and/or reply_len properly
[  453.271760][T10475] bridge_slave_0: left allmulticast mode
[  453.280043][T10475] bridge_slave_0: left promiscuous mode
[  453.319310][T10475] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.372329][ T6360] udevd[6360]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  453.695768][   T30] audit: type=1400 audit(2000000367.700:474): avc:  denied  { map } for  pid=10471 comm="syz.2.1097" path="socket:[28264]" dev="sockfs" ino=28264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  453.864879][T10475] bridge_slave_1: left allmulticast mode
[  453.870536][T10475] bridge_slave_1: left promiscuous mode
[  453.882959][T10475] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.403815][   T30] audit: type=1400 audit(2000000367.700:475): avc:  denied  { read } for  pid=10471 comm="syz.2.1097" path="socket:[28264]" dev="sockfs" ino=28264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  454.464405][T10477] xt_cgroup: xt_cgroup: no path or classid specified
[  454.498053][T10475] bond0: (slave bond_slave_0): Releasing backup interface
[  454.651883][   T30] audit: type=1400 audit(2000000367.700:476): avc:  denied  { write } for  pid=10471 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  454.707050][T10475] bond0: (slave bond_slave_1): Releasing backup interface
[  455.242147][T10475] team0: Port device team_slave_0 removed
[  455.284445][T10475] team0: Port device team_slave_1 removed
[  455.309989][T10475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.318655][T10475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.411628][T10475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.475231][T10475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.531810][T10475] team0: Port device geneve0 removed
[  455.557940][T10475] bond1: (slave ip6gre1): Releasing backup interface
[  455.566060][T10475] ip6gre1: left promiscuous mode
[  455.608499][T10489] vlan2: entered allmulticast mode
[  455.623169][T10489] macsec0: entered allmulticast mode
[  455.632692][T10489] veth1_macvtap: entered allmulticast mode
[  455.904542][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  455.915039][  T971] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  456.292638][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1107'.
[  456.445133][   T10] usb 3-1: Using ep0 maxpacket: 16
[  456.451683][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  456.461553][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.474819][   T10] usb 3-1: config 0 descriptor??
[  456.506270][  T971] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  456.519399][  T971] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  456.530137][  T971] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  456.541831][  T971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.546256][   T30] audit: type=1400 audit(2000000370.560:477): avc:  denied  { getopt } for  pid=10508 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  456.582753][T10501] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  456.608122][  T971] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  456.690684][T10512] ptrace attach of "./syz-executor exec"[5819] was attempted by ""[10512]
[  456.737404][T10513] ptrace attach of "./syz-executor exec"[5819] was attempted by ""[10513]
[  458.161733][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  458.169866][   T30] audit: type=1400 audit(2000000372.180:478): avc:  denied  { open } for  pid=10520 comm="syz.5.1111" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  458.220810][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  458.387455][   T30] audit: type=1400 audit(2000000372.210:479): avc:  denied  { ioctl } for  pid=10520 comm="syz.5.1111" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  458.967743][ T5822] Bluetooth: hci6: command 0x0405 tx timeout
[  459.190014][   T10] usb 3-1: USB disconnect, device number 10
[  459.363699][  T971] usb 7-1: USB disconnect, device number 2
[  459.454535][T10535] netlink: 'syz.6.1114': attribute type 39 has an invalid length.
[  459.645679][T10544] netlink: 'syz.5.1116': attribute type 4 has an invalid length.
[  459.734170][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  460.327617][T10544] netlink: 'syz.5.1116': attribute type 4 has an invalid length.
[  460.558173][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.571424][   T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  460.584606][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.598573][   T10] usb 1-1: config 0 descriptor??
[  460.712065][T10555] lo speed is unknown, defaulting to 1000
[  460.876043][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  460.912760][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  460.971829][   T10] usb 1-1: USB disconnect, device number 14
[  463.711792][   T30] audit: type=1400 audit(2000000377.510:480): avc:  denied  { read } for  pid=10573 comm="syz.6.1123" path="socket:[27219]" dev="sockfs" ino=27219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  463.735147][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.388960][ T6344] Bluetooth: hci7: Frame reassembly failed (-84)
[  464.442492][ T6344] Bluetooth: hci7: Frame reassembly failed (-84)
[  464.524561][T10588] Bluetooth: hci7: Frame reassembly failed (-84)
[  464.908475][   T30] audit: type=1400 audit(2000000378.860:481): avc:  denied  { write } for  pid=10596 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  464.994969][T10597] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1127'.
[  465.287189][   T30] audit: type=1400 audit(2000000379.260:482): avc:  denied  { ioctl } for  pid=10607 comm="syz.6.1132" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  465.600913][T10610] lo speed is unknown, defaulting to 1000
[  466.415551][   T53] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  466.644691][T10627] bridge0: entered promiscuous mode
[  466.649930][T10627] bridge0: entered allmulticast mode
[  468.760131][T10656] delete_channel: no stack
[  468.897970][T10656] delete_channel: no stack
[  469.455753][   T30] audit: type=1400 audit(2000000383.010:483): avc:  denied  { accept } for  pid=10661 comm="syz.1.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  469.830473][T10671] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1146'.
