last executing test programs:

11.658509903s ago: executing program 3 (id=102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x48, 0x66, 0x48, 0x9}, {0x6, 0x24, 0x1, 0x49}, {0x28, 0x4, 0x5, 0xfffef038}, {0x7ff, 0xea, 0x5, 0x6}, {0x2, 0x62, 0x5, 0x100}]}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x40000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000600)={@private1, 0x68, r5})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
semget$private(0x0, 0x2, 0x238)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0xc00}, {0x0, 0x8000}], 0xa)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000080)={0x9, 0xbf7, &(0x7f0000000100), 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r9 = dup(r8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000000604000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
r12 = dup(r11)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r12, 0x0)
madvise(&(0x7f00003ef000/0x4000)=nil, 0x4000, 0xc)

8.162991555s ago: executing program 0 (id=108):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$eventfd(r0, &(0x7f0000000340), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0)

8.050530211s ago: executing program 3 (id=110):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$usbip_server(r0, &(0x7f0000000180)=@ret_submit={{0x3, 0x2ae8, 0x0, 0x0, 0xc771}, 0x7, 0x0, 0x9, 0x1f8, 0x6, 0x0, "", [{0x0, 0x1, 0x9, 0x6}, {0x9, 0x0, 0x7, 0x7}, {0x3, 0x80, 0x8, 0x1800000}, {0x4, 0xfffff13c, 0xcf79, 0x7f}, {0x8001, 0x4, 0x3ff, 0x2}, {0x8, 0x401, 0x6, 0x3}, {0xb694, 0x5, 0x8, 0x1}, {0x3, 0x9, 0x71, 0x1}, {0x7, 0x1, 0x5, 0xb7f}, {0xeee, 0x1ff, 0x7ff, 0xfffffff9}, {0x3, 0x3, 0xfffffff9, 0xff}, {0xd, 0x6, 0x7fff, 0x9c4}, {0x2, 0x9, 0xe, 0xc2e08aa}, {0x6, 0x0, 0x3, 0x7ff}, {0x7ff, 0x9, 0x8, 0x8}, {0x7ff, 0xc10, 0xbf}, {0x7986, 0x3, 0x9}, {0x2, 0x8, 0x40f924be, 0x80000000}, {0x60, 0x4, 0x9, 0x3}, {0x7, 0x100000, 0x9, 0xff}, {0xf58, 0x4, 0xd, 0x4}, {0x5, 0x5, 0xfffffff9, 0x3}, {0xa8c1, 0x8000, 0x5, 0x8}, {0x0, 0x8, 0x1, 0x70}, {0xff, 0x400, 0x6c, 0x9}, {0xb7c9, 0x7, 0xfffffff9, 0x7}, {0xad3, 0x0, 0x100, 0x4}, {0x7, 0xf3, 0x6, 0x91}, {0xc, 0xdd, 0x29, 0x7}, {0x8, 0x5, 0x2, 0x7f}, {0x6, 0x200, 0xf1be, 0xa}, {0x8, 0x80000001, 0x8001, 0x902c}, {0xffff0457, 0x1000, 0x8, 0x10001}, {0x0, 0x9, 0x9, 0x1}, {0x2, 0x8, 0x9, 0x7}, {0x81, 0x7, 0x5, 0x10001}, {0x7, 0x2, 0x5, 0x9}, {0x3, 0x80, 0x1000}, {0x9, 0x1, 0x9, 0x9}, {0x100, 0x5, 0x0, 0x8}, {0x1, 0x3ff, 0x7ff, 0x9}, {0x7fffffff, 0xfff, 0x1ff, 0x4}, {0x824c, 0x5b23, 0x2}, {0x7f, 0x2, 0x9, 0x3}, {0x9, 0x9b, 0x8, 0x7f}, {0x6f, 0x7, 0x87, 0x1}, {0x8f7, 0x2, 0xb, 0x5}, {0x2, 0x40, 0x5, 0xf}, {0x7de160fc, 0x7, 0x48, 0x4}, {0xd53, 0x743e, 0x4}, {0x6, 0x32, 0x5}, {0x7f, 0x1, 0x1, 0x2}, {0x7, 0x1, 0x8, 0x1a7}, {0xa38, 0xfe9, 0x5, 0x5}, {0x3, 0x0, 0x3, 0x4}, {0x4, 0xa2c2, 0x5bee, 0x7}, {0x3, 0x6, 0x4, 0x5}, {0x2, 0x2, 0x80000001, 0x1}, {0x4, 0x81, 0x3ff, 0x99b9}, {0x81, 0x7f, 0x8, 0x3}, {0x1, 0x7, 0xbeb, 0x6}, {0xb8, 0x8, 0x7}, {0x2, 0xe, 0x8, 0xb955}, {0x4, 0x2, 0x3, 0x7}, {0x0, 0x6, 0x7, 0x5}, {0x1, 0x8001, 0x20c8, 0x6}, {0x1, 0x1, 0x1000, 0x9}, {0x2, 0x8000, 0xf, 0x4}, {0x401, 0x0, 0x400, 0x1}, {0x2, 0x0, 0x3, 0x60}, {0x2, 0x6, 0x80, 0x3}, {0x8, 0x4, 0x47d, 0x7}, {0x5, 0x4, 0x5, 0xc}, {0x6, 0x3, 0x5}, {0xfffffff9, 0x2, 0x2, 0x3}, {0x0, 0x0, 0x8, 0x5}, {0xa, 0xff, 0x3ff}, {0x42bf, 0x7, 0x9, 0x7}, {0x7, 0x4, 0x41, 0x1}, {0x6a045002, 0x9, 0xa4d8, 0x6}, {0x64e8649e, 0x2, 0x1, 0x4}, {0xe3c, 0x6, 0x4, 0x3}, {0x5, 0xc, 0x9, 0x2}, {0x4ca3, 0x7, 0x7, 0x58}, {0x101, 0xfffff234, 0xfffffc00, 0x8000000}, {0xffffffff, 0x80000001, 0x5, 0x2}, {0x198c, 0x4}, {0x5, 0xb47, 0xffffffff}, {0x3, 0x8, 0x1, 0x4}, {0x1ff, 0x10, 0xa3, 0x10}, {0x7a000000, 0xbbe, 0x6, 0x380f5044}, {0x8, 0x1, 0x7, 0x7ef}, {0x7fffffff, 0x1, 0x1, 0x327a}, {0xfffffff9, 0x59, 0x1000, 0xffff}, {0xfffffbff, 0x9, 0xd46a}, {0x7, 0xa3d4, 0x7, 0x6}, {0x1ff, 0x6, 0x3b, 0x8}, {0x1, 0x5, 0x4, 0x5}, {0x7bc, 0x9, 0x100, 0xa}, {0x0, 0x1, 0x1}, {0x0, 0x8, 0x9, 0x2}, {0x7ff, 0x3, 0x8, 0x7fff}, {0x40, 0x8, 0x8, 0x1ff}, {0x2, 0x2, 0x9, 0x4}, {0x2, 0x2, 0x7ecb, 0xaf}, {0x8000, 0x40, 0x1, 0x3}, {0x100, 0x8, 0x81, 0x80000001}, {0x10, 0x1ff, 0x49cb, 0x9}, {0x2, 0x4, 0x3, 0x7ff}, {0x1, 0x695, 0xfd5a, 0x6}, {0x62, 0x8, 0x2}, {0xf1, 0x1, 0xada9, 0x8}, {0x52e8, 0xf, 0x401, 0x7}, {0x9, 0xffff, 0xffffe57a, 0xfffffc00}, {0x77, 0x981, 0xffff848c, 0x3d5b}, {0xffffff80, 0x4, 0x4, 0xf}, {0x7f, 0x7, 0xe82d, 0x39f3}, {0xf97, 0x40, 0xfff, 0x6}, {0x6, 0xfff, 0x0, 0x825}, {0x200, 0xe, 0xf, 0x7}, {0x4, 0x8, 0x11627499, 0x2}, {0xe3a3, 0x3, 0x2, 0x10000}, {0x8001, 0xfffffffb, 0xe, 0x7fff}, {0x2, 0x4, 0x60d, 0x14d}, {0x9, 0x0, 0xa6, 0x10}, {0x0, 0xf, 0x6, 0x5}, {0x4, 0x8, 0x7}, {0x8, 0xd58, 0x3, 0x7}, {0x7f, 0x5, 0x9, 0x7}, {0x8001, 0x195, 0x300, 0x80000001}, {0x9, 0x5, 0x2, 0x3}, {0x1, 0xe, 0x5, 0x1b7}, {0x4, 0x1, 0x6, 0x590}, {0x80, 0x3, 0xa6, 0x5}, {0x5, 0x8e, 0x1, 0x9}, {0x6, 0x4, 0x2}, {0x2d, 0x8, 0x1, 0x8}, {0x5, 0x4, 0x1000, 0x40}, {0x2, 0x1f8e, 0xfab, 0x9}, {0x1ff, 0x7fff, 0x200, 0x7}, {0x5, 0xfffff601, 0x40, 0x3}, {0x8000, 0x80000001, 0x4, 0x5ff}, {0x5a8, 0xffff, 0x4, 0x9}, {0xec9, 0xdb, 0x4, 0x6}, {0xa, 0x400, 0x2c}, {0xffffffff, 0x4, 0x8, 0x80000001}, {0x1, 0x80000001, 0x1, 0x4}, {0xff, 0xffff0000, 0x1}, {0x0, 0x4e4, 0x7, 0x3}, {0x0, 0xc0000000, 0x5, 0x400}, {0xffff0001, 0x7, 0x6, 0x9}, {0xffffffff, 0xffffffff, 0xb, 0x7ea3}, {0x49be1165, 0x7ff, 0x7ff, 0x8}, {0xf4, 0x7, 0x9, 0x7}, {0x7fff, 0x80000001, 0x7fff}, {0x9, 0x1, 0x80000000, 0x2}, {0x400, 0x7fffffff, 0x7, 0xb}, {0x296, 0x6, 0x3db, 0xb}, {0x6, 0xe, 0x8, 0xa}, {0xffffffff, 0x7, 0xfffffffd, 0xa8d1}, {0x66fe, 0x7, 0xfffffffe, 0xc}, {0x1, 0x0, 0x5, 0x2}, {0x5, 0x1ff, 0xfffffff9, 0x359}, {0x4, 0x5, 0x95, 0x4}, {0x15b69703, 0x7, 0x9000, 0xd2}, {0xfffffffe, 0x0, 0x9, 0xfffffffb}, {0x0, 0x6, 0x0, 0x1}, {0xb, 0x7, 0x4b, 0x7}, {0x8, 0x1, 0x6f, 0x4}, {0x9, 0x7fff8000, 0xcbe, 0x5}, {0x3, 0x2, 0x6, 0x6}, {0x7, 0x0, 0xeb4}, {0x5, 0x1, 0x4, 0x800}, {0x2, 0x2, 0x906, 0x1}, {0x3ae, 0x80000001, 0x4, 0x43}, {0x7, 0x24b, 0xfffffffb, 0x773}, {0x9, 0x40, 0x1, 0x80000001}, {0x1, 0x6, 0x7fffffff, 0x6}, {0x7, 0x1, 0x9, 0x80}, {0x8, 0xfff, 0x5, 0x2}, {0x1, 0x80000000, 0x4, 0x81}, {0x3, 0x4, 0x4, 0xc}, {0x400, 0x3, 0x5}, {0x4, 0xffff, 0x4}, {0xd, 0xffffff01, 0x6, 0x3eb}, {0x7f, 0x8, 0x7fff, 0x40}, {0x0, 0x8001, 0x7}, {0x9, 0xffffffff, 0x4, 0x3}, {0xe, 0x2, 0x2, 0xffffffff}, {0xd, 0x2, 0x3, 0x7}, {0xff, 0x40a1, 0x1, 0x4}, {0x200, 0xbd, 0x280, 0xc}, {0x9, 0x5, 0xfef, 0x4}, {0x9, 0x4723, 0x9, 0x7}, {0x28, 0xffff, 0x0, 0x4b9e}, {0x1, 0xdfa, 0x1000, 0xf38e}, {0x48, 0x6, 0x75, 0x3ff}, {0x9, 0x553, 0x200, 0x2}, {0x0, 0x7ff, 0x8, 0x4}, {0xff, 0xf8d, 0x2, 0x80000000}, {0xfffffffa, 0x5, 0x8, 0xfffffffd}, {0x6, 0x6, 0x2, 0x6}, {0xa, 0x8, 0x9, 0x5b}, {0xff, 0xfffffff8, 0xee, 0x2}, {0xfffff89b, 0x3, 0x6, 0x9}, {0x542, 0x6, 0x3, 0xb}, {0x5, 0xd, 0x1}, {0x9, 0x4, 0x6, 0x10001}, {0xc, 0x1, 0x9, 0x3}, {0xa8a, 0x3, 0xb, 0x8}, {0x1, 0x4, 0x8}, {0x4, 0x9, 0x5, 0x2}, {0x3, 0xffffffff, 0xb, 0x3}, {0xd9, 0x7, 0x5, 0x1}, {0x3, 0x8, 0x6, 0x3672}, {0x4, 0x0, 0xb8ce, 0x1}, {0x0, 0x9, 0x0, 0xff}, {0xc9, 0x7b, 0xffff6d5a, 0xf}, {0x7, 0x1, 0x7, 0x3}, {0xffffffff, 0xf, 0x80000000, 0x657}, {0x9, 0xffffffee, 0x3, 0xffff4c03}, {0x8, 0x7, 0xba59, 0x5}, {0x8, 0x1, 0x1, 0x9}, {0x9, 0x8, 0x8001, 0x3}, {0xffffffff, 0x4, 0x9, 0x81}, {0xfffffff9, 0x7, 0x6, 