[  469.976404][ T5866] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  470.474687][T10663] delete_channel: no stack
[  470.513849][T10663] delete_channel: no stack
[  470.613372][T10680] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1148'.
[  470.683386][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.807662][ T5866] usb 2-1: config 0 has no interfaces?
[  470.813326][ T5866] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  470.932737][T10684] xt_cgroup: xt_cgroup: no path or classid specified
[  470.989464][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.167196][ T5866] usb 2-1: config 0 descriptor??
[  471.294110][   T30] audit: type=1400 audit(2000000385.280:484): avc:  denied  { read } for  pid=10689 comm="syz.6.1152" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  471.980475][   T30] audit: type=1400 audit(2000000385.280:485): avc:  denied  { open } for  pid=10689 comm="syz.6.1152" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  473.003154][   T10] usb 2-1: USB disconnect, device number 12
[  473.085654][T10698] delete_channel: no stack
[  473.090313][T10698] delete_channel: no stack
[  473.753750][   T53] Bluetooth: hci2: unexpected event for opcode 0x0c1a
[  474.094068][  T971] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  474.274109][  T971] usb 2-1: Using ep0 maxpacket: 32
[  474.298125][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  474.879060][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  474.915213][  T971] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  475.089332][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10
[  475.107284][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024
[  475.121304][  T971] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  475.136497][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.167496][  T971] usb 2-1: Product: syz
[  475.171696][  T971] usb 2-1: Manufacturer: syz
[  475.205087][  T971] usb 2-1: SerialNumber: syz
[  475.228438][  T971] usb 2-1: config 0 descriptor??
[  475.252009][T10714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  475.277534][  T971] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16
[  475.323391][ T5171] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  475.349335][    C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  475.384262][ T5171] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  475.463424][ T5171] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  475.620732][ T5171] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  475.643663][ T5171] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  475.667825][   T30] audit: type=1400 audit(2000000389.670:486): avc:  denied  { transfer } for  pid=10735 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  475.668676][ T5984] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  476.181979][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1166'.
[  476.581095][   T30] audit: type=1400 audit(2000000390.240:487): avc:  denied  { read write } for  pid=10735 comm="syz.0.1165" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  476.581142][   T30] audit: type=1400 audit(2000000390.240:488): avc:  denied  { open } for  pid=10735 comm="syz.0.1165" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  476.600196][T10714] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  476.695654][    C1] vkms_vblank_simulate: vblank timer overrun
[  476.775314][    C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  476.851349][ T5171] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  477.263846][ T5860] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  477.731789][ T5864] usb 2-1: USB disconnect, device number 13
[  477.818396][T10747] delete_channel: no stack
[  477.823164][T10747] delete_channel: no stack
[  477.843976][ T5860] usb 1-1: device descriptor read/64, error -71
[  478.095308][ T5860] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  478.277729][ T5860] usb 1-1: device descriptor read/64, error -71
[  478.755708][ T5860] usb usb1-port1: attempt power cycle
[  479.905261][   T30] audit: type=1400 audit(2000000393.920:489): avc:  denied  { write } for  pid=10776 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  480.278121][   T30] audit: type=1400 audit(2000000394.260:490): avc:  denied  { prog_load } for  pid=10779 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  480.471069][   T30] audit: type=1400 audit(2000000394.270:491): avc:  denied  { bpf } for  pid=10779 comm="syz.5.1177" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  480.504766][   T30] audit: type=1400 audit(2000000394.370:492): avc:  denied  { create } for  pid=10779 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  480.548616][   T30] audit: type=1400 audit(2000000394.400:493): avc:  denied  { write } for  pid=10779 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  480.615572][   T30] audit: type=1400 audit(2000000394.400:494): avc:  denied  { read } for  pid=10779 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  480.644874][T10787] IPVS: Error connecting to the multicast addr
[  480.689133][   T30] audit: type=1400 audit(2000000394.540:495): avc:  denied  { execmem } for  pid=10783 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  480.987187][T10792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1178'.
[  481.233737][   T30] audit: type=1400 audit(2000000394.670:496): avc:  denied  { read write } for  pid=10779 comm="syz.5.1177" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  481.355931][   T30] audit: type=1400 audit(2000000394.670:497): avc:  denied  { open } for  pid=10779 comm="syz.5.1177" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  481.381726][   T30] audit: type=1400 audit(2000000394.670:498): avc:  denied  { ioctl } for  pid=10779 comm="syz.5.1177" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  481.427303][   T30] audit: type=1400 audit(2000000394.800:499): avc:  denied  { read } for  pid=10783 comm="syz.1.1178" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  481.486713][   T30] audit: type=1400 audit(2000000394.800:500): avc:  denied  { open } for  pid=10783 comm="syz.1.1178" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  481.617178][   T30] audit: type=1400 audit(2000000394.810:501): avc:  denied  { ioctl } for  pid=10783 comm="syz.1.1178" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  481.666486][   T30] audit: type=1400 audit(2000000395.210:502): avc:  denied  { write } for  pid=5812 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  481.732614][   T30] audit: type=1400 audit(2000000395.340:503): avc:  denied  { perfmon } for  pid=10779 comm="syz.5.1177" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  481.893930][   T30] audit: type=1400 audit(2000000395.350:504): avc:  denied  { prog_run } for  pid=10779 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  481.938889][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'.
[  482.403347][T10797] delete_channel: no stack
[  482.412959][T10797] delete_channel: no stack
[  482.535687][ T5899] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  482.740014][ T5899] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  482.880119][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.026308][ T5899] usb 6-1: config 0 descriptor??
[  483.044037][ T5899] gspca_main: cpia1-2.14.0 probing 0813:0001
[  483.555070][ T5899] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  484.245229][ T5899] gspca_cpia1: usb_control_msg 02, error -71
[  484.282709][ T5899] gspca_cpia1: usb_control_msg 05, error -71
[  484.803799][ T5899] cpia1 6-1:0.0: unexpected systemstate: 00
[  484.820493][ T5899] usb 6-1: USB disconnect, device number 5
[  485.323961][  T971] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  485.378613][T10836] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1192'.
[  485.570144][  T971] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  485.727019][  T971] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  485.737828][  T971] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  485.749513][  T971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.063074][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  486.063105][   T30] audit: type=1400 audit(2000000400.070:561): avc:  denied  { create } for  pid=10844 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  486.603796][T10834] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  486.664759][  T971] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  486.810118][   T30] audit: type=1400 audit(2000000400.070:562): avc:  denied  { read } for  pid=10844 comm="syz.5.1195" path="socket:[29937]" dev="sockfs" ino=29937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  487.018054][   T30] audit: type=1400 audit(2000000400.140:563): avc:  denied  { write } for  pid=10844 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  487.421161][   T30] audit: type=1400 audit(2000000400.750:564): avc:  denied  { ioctl } for  pid=10853 comm="syz.2.1196" path="socket:[29939]" dev="sockfs" ino=29939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  487.471157][   T30] audit: type=1400 audit(2000000400.820:565): avc:  denied  { create } for  pid=10855 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  487.494805][   T30] audit: type=1400 audit(2000000400.830:566): avc:  denied  { connect } for  pid=10855 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  487.722258][   T30] audit: type=1400 audit(2000000401.470:567): avc:  denied  { write } for  pid=10829 comm="syz.6.1189" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  487.825238][ T5860] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  488.094161][   T30] audit: type=1400 audit(2000000402.070:568): avc:  denied  { name_bind } for  pid=10872 comm="syz.1.1200" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  488.263287][   T30] audit: type=1400 audit(2000000402.070:569): avc:  denied  { node_bind } for  pid=10872 comm="syz.1.1200" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  488.292041][ T5860] usb 1-1: Using ep0 maxpacket: 16
[  488.760242][ T5860] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  488.772101][   T30] audit: type=1400 audit(2000000402.350:570): avc:  denied  { bind } for  pid=10872 comm="syz.1.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  488.782084][ T5860] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  488.803807][ T5860] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  488.818374][ T5860] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  488.847928][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.862369][ T5860] usb 1-1: Product: syz
[  488.869595][ T5860] usb 1-1: Manufacturer: syz
[  488.876823][ T5860] usb 1-1: SerialNumber: syz
[  489.369614][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[  489.378309][ T5860] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  489.390782][ T5860] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82
[  489.498409][  T971] usb 7-1: USB disconnect, device number 3
[  489.551804][ T5860] usb 1-1: USB disconnect, device number 18
[  490.479047][T10906] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.488618][T10906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.499252][T10906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.508132][T10906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.607516][T10902] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1207'.
[  490.817223][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1209'.
[  490.832527][T10911] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  492.263973][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  492.263988][   T30] audit: type=1400 audit(2000000406.280:580): avc:  denied  { create } for  pid=10924 comm="syz.6.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  492.470862][   T30] audit: type=1400 audit(2000000406.280:581): avc:  denied  { read } for  pid=10926 comm="syz.0.1214" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  492.525864][   T30] audit: type=1400 audit(2000000406.280:582): avc:  denied  { open } for  pid=10926 comm="syz.0.1214" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  492.724353][ T2145] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  493.029585][   T30] audit: type=1400 audit(2000000406.290:583): avc:  denied  { ioctl } for  pid=10926 comm="syz.0.1214" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  493.054990][    C0] vkms_vblank_simulate: vblank timer overrun
[  493.075160][   T30] audit: type=1400 audit(2000000406.290:584): avc:  denied  { set_context_mgr } for  pid=10926 comm="syz.0.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  493.098857][   T30] audit: type=1400 audit(2000000406.290:585): avc:  denied  { map } for  pid=10926 comm="syz.0.1214" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  493.259842][   T30] audit: type=1400 audit(2000000406.300:586): avc:  denied  { call } for  pid=10926 comm="syz.0.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  493.284945][   T30] audit: type=1400 audit(2000000406.310:587): avc:  denied  { ioctl } for  pid=10924 comm="syz.6.1212" path="socket:[30060]" dev="sockfs" ino=30060 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  493.309913][    C0] vkms_vblank_simulate: vblank timer overrun
[  493.326928][ T2145] usb 7-1: Using ep0 maxpacket: 32
[  493.335893][ T2145] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.335938][T10937] openvswitch: netlink: Flow key attr not present in new flow.