0xdf30}, {0x0, 0x6, 0x400, 0x2}, {0x6c, 0x1, 0x6c, 0x8000}, {0x2, 0x1000, 0x6, 0x1}, {0x2, 0x9, 0x2, 0x4}, {0x5, 0x10, 0xa, 0x6}, {0x9, 0x6, 0x5, 0x6}, {0x1b, 0x8, 0x7, 0x6}, {0x5, 0xfffffffc, 0x6}, {0xffff, 0x100, 0x4, 0x20e6}, {0x0, 0x4, 0x83, 0x2}, {0x1, 0x10001, 0x6, 0xcf9d}, {0x2, 0x40, 0x7, 0x7fffffff}, {0x1, 0x3, 0x0, 0x3}, {0xa541d74, 0x1, 0x0, 0x1}, {0xcc2b, 0x7fffffff, 0x856, 0x1}, {0x632, 0x7, 0x4, 0x5}, {0x7, 0x5, 0x7, 0x5b}, {0x6, 0x2, 0x9, 0xffffffff}, {0x2, 0x551, 0xffff, 0xf7}, {0xcce, 0x9, 0x8, 0x53fa}, {0x9, 0x6, 0x6, 0x2}, {0x2, 0x1, 0xfffffffb}, {0x7f, 0x10, 0x8, 0x8}, {0x1, 0x6, 0x50, 0x9}, {0x9, 0x73, 0x4, 0x9}, {0xffffffff, 0x8, 0x2, 0xfa}, {0x1, 0x1, 0x40ec, 0x8}, {0x3, 0x7, 0x81, 0x9}, {0x8, 0x9, 0xffffffff, 0x565}, {0x9d6, 0x8, 0x7ff, 0x31d}, {0x4, 0x4, 0xa, 0x10001}, {0xfffffff9, 0x4, 0x6, 0x6}, {0x101, 0xdd7, 0xd175, 0x101}, {0x7c27, 0x7, 0x1, 0xfffffffa}, {0x401, 0x0, 0x2, 0xe971afb}, {0x3ea, 0x4, 0x71, 0x9}, {0x5, 0x80, 0x6, 0x9}, {0x8, 0x5, 0x3}, {0x1, 0x8a7, 0x40, 0x5}, {0x2, 0x1, 0x3, 0x8}, {0x100, 0x20, 0x0, 0x7fff}, {0x8a, 0x3, 0x6, 0x101}, {0x5, 0x8, 0x6, 0xff}, {0x1, 0xfff}, {0x0, 0x44}, {0x8, 0x0, 0xf, 0x618}, {0x2, 0x8000, 0x0, 0xfffffbff}, {0x0, 0xf1d, 0x8, 0x80000001}, {0x5, 0xff, 0xffffffff, 0x4}, {0x9, 0x0, 0x5, 0xff00}, {0x1, 0x7, 0x3, 0xc}, {0x9, 0x200, 0x1, 0x1}, {0x1, 0x1, 0x2, 0x6}, {0x1, 0x1, 0x80000000, 0x9}, {0x5, 0xfffffffe, 0x3b06, 0xffff}, {0x3682, 0x1, 0x10, 0x100}, {0x678afab1, 0x9, 0x6, 0x696}, {0x1, 0xfffff0b9, 0x7f}, {0x7, 0x0, 0x200, 0x4}, {0x3, 0x1ff, 0x3, 0xb7ee}, {0x5, 0x3, 0x3, 0x6}, {0x400, 0x3, 0x8}, {0x30177fc1, 0xd71, 0x2, 0x1000}, {0x9, 0x10000, 0x3, 0x7ff}, {0x4, 0x5, 0x9, 0x3d}, {0x0, 0x3, 0x5d19, 0x6}, {0xa, 0x0, 0x7ff, 0x9}, {0x10, 0x0, 0x401, 0x6}, {0x8f4, 0xad76, 0x5, 0x3}, {0x0, 0x10001, 0xfffffff7}, {0xaf, 0x3, 0xf, 0x6}, {0x0, 0x4, 0x5, 0x1}, {0x346, 0x8000, 0x7}, {0x9, 0x0, 0x8, 0x1}, {0xffff, 0x2, 0x1, 0x101}, {0x5d9, 0x400, 0x7fffffff, 0xa0d}, {0x80, 0x0, 0x2, 0x6}, {0x9, 0x7ff, 0x1, 0xffffff7f}, {0x4, 0x8000, 0x6, 0x7}, {0x81, 0x2, 0xffff, 0xa14}, {0x1b24, 0xaccd, 0x3ff, 0x63}, {0x606, 0xd291fea, 0x7f3d29c9, 0x92f}, {0xffffff81, 0x7, 0x5, 0x2}, {0x41c, 0x0, 0xd, 0x6}, {0x3, 0x4b7, 0x5, 0x7fff}, {0x3, 0x9, 0xf12e}, {0x10001, 0xffffffd1, 0x8, 0x80000000}, {0x4, 0x2, 0x800, 0x2}, {0x4, 0x4, 0x10001, 0x8}, {0x2, 0x401, 0xa529, 0x9}, {0x81, 0x2, 0x1, 0x4}, {0x1, 0x1, 0xfffff000, 0x6}, {0x1, 0x10000, 0x8, 0x10001}, {0x5, 0xe, 0x2, 0xffffffc0}, {0x1, 0x13, 0x4, 0x6}, {0x3, 0xe6e, 0x80000001, 0x7fff}, {0x5, 0xfffffffa, 0x8, 0x5}, {0xffffffff, 0x0, 0x4, 0xfffffff8}, {0x2470a59b, 0x80, 0x2, 0xb74}, {0xe, 0x0, 0x8, 0x4}, {0x4, 0x7, 0x9, 0x3}, {0xe7c, 0x0, 0x2, 0xd02}, {0x1, 0x24cdbc7e, 0x2, 0x4cf}, {0x80000001, 0x7fffffff, 0x0, 0x5}, {0x8, 0x4, 0x8, 0x3ff}, {0x7, 0x8, 0x9, 0xb}, {0x3, 0xddae, 0x7, 0xa}, {0x0, 0x7f, 0x0, 0x4}, {0x10, 0x9, 0x8, 0x8}, {0xdf9e, 0x2, 0x8, 0x8}, {0x3, 0x3, 0x8, 0x1}, {0x3ff, 0xab, 0x2, 0x6}, {0x0, 0x8, 0x6, 0xf58}, {0x400, 0x8, 0x9, 0xfffffffd}, {0x51e, 0x1ff, 0x81, 0x7}, {0x8, 0x8, 0x8, 0x2}, {0x3, 0x4a4c42cf, 0x5, 0x1}, {0x400, 0x4, 0x5, 0x1}, {0xe, 0x1, 0xfffffff9, 0x8}, {0x9, 0x101, 0x2b4, 0x8}, {0x65, 0x2, 0x5, 0x101}, {0x0, 0x9, 0xb5c4ef6, 0x1}, {0x8, 0x1, 0x3, 0x6}, {0x7, 0x7, 0x9, 0x8001}, {0x5, 0x3, 0x7, 0x80000001}, {0x3, 0x0, 0x3, 0x7}, {0x7f, 0x80000001, 0x1000}, {0x6, 0x0, 0x3c6, 0x2}, {0x6, 0x1000, 0x6, 0x5}, {0x0, 0x2, 0x2, 0x8001}, {0x6, 0x1da, 0x35fa}, {0x8000, 0x1, 0x3, 0x5}, {0x0, 0x7, 0x8000, 0x4}, {0x0, 0x2}, {0xd50, 0x8, 0xffff, 0xfc5}, {0x7, 0x9, 0x7, 0x10000}, {0x0, 0x4, 0xcd27, 0xff}, {0x7, 0x1, 0x5, 0x9}, {0x3, 0xff, 0x6, 0x4}, {0x6, 0x4, 0xffffffff, 