[  493.362025][ T2145] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.699799][ T2145] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  493.710051][ T2145] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.738951][ T2145] usb 7-1: config 0 descriptor??
[  495.104411][ T2145] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  495.176698][ T2145] usb 7-1: USB disconnect, device number 4
[  495.187107][   T30] audit: type=1400 audit(2000000409.200:588): avc:  denied  { ioctl } for  pid=10954 comm="syz.5.1221" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30102 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  495.825794][T10955] fido_id[10955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  495.874892][   T30] audit: type=1400 audit(2000000409.280:589): avc:  denied  { connect } for  pid=10954 comm="syz.5.1221" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  497.483067][T10971] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1224'.
[  498.210431][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1225'.
[  499.190056][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  499.190073][   T30] audit: type=1400 audit(2000000413.200:592): avc:  denied  { mount } for  pid=10987 comm="syz.1.1228" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  500.142373][   T30] audit: type=1400 audit(2000000413.920:593): avc:  denied  { create } for  pid=10987 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  500.433235][   T30] audit: type=1400 audit(2000000414.440:594): avc:  denied  { write } for  pid=10987 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  500.572366][   T30] audit: type=1800 audit(2000000414.570:595): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1228" name="/" dev="fuse" ino=0 res=0 errno=0
[  501.134195][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.140569][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  501.274104][   T30] audit: type=1400 audit(2000000415.290:596): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  501.401542][T11014] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1234'.
[  501.637529][   T30] audit: type=1400 audit(2000000415.390:597): avc:  denied  { create } for  pid=11005 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  501.699054][   T30] audit: type=1400 audit(2000000415.710:598): avc:  denied  { bind } for  pid=11015 comm="syz.0.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  502.075535][   T30] audit: type=1400 audit(2000000415.770:599): avc:  denied  { write } for  pid=11015 comm="syz.0.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  502.185852][   T30] audit: type=1400 audit(2000000415.790:600): avc:  denied  { nlmsg_write } for  pid=11015 comm="syz.0.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  502.316346][T11027] openvswitch: netlink: Flow key attr not present in new flow.
[  502.737561][   T30] audit: type=1400 audit(2000000415.790:601): avc:  denied  { module_request } for  pid=11015 comm="syz.0.1237" kmod="crypto-seqiv(rfc4106(gcm(aes)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  504.207908][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  504.343267][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  504.343289][   T30] audit: type=1400 audit(2000000418.340:607): avc:  denied  { read } for  pid=11052 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  505.008843][   T30] audit: type=1400 audit(2000000419.020:608): avc:  denied  { append } for  pid=11063 comm="syz.5.1247" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  505.117744][   T30] audit: type=1400 audit(2000000419.070:609): avc:  denied  { read } for  pid=11061 comm="syz.2.1246" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  505.197477][   T30] audit: type=1400 audit(2000000419.070:610): avc:  denied  { open } for  pid=11061 comm="syz.2.1246" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  505.381881][   T30] audit: type=1400 audit(2000000419.070:611): avc:  denied  { ioctl } for  pid=11061 comm="syz.2.1246" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  506.653667][   T30] audit: type=1400 audit(2000000420.240:612): avc:  denied  { bind } for  pid=11077 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  506.838133][T11087] No such timeout policy "syz1"
[  507.043527][   T30] audit: type=1400 audit(2000000420.870:613): avc:  denied  { create } for  pid=11085 comm="syz.5.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  507.094638][   T30] audit: type=1400 audit(2000000420.870:614): avc:  denied  { connect } for  pid=11085 comm="syz.5.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  507.133809][   T30] audit: type=1400 audit(2000000420.870:615): avc:  denied  { ioctl } for  pid=11085 comm="syz.5.1252" path="socket:[29357]" dev="sockfs" ino=29357 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  507.287551][T11092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1254'.
[  508.097498][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  508.231817][T11107] =======================================================
[  508.231817][T11107] WARNING: The mand mount option has been deprecated and
[  508.231817][T11107]          and is ignored by this kernel. Remove the mand
[  508.231817][T11107]          option from the mount to silence this warning.