0x3}, {0x1d82, 0x81, 0x1, 0x40000000}, {0x6, 0x1, 0x401, 0xa}, {0x1, 0x0, 0x7, 0x9}, {0x5e6, 0x101, 0x101, 0x7}, {0x623, 0x1, 0x4, 0x101}, {0x0, 0x695, 0x1b00000, 0x7}, {0x600000, 0xeb7, 0x7, 0x9}, {0xfffff43a, 0xffff29e6, 0x8dc, 0x5}, {0xf7b, 0x200, 0x8001, 0x200}, {0x4, 0x4, 0x0, 0x8}, {0xf, 0x2, 0x4835, 0x2}, {0x3, 0x3ff, 0x0, 0x4}, {0x80000000, 0x7, 0x1, 0xa}, {0x2, 0x4, 0x8}, {0x2, 0x7, 0xe}, {0x763, 0x9, 0xa2dc, 0x4}, {0x5, 0x8e2a, 0xa, 0x9}, {0x0, 0x2, 0x53, 0x4}, {0x80000000, 0x8, 0x9, 0xfff}, {0x10, 0x8, 0x6, 0x8}, {0x7fffffff, 0xfffffffa, 0xff, 0xa85}, {0x7, 0xfff, 0x0, 0x6}, {0x7, 0x200, 0xff, 0x5}, {0x2, 0x8, 0x101, 0x2}, {0x63, 0x7, 0x5, 0xc}, {0x2, 0x9, 0x8, 0x5}, {0x7, 0x9, 0x871, 0x80}, {0x4, 0x3c82, 0x5, 0xfffffffb}, {0x58eb, 0x400, 0x2, 0x1}, {0x6, 0x7, 0x9, 0x9}, {0x6, 0x3, 0xa, 0x400}, {0x22, 0x3, 0xb4}, {0x1, 0x3, 0x5, 0x1}, {0x7, 0x1, 0x0, 0x9}, {0x3, 0x9, 0x0, 0x200}, {0x3, 0x36f, 0x7, 0x3}, {0x8, 0x1, 0xb, 0x5}, {0x2, 0xc6, 0x448}, {0x9d00, 0x1ff, 0x9, 0x5eb5efe}, {0x4, 0xfffffffa, 0x0, 0x1000}, {0x7, 0x7, 0x0, 0x1c34}, {0xe90, 0x6, 0xfffffffb, 0xb6}, {0x1a, 0x1775, 0x3, 0x9}, {0x4, 0x2, 0x5, 0xd61}, {0x59e, 0x8, 0x5, 0x1}, {0x5, 0x8, 0xfb}, {0x0, 0x6, 0x5, 0x510a}, {0x6, 0x2, 0x2d, 0xffffffff}, {0xe4, 0x1, 0x1, 0x80000001}, {0xfff, 0xfffffff8, 0x7ff, 0x1}, {0x7f, 0x2, 0x5, 0x6}, {0xff, 0xfffffffa, 0x9}, {0x4, 0x0, 0x10, 0x8}, {0x2, 0xa4d, 0x80000000, 0x2}, {0x8, 0x10001, 0x1, 0x77}, {0x3, 0x1000, 0x1, 0x1ff}, {0xd4f7, 0x5, 0x5, 0x4b43}, {0x6, 0xf, 0x9, 0x3}, {0x7a8, 0x91, 0x10000}, {0x7fff, 0x5, 0x1, 0x4b70}, {0xfff, 0xfffffff8, 0x100, 0x2}, {0x8001, 0x8, 0x7, 0x6}, {0x2, 0x4, 0x0, 0x6}, {0xdab, 0x8, 0x63d, 0x8}, {0x5, 0x3, 0x8, 0x8}, {0x8, 0x5, 0xd6, 0x10000}, {0x2, 0xead, 0x9, 0x6}, {0x6, 0x8, 0x3ff, 0xefa}, {0x3, 0xfff, 0x3, 0x7}, {0x4d, 0xd6d, 0x3, 0x71}, {0xfffffffa, 0x4, 0xffff, 0x6}, {0x9b87, 0x2, 0x1000, 0x2}, {0x3138576c, 0x10000, 0x3ff, 0x2}, {0x7, 0x0, 0x4, 0x2}, {0x42a, 0xffff8000, 0x5, 0xfd1b}, {0x7, 0x800, 0xc3ff, 0x100}, {0x6, 0x8, 0x1, 0x3}, {0xffffffff, 0x4, 0x8, 0x6}, {0xfffffff5, 0x93, 0xf, 0x3}, {0x4, 0x7f, 0xf}, {0x10, 0x80, 0x9, 0x1ff}, {0x1, 0xa, 0x3, 0xfffffa63}, {0xe, 0x2, 0x8, 0x5}, {0x4, 0x5, 0x4, 0xe1}, {0x2, 0x2, 0x0, 0x8}, {0x1, 0x1, 0x5}, {0xe, 0x7, 0x0, 0xffffffff}, {0x401, 0x21, 0xb8, 0x8}, {0x401, 0xf, 0x8, 0xe7}, {0x0, 0xffff0cd8, 0x7fff, 0x8}, {0xc3, 0x9, 0x100000, 0x5}, {0x1, 0xab, 0x4, 0x3}, {0xc0000000, 0x5, 0x9, 0x3}, {0x8, 0x8, 0x10, 0x2}, {0xfffffff9, 0x7, 0x5, 0xfffff08d}, {0xdc, 0xe, 0x0, 0xc}, {0xe, 0x2, 0x3, 0x6}, {0x8, 0x8, 0x8, 0x6}, {0x7, 0xfffffc01, 0x80, 0x81}, {0xff, 0x6, 0x5, 0x1}, {0x400, 0xe6af42f, 0xd4a8, 0x4933}, {0x8, 0x7fff, 0x400, 0x7f71960e}, {0x68c4, 0x8, 0x7f, 0x6}, {0x6, 0xf4e6, 0x4, 0x9}, {0x7fff, 0x0, 0xffff, 0x4}, {0x80, 0x2, 0xffffff52, 0x8}, {0xe, 0x10001, 0xfffffff9, 0x9}, {0xff, 0xfffffff8, 0x7b, 0x800}, {0x7, 0xccb6, 0x4, 0x6}, {0x3, 0x5, 0x5, 0x1}, {0x7, 0x5c9f, 0xfc}, {0x2, 0x1, 0x5, 0x7}, {0x1, 0x8, 0x376605cf, 0x7}, {0x7, 0x1, 0xffffffff, 0x4}, {0x8, 0x4fe, 0x1000, 0xfffffffc}, {0x400, 0x3, 0x3, 0xfffffffc}, {0x9, 0x101, 0x10000, 0xffff18f0}, {0x8, 0x69c, 0x6, 0x800}, {0x101, 0x3, 0x1, 0x8}, {0x962, 0xa, 0x0, 0x9}, {0x4, 0x8, 0x1, 0x8fc1}, {0x7, 0x2, 0x9, 0x8}, {0x9, 0x0, 0x3, 0x2}, {0x1000, 0x10000, 0x6de, 0x8000}, {0x3, 0x4, 0x3, 0x9}, {0x8, 0x4, 0x1, 0x1}, {0x6b3d, 0x5, 0x100, 0x1ff}, {0x10001, 0x9, 0x1, 0x6}, {0xa, 0x3, 0x395073f7, 0x6}, {0x401, 0x8, 0x2, 0xffff}, {0x298, 0x69, 0xced3, 0x5}, {0x0, 0x6, 0x1, 0x7fffffff}, {0x7, 0xfff, 0x1, 0x7}, {0x3, 0x5, 0x8, 0x5}, {0x8, 0x1, 0x7, 0x8}, {0x5, 0xc, 0x9, 0xd}, {0xf, 0x669, 0x8, 0xaf1}, {0x2b, 0x200, 0x8, 0xc411}]}, 0x1fb0)

7.957563988s ago: executing program 2 (id=111):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, 0x0, 0xa2082, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})

7.955231354s ago: executing program 3 (id=112):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000004400), 0x3ffff6c, 0x40, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', <r4=>0x0, 0x7, 0x20, 0x7, 0x8, {{0x34, 0x4, 0x1, 0x5, 0xd0, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x2c, 0x9f, 0x1, 0x0, [{@remote, 0x6}, {@empty, 0x5}, {@multicast2, 0x4}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @rr={0x7, 0x7, 0x41, [@remote]}, @generic={0x86, 0x10, "282205ae14d82ccf4dd27ea557cf"}, @ssrr={0x89, 0x2b, 0xd0, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @local, @empty, @local, @local]}, @timestamp_addr={0x44, 0x44, 0x1f, 0x1, 0x1, [{@private=0xa010101, 0x5}, {@private=0xa010101, 0x91}, {@remote, 0x2}, {@loopback, 0x100}, {@rand_addr=0x64010100, 0x1}, {@multicast2, 0xe40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0xc}]}, @rr={0x7, 0x7, 0x4f, [@rand_addr=0x64010100]}, @end]}}}}})
r5 = socket$inet6(0xa, 0x2, 0x3a)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}})
r7 = dup(r5)
bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50)
r9 = open(&(0x7f0000000740)='./file0\x00', 0x80, 0x28)
fcntl$notify(r9, 0x402, 0x40000034)
fcntl$setown(r9, 0x8, 0xffffffffffffffff)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x6}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xaaf8, 0x0, 0x0, 0x41000, 0x11, '\x00', r4, 0x0, r7, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x10, 0x3ae3, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r8, 0xffffffffffffffff, r9, r10, r11], &(0x7f0000000640)=[{0x3, 0x4, 0x10, 0xb}, {0x4, 0x2, 0xd, 0x9}, {0x5, 0x3, 0xb, 0xb}, {0x5, 0x3, 0x5}]}, 0x94)