[  508.231817][T11107] =======================================================
[  508.266702][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.334016][   T30] audit: type=1400 audit(2000000422.300:616): avc:  denied  { mount } for  pid=11106 comm="syz.2.1261" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  509.447413][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  509.447428][   T30] audit: type=1400 audit(2000000423.460:621): avc:  denied  { create } for  pid=11127 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  509.955542][   T30] audit: type=1400 audit(2000000423.560:622): avc:  denied  { create } for  pid=11120 comm="syz.2.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  509.979404][   T30] audit: type=1400 audit(2000000423.570:623): avc:  denied  { accept } for  pid=11120 comm="syz.2.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  510.208100][   T30] audit: type=1400 audit(2000000424.220:624): avc:  denied  { listen } for  pid=11133 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  510.428895][   T30] audit: type=1400 audit(2000000424.310:625): avc:  denied  { read write } for  pid=11133 comm="syz.2.1270" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  510.970401][   T30] audit: type=1400 audit(2000000424.310:626): avc:  denied  { open } for  pid=11133 comm="syz.2.1270" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  510.997204][   T30] audit: type=1400 audit(2000000424.530:627): avc:  denied  { ioctl } for  pid=11136 comm="syz.0.1271" path="socket:[29431]" dev="sockfs" ino=29431 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  511.347562][   T30] audit: type=1400 audit(2000000425.360:628): avc:  denied  { read write } for  pid=11122 comm="syz.5.1266" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  511.403265][   T30] audit: type=1400 audit(2000000425.360:629): avc:  denied  { open } for  pid=11122 comm="syz.5.1266" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  511.659586][   T30] audit: type=1400 audit(2000000425.380:630): avc:  denied  { map } for  pid=11122 comm="syz.5.1266" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  511.860845][T11162] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.1278'.
[  511.885086][T11162] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.1278'.
[  513.495775][   T53] Bluetooth: hci6: Dropping invalid advertising data
[  513.502857][   T53] Bluetooth: hci6: Malformed LE Event: 0x02
[  513.603738][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1285'.
[  515.397026][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  515.397049][   T30] audit: type=1400 audit(2000000429.410:640): avc:  denied  { sqpoll } for  pid=11200 comm="syz.0.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  517.173370][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1293'.
[  517.250549][   T30] audit: type=1400 audit(2000000430.670:641): avc:  denied  { bind } for  pid=11195 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  517.651818][   T30] audit: type=1400 audit(2000000431.660:642): avc:  denied  { create } for  pid=11225 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  517.759383][   T30] audit: type=1400 audit(2000000431.710:643): avc:  denied  { ioctl } for  pid=11225 comm="syz.2.1297" path="socket:[29603]" dev="sockfs" ino=29603 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  517.784110][    C0] vkms_vblank_simulate: vblank timer overrun
[  518.398941][T11241] bridge0: port 3(gretap0) entered blocking state
[  518.413500][T11241] bridge0: port 3(gretap0) entered disabled state
[  518.443592][T11241] gretap0: entered allmulticast mode
[  518.503915][T11241] gretap0: entered promiscuous mode
[  518.564596][T11241] bridge0: port 3(gretap0) entered blocking state
[  518.572259][T11241] bridge0: port 3(gretap0) entered forwarding state
[  518.781173][ T5126] Bluetooth: hci5: command 0x0406 tx timeout
[  518.794415][   T30] audit: type=1400 audit(2000000432.280:644): avc:  denied  { connect } for  pid=11235 comm="syz.5.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  518.816917][   T30] audit: type=1400 audit(2000000432.280:645): avc:  denied  { write } for  pid=11235 comm="syz.5.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  519.298852][   T30] audit: type=1400 audit(2000000433.310:646): avc:  denied  { create } for  pid=11245 comm="syz.1.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  520.292605][   T30] audit: type=1400 audit(2000000434.300:647): avc:  denied  { ioctl } for  pid=11245 comm="syz.1.1304" path="socket:[30518]" dev="sockfs" ino=30518 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  520.319649][T11253] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  520.524889][T11253] ip6gretap1: entered promiscuous mode
[  522.621442][   T30] audit: type=1400 audit(2000000436.630:648): avc:  denied  { mount } for  pid=11268 comm="syz.1.1311" name="/" dev="rpc_pipefs" ino=29684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  522.867873][   T30] audit: type=1400 audit(2000000436.880:649): avc:  denied  { mount } for  pid=11286 comm="syz.6.1318" name="/" dev="autofs" ino=30564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  522.989243][T11287] 9pnet_fd: Insufficient options for proto=fd
[  523.473226][   T30] audit: type=1400 audit(2000000437.000:650): avc:  denied  { mounton } for  pid=11286 comm="syz.6.1318" path="/45/file1" dev="autofs" ino=30564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  523.870539][T11299] binder: 11291:11299 ioctl 4018620d 0 returned -22
[  523.884158][T11299] binder: 11291:11299 ioctl c0306201 0 returned -14
[  524.265202][   T30] audit: type=1400 audit(2000000438.270:651): avc:  denied  { unmount } for  pid=10138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  524.301927][T11281] delete_channel: no stack
[  524.388288][T11281] delete_channel: no stack
[  524.610804][T11311] bridge0: port 3(gretap0) entered disabled state
[  524.652668][T11311] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.661358][T11311] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.066905][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  525.087967][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  525.183656][T11311] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.192603][T11311] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.203917][T11311] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.212812][T11311] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.844066][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1329'.
[  528.813418][T11342] 9pnet_fd: Insufficient options for proto=fd
[  529.111470][T11352] delete_channel: no stack
[  529.124233][T11352] delete_channel: no stack
[  529.572485][   T30] audit: type=1400 audit(2000000443.580:652): avc:  denied  { write } for  pid=11362 comm="syz.6.1337" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  531.205215][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1340'.
[  531.627779][   T30] audit: type=1400 audit(2000000445.570:653): avc:  denied  { connect } for  pid=11380 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  531.833735][   T53] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  532.522514][T11394] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1343'.
[  533.396825][   T30] audit: type=1400 audit(2000000445.580:654): avc:  denied  { read } for  pid=11380 comm="syz.1.1342" path="socket:[30941]" dev="sockfs" ino=30941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  533.421346][   T30] audit: type=1400 audit(2000000445.840:655): avc:  denied  { write } for  pid=11381 comm="syz.2.1341" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  533.446457][   T30] audit: type=1400 audit(2000000445.840:656): avc:  denied  { open } for  pid=11381 comm="syz.2.1341" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  533.471385][   T30] audit: type=1400 audit(2000000445.840:657): avc:  denied  { setattr } for  pid=11381 comm="syz.2.1341" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  534.725967][T11409] 9pnet_fd: Insufficient options for proto=fd
[  535.020396][   T30] audit: type=1400 audit(2000000448.970:658): avc:  denied  { setopt } for  pid=11408 comm="syz.5.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  535.313709][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  535.534689][ T5899] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  535.605368][ T5899] usb 6-1: config 0 has no interface number 0
[  535.655242][ T5899] usb 6-1: config 0 interface 122 has no altsetting 0
[  535.676593][ T5899] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  535.743522][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.743997][T11416] delete_channel: no stack
[  535.763564][ T5899] usb 6-1: Product: syz
[  535.766112][T11416] delete_channel: no stack
[  535.776031][ T5899] usb 6-1: Manufacturer: syz
[  535.798651][ T5899] usb 6-1: SerialNumber: syz
[  535.920996][ T5899] usb 6-1: config 0 descriptor??
[  535.944695][   T30] audit: type=1400 audit(2000000449.890:659): avc:  denied  { ioctl } for  pid=11419 comm="syz.1.1351" path="socket:[30996]" dev="sockfs" ino=30996 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  536.977397][   T30] audit: type=1400 audit(2000000450.990:660): avc:  denied  { mount } for  pid=11434 comm="syz.1.1354" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  537.472741][   T30] audit: type=1400 audit(2000000451.480:661): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  538.247797][ T9829] usb 6-1: USB disconnect, device number 6
[  538.307202][T11451] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1356'.
[  539.706041][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1357'.
[  540.363488][ T9829] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  541.528639][T11471] delete_channel: no stack
[  541.560795][T11471] delete_channel: no stack
[  541.853600][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  542.248171][   T30] audit: type=1400 audit(2000000456.220:662): avc:  denied  { read } for  pid=11478 comm="syz.2.1364" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  542.553793][   T10] usb 7-1: Using ep0 maxpacket: 16
[  542.560574][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.615291][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.641751][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  542.656646][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  542.668264][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.678096][   T10] usb 7-1: config 0 descriptor??
[  542.752213][   T30] audit: type=1400 audit(2000000456.760:663): avc:  denied  { listen } for  pid=11488 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  542.783614][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  542.897447][   T30] audit: type=1400 audit(2000000456.910:664): avc:  denied  { setopt } for  pid=11481 comm="syz.6.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  542.943703][    T9] usb 2-1: Using ep0 maxpacket: 32
[  542.956932][    T9] usb 2-1: config 70 has too many interfaces: 222, using maximum allowed: 32
[  542.979823][    T9] usb 2-1: config 70 has 0 interfaces, different from the descriptor's value: 222
[  542.991278][  T971] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  543.007458][    T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf
[  543.017794][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.028089][    T9] usb 2-1: Product: syz
[  543.032269][    T9] usb 2-1: Manufacturer: syz
[  543.037959][    T9] usb 2-1: SerialNumber: syz
[  543.134317][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0007/input/input17
[  543.174065][  T971] usb 3-1: Using ep0 maxpacket: 8
[  543.180552][  T971] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  543.194729][  T971] usb 3-1: config 0 has no interface number 0
[  543.209878][  T971] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  543.234337][   T30] audit: type=1400 audit(2000000457.240:665): avc:  denied  { read } for  pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=3093 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  543.258670][   T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  543.282685][  T971] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  543.301257][  T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.324035][   T30] audit: type=1400 audit(2000000457.240:666): avc:  denied  { open } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3093 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  543.357683][   T30] audit: type=1400 audit(2000000457.240:667): avc:  denied  { ioctl } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3093 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  543.388724][  T971] usb 3-1: config 0 descriptor??
[  543.405853][   T10] usb 7-1: USB disconnect, device number 5
[  543.420113][  T971] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  543.440065][    T9] usb 2-1: USB disconnect, device number 14
[  543.462659][   T30] audit: type=1400 audit(2000000457.310:668): avc:  denied  { read } for  pid=11486 comm="syz.1.1366" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  543.492862][   T30] audit: type=1400 audit(2000000457.310:669): avc:  denied  { open } for  pid=11486 comm="syz.1.1366" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  543.525364][   T30] audit: type=1400 audit(2000000457.370:670): avc:  denied  { ioctl } for  pid=11481 comm="syz.6.1365" path="/dev/input/event4" dev="devtmpfs" ino=3093 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  543.749782][T11489] kAFS: unparsable volume name
[  543.995348][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1368'.