7.262557633s ago: executing program 0 (id=113):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = eventfd2(0x8, 0x80800)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r4, 0xffff, 0x2, r4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

7.100395105s ago: executing program 0 (id=115):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161102, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x52)
getpriority(0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000130800034000000098"], 0xa4}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80000)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffdfe, 0x0, r0}, 0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x0, 0xb5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x320b, 0x10000, {{0x9, 0x4, 0x3, 0xb, 0x24, 0x66, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote, {[@rr={0x7, 0xf, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}})
syz_io_uring_setup(0x7511, &(0x7f00000000c0)={0x0, 0x88ce, 0x80, 0x0, 0x1a5, 0x0, r5}, &(0x7f0000000300), &(0x7f0000000200))
syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD)
io_uring_enter(r5, 0x47f4, 0x0, 0x0, 0x0, 0x0)

6.850370123s ago: executing program 2 (id=117):
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
close(0x3)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mount$9p_fd(0xe0ff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

6.334812839s ago: executing program 2 (id=118):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000004c0)={0x1, 0x0, 0x98, &(0x7f0000000400)={0x5, 0x7}})
syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x5, 0x9a, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0xa, 0x10, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d7f54f5b29"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@country_functional={0x6, 0x24, 0x7, 0xd, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xfff6, 0xaa, 0xff, 0xfffd, 0x8}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xf5, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xc2, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0x33}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x0, 0x31, 0x1, 0x10, 0x8}, 0x46, &(0x7f0000000200)={0x5, 0xf, 0x46, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4d, 0xf, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xb, 0x8, 0xfff8}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x37, 0xf00, 0x7, [0x30, 0xc0, 0x18, 0xff0000, 0x81c017]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0xc9, 0x8}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2001}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x32, &(0x7f00000003c0)=@string={0x32, 0x3, "b450793e61166a82f273a7c9abd194efa3945014cd7fd094a7e1a5dec7aab011a03b960fe161c969db561d9ca7338652"}}]})
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8080)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'veth1\x00', 0x2}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)

6.1101232s ago: executing program 1 (id=119):
r0 = inotify_init1(0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)=0x1)
write$dsp(r1, &(0x7f0000000000)="81", 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
close(0x3)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x10}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000300)="8eb3e18bc512c3cc9b2062e0892f", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14)
clock_gettime(0x0, &(0x7f00000060c0)={<r6=>0x0, <r7=>0x0})
recvmmsg(r2, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1, &(0x7f00000001c0)=""/184, 0xb8}, 0x7}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/124, 0x7c}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/214, 0xd6}], 0x7}, 0x80000001}, {{&(0x7f0000001900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001980)=""/103, 0x67}, {&(0x7f0000001a00)=""/221, 0xdd}, {&(0x7f0000001b00)=""/160, 0xa0}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x4, &(0x7f0000002c00)=""/114, 0x72}, 0x9}, {{&(0x7f0000002c80)=@nfc, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002d00)=""/208, 0xd0}, {&(0x7f0000002e00)=""/192, 0xc0}, {&(0x7f0000002ec0)=""/112, 0x70}, {&(0x7f0000002f40)=""/172, 0xac}, {&(0x7f0000003000)=""/60, 0x3c}, {&(0x7f0000003040)=""/101, 0x65}], 0x6}, 0x6}, {{&(0x7f0000003140)=@x25={0x9, @remote}, 0x80, &(0x7f0000003200)=[{&(0x7f00000031c0)}], 0x1, &(0x7f0000003240)=""/68, 0x44}, 0x2000}, {{&(0x7f00000032c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/170, 0xaa}, {&(0x7f0000004400)=""/148, 0x94}, {&(0x7f00000044c0)=""/3, 0x3}], 0x4, &(0x7f0000004540)=""/168, 0xa8}, 0xc5}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000004600)=""/150, 0x96}, {&(0x7f00000046c0)=""/4096, 0x1000}], 0x2, &(0x7f0000005700)=""/38, 0x26}, 0x7}, {{&(0x7f0000005740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000057c0)=""/189, 0xbd}, {&(0x7f0000005880)=""/233, 0xe9}], 0x2}, 0x64ff4a00}, {{&(0x7f00000059c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a40)=""/228, 0xe4}, {&(0x7f0000005b40)=""/145, 0x91}, {&(0x7f0000005c00)=""/223, 0xdf}, {&(0x7f0000005d00)=""/198, 0xc6}], 0x4, &(0x7f0000005e40)=""/26, 0x1a}, 0x6}], 0x9, 0x0, &(0x7f0000006100)={r6, r7+60000000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4)
shutdown(r2, 0x1)

5.824024628s ago: executing program 1 (id=121):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x28, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xcdd}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000851}, 0x4044800)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1e, 0x2, 0x0, 0x1, [@nested={0x18, 0x14, 0x0, 0x1, [@typed={0x14, 0x17, 0x0, 0x0, @ipv6=@local}]}, @generic="cb38"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x11}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

5.683895846s ago: executing program 4 (id=122):
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(0x0, 0x75, 0x40082)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0)
syz_io_uring_setup(0x7192, &(0x7f0000000080)={0x0, 0x80fc2e, 0x0, 0x1, 0x34a}, &(0x7f0000000180), 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x4, 0x0, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000600"/28], 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r9, 0x4}, 0x38)
setresuid(0x0, r7, 0x0)
setreuid(r7, r7)

5.044295636s ago: executing program 0 (id=123):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000004c0)={0x1, 0x0, 0x98, &(0x7f0000000400)={0x5, 0x7}})
syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x5, 0x9a, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0xa, 0x10, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d7f54f5b29"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@country_functional={0x6, 0x24, 0x7, 0xd, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xfff6, 0xaa, 0xff, 0xfffd, 0x8}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xf5, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xc2, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0x33}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x0, 0x31, 0x1, 0x10, 0x8}, 0x46, &(0x7f0000000200)={0x5, 0xf, 0x46, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4d, 0xf, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xb, 0x8, 0xfff8}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x37, 0xf00, 0x7, [0x30, 0xc0, 0x18, 0xff0000, 0x81c017]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0xc9, 0x8}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2001}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x32, &(0x7f00000003c0)=@string={0x32, 0x3, "b450793e61166a82f273a7c9abd194efa3945014cd7fd094a7e1a5dec7aab011a03b960fe161c969db561d9ca7338652"}}]})
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8080)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'veth1\x00', 0x2}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)

4.966997071s ago: executing program 1 (id=124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})

4.418707936s ago: executing program 4 (id=125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000340)={0x10, 0x7, {0x4, @usage=0x6, <r1=>0x0, 0x6, 0x40, 0x6, 0x7, 0xffffffffffffffff, 0x28, @usage=0xdce, 0x67f, 0x5, [0x3, 0x51, 0xc92b, 0x5, 0x5, 0x10]}, {0x80000000, @struct={0x7, 0x2}, 0x0, 0x5, 0x2, 0xc, 0x4, 0xe, 0x400, @struct={0x80, 0x5}, 0x1, 0x8000, [0x5, 0x10, 0x9, 0x8000, 0x4dc0]}, {0x1, @struct={0x4, 0x81}, 0x0, 0x8, 0x7fffffffffffffff, 0x8, 0x2, 0x87, 0x40, @struct={0x4, 0x8}, 0x0, 0x20000000, [0x1, 0x2, 0xba32, 0x800, 0x40, 0xffffffffffffff00]}, {0x2e9, 0x610, 0x4}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001280)={r1, "c0a699b3237f971545b0adb66934e4f8"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x14, 0x3a, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote}]}]}}}}}}}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82200010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x402c095) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) (async)
socket(0xa, 0x3, 0x3a) (async, rerun: 64)
r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfce)

4.418528349s ago: executing program 4 (id=126):
syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=<r0=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
r4 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4})

2.148859021s ago: executing program 2 (id=127):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = open(&(0x7f0000000040)='./file0\x00', 0xd0000, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0xd, 0x1f, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000002001811000000", @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000057960c0010000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0xfffffffffffffe31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xfffffff7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40010)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x40)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="016f0897e200000000001400000045d5001800650000e22f907864010100e00000018401d806a2c514e898a0b094bbd234195b8ca31a3e8b8ad6d5220732e5dee0aee39278d6d94db3ec1dabcc8ae777379a04a2906ec104c96fa66d58e704295ef99813fd99bd11e159809cfd0a033ff1ac201f4a77ccd38a6fcd3c06464985dc33584232cf1f64ca12cd0b37fb4e4c8d3a46c3a1282af37c7847d7ac0f7416720cf6444864998cb82e504afed6bdd65c07c6b2b459d01cb74f0a4f369f863a00e8cfdfdf30692701257d5d387de78fe772c3419e60ff62b753ff"], 0x26)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x2315, 0x9, 0x0, 0x7})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000c19a96afffff0800000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10)
lsm_set_self_attr(0x64, 0x0, 0x20, 0x0)