[  544.115217][T11490] fido_id[11490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  544.186659][ T5860] usb 3-1: USB disconnect, device number 11
[  545.561901][   T30] audit: type=1400 audit(2000000458.820:671): avc:  denied  { write } for  pid=11501 comm="syz.0.1371" name="udp6" dev="proc" ino=4026533182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  545.584554][    C1] vkms_vblank_simulate: vblank timer overrun
[  548.319937][T11520] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1375'.
[  548.605028][   T30] audit: type=1400 audit(2000000462.570:672): avc:  denied  { bind } for  pid=11526 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  548.759358][T11535] random: crng reseeded on system resumption
[  548.768744][   T30] audit: type=1400 audit(2000000462.770:673): avc:  denied  { append } for  pid=11532 comm="syz.0.1379" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  548.978876][   T30] audit: type=1400 audit(2000000462.770:674): avc:  denied  { open } for  pid=11532 comm="syz.0.1379" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  549.426054][T11537] delete_channel: no stack
[  549.453916][T11537] delete_channel: no stack
[  549.770005][   T30] audit: type=1400 audit(2000000463.760:675): avc:  denied  { map } for  pid=11544 comm="syz.1.1383" path="socket:[31189]" dev="sockfs" ino=31189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  549.793361][    C0] vkms_vblank_simulate: vblank timer overrun
[  550.913937][   T30] audit: type=1400 audit(2000000463.770:676): avc:  denied  { read } for  pid=11544 comm="syz.1.1383" path="socket:[31189]" dev="sockfs" ino=31189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  551.657431][   T30] audit: type=1400 audit(2000000463.820:677): avc:  denied  { create } for  pid=11544 comm="syz.1.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  551.759876][   T30] audit: type=1400 audit(2000000464.170:678): avc:  denied  { shutdown } for  pid=11541 comm="syz.5.1382" laddr=fe80::e lport=53516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  552.894824][   T31] INFO: task syz.3.976:9905 blocked for more than 143 seconds.
[  552.936714][   T31]       Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0
[  553.036016][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  553.729395][   T31] task:syz.3.976       state:D stack:27288 pid:9905  tgid:9903  ppid:5809   task_flags:0x400140 flags:0x00004006
[  553.752933][   T31] Call Trace:
[  554.045511][   T31]  <TASK>
[  554.054004][   T31]  __schedule+0x116f/0x5de0
[  554.060593][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  554.069803][   T31]  ? __pfx___schedule+0x10/0x10
[  554.075363][   T31]  ? find_held_lock+0x2b/0x80
[  554.080151][   T31]  ? schedule+0x2d7/0x3a0
[  554.085121][   T31]  schedule+0xe7/0x3a0
[  554.089300][   T31]  super_lock+0x2c0/0x3f0
[  554.094693][   T31]  ? __pfx_super_lock+0x10/0x10
[  554.099668][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  554.105519][   T31]  ? iterate_supers+0xaf/0x240
[  554.110420][   T31]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  554.116065][   T31]  iterate_supers+0xb9/0x240
[  554.120789][   T31]  ksys_sync+0x89/0x150
[  554.125896][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  554.131046][   T31]  ? rcu_is_watching+0x12/0xc0
[  554.136045][   T31]  ? rcu_is_watching+0x12/0xc0
[  554.140887][   T31]  ? do_syscall_64+0x91/0x260
[  554.145967][   T31]  __do_sys_sync+0xe/0x20
[  554.151112][   T31]  do_syscall_64+0xcd/0x260
[  554.156442][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.162446][   T31] RIP: 0033:0x7fcbf558e969
[  554.167278][   T31] RSP: 002b:00007fcbf6434038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  554.176015][   T31] RAX: ffffffffffffffda RBX: 00007fcbf57b5fa0 RCX: 00007fcbf558e969
[  554.184919][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  554.193157][   T31] RBP: 00007fcbf57b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  554.201282][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.209654][   T31] R13: 0000000000000000 R14: 00007fcbf57b5fa0 R15: 00007ffd3e6b3b68
[  554.218455][   T31]  </TASK>
[  554.221626][   T31] 
[  554.221626][   T31] Showing all locks held in the system:
[  554.230273][   T31] 1 lock held by khungtaskd/31:
[  554.235221][   T31]  #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  554.251674][   T31] 2 locks held by getty/5579:
[  554.256474][   T31]  #0: ffff888032af90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  554.266803][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  554.307804][   T31] 1 lock held by syz.4.758/9042:
[  554.312998][   T31]  #0: ffff8880325780e0 (&type->s_umount_key#70/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0
[  554.324810][   T31] 2 locks held by kworker/u8:14/9649:
[  554.330288][   T31]  #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  554.340599][   T31]  #1: ffffc90003a87d18 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[  554.352976][   T31] 2 locks held by syz.0.1389/11569:
[  554.358970][   T31]  #0: ffff88805d894a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  554.370019][   T31]  #1: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  554.380353][   T31] 
[  554.421749][   T31] =============================================
[  554.421749][   T31] 
[  554.453404][   T31] NMI backtrace for cpu 0
[  554.453424][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) 
[  554.453445][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  554.453455][   T31] Call Trace:
[  554.453460][   T31]  <TASK>
[  554.453467][   T31]  dump_stack_lvl+0x116/0x1f0
[  554.453496][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  554.453513][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  554.453538][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  554.453558][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  554.453580][   T31]  watchdog+0xf70/0x12c0
[  554.453604][   T31]  ? __pfx_watchdog+0x10/0x10
[  554.453619][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  554.453644][   T31]  ? __kthread_parkme+0x19e/0x250
[  554.453670][   T31]  ? __pfx_watchdog+0x10/0x10
[  554.453686][   T31]  kthread+0x3c2/0x780
[  554.453703][   T31]  ? __pfx_kthread+0x10/0x10
[  554.453718][   T31]  ? __pfx_kthread+0x10/0x10
[  554.453733][   T31]  ? __pfx_kthread+0x10/0x10
[  554.453749][   T31]  ? __pfx_kthread+0x10/0x10
[  554.453764][   T31]  ? rcu_is_watching+0x12/0xc0
[  554.453785][   T31]  ? __pfx_kthread+0x10/0x10
[  554.453802][   T31]  ret_from_fork+0x45/0x80
[  554.453819][   T31]  ? __pfx_kthread+0x10/0x10
[  554.453836][   T31]  ret_from_fork_asm+0x1a/0x30
[  554.453872][   T31]  </TASK>
[  554.587370][   T31] Sending NMI from CPU 0 to CPUs 1:
[  554.592602][    C1] NMI backtrace for cpu 1
[  554.592616][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) 
[  554.592633][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  554.592641][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  554.592663][    C1] Code: f5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c0 1c 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  554.592676][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6
[  554.592687][    C1] RAX: 0000000001c5056b RBX: 0000000000000001 RCX: ffffffff8b6d3419
[  554.592696][    C1] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2e0
[  554.592704][    C1] RBP: ffffed1003b5b488 R08: 0000000000000001 R09: ffffed10170a65bd
[  554.592712][    C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001
[  554.592721][    C1] R13: ffff88801dada440 R14: ffffffff90852e10 R15: 0000000000000000
[  554.592729][    C1] FS:  0000000000000000(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000
[  554.592743][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  554.592752][    C1] CR2: 00007f563217d2d8 CR3: 000000000e180000 CR4: 00000000003526f0
[  554.592761][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  554.592769][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  554.592777][    C1] Call Trace:
[  554.592782][    C1]  <TASK>
[  554.592786][    C1]  default_idle+0x13/0x20
[  554.592798][    C1]  default_idle_call+0x6d/0xb0
[  554.592810][    C1]  do_idle+0x391/0x510
[  554.592829][    C1]  ? __pfx_do_idle+0x10/0x10
[  554.592845][    C1]  ? trace_sched_exit_tp+0x31/0x130
[  554.592866][    C1]  cpu_startup_entry+0x4f/0x60
[  554.592881][    C1]  start_secondary+0x21d/0x2b0
[  554.592895][    C1]  ? __pfx_start_secondary+0x10/0x10
[  554.592909][    C1]  common_startup_64+0x13e/0x148
[  554.592930][    C1]  </TASK>
[  554.654980][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  554.654998][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) 
[  554.655018][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  554.655028][   T31] Call Trace:
[  554.655034][   T31]  <TASK>
[  554.655041][   T31]  dump_stack_lvl+0x3d/0x1f0
[  554.655067][   T31]  panic+0x71c/0x800
[  554.655092][   T31]  ? __pfx_panic+0x10/0x10
[  554.655114][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  554.655134][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  554.655150][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  554.655172][   T31]  ? watchdog+0xdda/0x12c0
[  554.655187][   T31]  ? watchdog+0xdcd/0x12c0
[  554.655205][   T31]  watchdog+0xdeb/0x12c0
[  554.655225][   T31]  ? __pfx_watchdog+0x10/0x10
[  554.655239][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  554.655261][   T31]  ? __kthread_parkme+0x19e/0x250
[  554.655284][   T31]  ? __pfx_watchdog+0x10/0x10
[  554.655299][   T31]  kthread+0x3c2/0x780
[  554.655315][   T31]  ? __pfx_kthread+0x10/0x10
[  554.655329][   T31]  ? __pfx_kthread+0x10/0x10
[  554.655343][   T31]  ? __pfx_kthread+0x10/0x10
[  554.655357][   T31]  ? __pfx_kthread+0x10/0x10
[  554.655370][   T31]  ? rcu_is_watching+0x12/0xc0
[  554.655391][   T31]  ? __pfx_kthread+0x10/0x10
[  554.655406][   T31]  ret_from_fork+0x45/0x80
[  554.655422][   T31]  ? __pfx_kthread+0x10/0x10
[  554.655437][   T31]  ret_from_fork_asm+0x1a/0x30
[  554.655469][   T31]  </TASK>
[  554.925843][   T31] Kernel Offset: disabled
[  554.930152][   T31] Rebooting in 86400 seconds..