1.847383673s ago: executing program 3 (id=128):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000780)="7f7f58e975389994508463148676", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000010c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)

1.621485651s ago: executing program 3 (id=129):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$sysctl(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
socket$inet6(0xa, 0x6, 0x4)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x88c0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800350300000000000000069078640101012c1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000e53032aa37c0640bbabaf6f12d2ebd0034dc839a3824ae35fae369378f40140540fdfaf21637f61366f64db7bed4026af7327a87982df2277276b2742dd448fef3dd7c41ca8bc786ad21b790ce2c58a09c9c77ec665a56b72580dc2af5029c38b18631d2e9b737b08c326600c4fc613dbf5f2c3a620ad5ab1609dae7c20ec8672eb3900ab377e0ad91c5dba36665420d7a44ff896bd087479f35a549113f90a1317bd76c6a0ca39b99d9051f4a2638620d1b1a7f34f2c591a74b69e02c2f32bf701ada6227fc83640b420b1c077c"], 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000500)={0x9, {{0xa, 0x3, 0x0, @local}}, {{0xa, 0x4e22, 0x865, @private2={0xfc, 0x2, '\x00', 0x20}, 0xfffffffe}}}, 0x108)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e01, @private=0xa010104}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)

1.349279447s ago: executing program 1 (id=130):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)

1.320609392s ago: executing program 4 (id=131):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @quote={{0xfb, 0x1}}}, {0x0, 0xfe, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50)

1.110556174s ago: executing program 1 (id=132):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$usbip_server(r0, &(0x7f0000000180)=@ret_submit={{0x3, 0x2ae8, 0x0, 0x0, 0xc771}, 0x7, 0x0, 0x9, 0x1f6, 0x6, 0x0, "", [{0x0, 0x1, 0x9, 0x6}, {0x9, 0x0, 0x7, 0x7}, {0x3, 0x80, 0x8, 0x1800000}, {0x4, 0xfffff13c, 0xcf79, 0x7f}, {0x8001, 0x4, 0x3ff, 0x2}, {0x8, 0x401, 0x6, 0x3}, {0xb694, 0x5, 0x8, 0x1}, {0x3, 0x9, 0x71, 0x1}, {0x7, 0x1, 0x5, 0xb7f}, {0xeee, 0x1ff, 0x7ff, 0xfffffff9}, {0x3, 0x3, 0xfffffff9, 0xff}, {0xd, 0x6, 0x7fff, 0x9c4}, {0x2, 0x9, 0xe, 0xc2e08aa}, {0x6, 0x0, 0x3, 0x7ff}, {0x7ff, 0x9, 0x8, 0x8}, {0x7ff, 0xc10, 0xbf}, {0x7986, 0x3, 0x9}, {0x2, 0x8, 0x40f924be, 0x80000000}, {0x60, 0x4, 0x9, 0x3}, {0x7, 0x100000, 0x9, 0xff}, {0xf58, 0x4, 0xd, 0x4}, {0x5, 0x5, 0xfffffff9, 0x3}, {0xa8c1, 0x8000, 0x5, 0x8}, {0x0, 0x8, 0x1, 0x70}, {0xff, 0x400, 0x6c, 0x9}, {0xb7c9, 0x7, 0xfffffff9, 0x7}, {0xad3, 0x0, 0x100, 0x4}, {0x7, 0xf3, 0x6, 0x91}, {0xc, 0xdd, 0x29, 0x7}, {0x8, 0x5, 0x2, 0x7f}, {0x6, 0x200, 0xf1be, 0xa}, {0x8, 0x80000001, 0x8001, 0x902c}, {0xffff0457, 0x1000, 0x8, 0x10001}, {0x0, 0x9, 0x9, 0x1}, {0x2, 0x8, 0x9, 0x7}, {0x81, 0x7, 0x5, 0x10001}, {0x7, 0x2, 0x5, 0x9}, {0x3, 0x80, 0x1000}, {0x9, 0x1, 0x9, 0x9}, {0x100, 0x5, 0x0, 0x8}, {0x1, 0x3ff, 0x7ff, 0x9}, {0x7fffffff, 0xfff, 0x1ff, 0x4}, {0x824c, 0x5b23, 0x2}, {0x7f, 0x2, 0x9, 0x3}, {0x9, 0x9b, 0x8, 0x7f}, {0x6f, 0x7, 0x87, 0x1}, {0x8f7, 0x2, 0xb, 0x5}, {0x2, 0x40, 0x5, 0xf}, {0x7de160fc, 0x7, 0x48, 0x4}, {0xd53, 0x743e, 0x4}, {0x6, 0x32, 0x5}, {0x7f, 0x1, 0x1, 0x2}, {0x7, 0x1, 0x8, 0x1a7}, {0xa38, 0xfe9, 0x5, 0x5}, {0x3, 0x0, 0x3, 0x4}, {0x4, 0xa2c2, 0x5bee, 0x7}, {0x3, 0x6, 0x4, 0x5}, {0x2, 0x2, 0x80000001, 0x1}, {0x4, 0x81, 0x3ff, 0x99b9}, {0x81, 0x7f, 0x8, 0x3}, {0x1, 0x7, 0xbeb, 0x6}, {0xb8, 0x8, 0x7}, {0x2, 0xe, 0x8, 0xb955}, {0x4, 0x2, 0x3, 0x7}, {0x0, 0x6, 0x7, 0x5}, {0x1, 0x8001, 0x20c8, 0x6}, {0x1, 0x1, 0x1000, 0x9}, {0x2, 0x8000, 0xf, 0x4}, {0x401, 0x0, 0x400, 0x1}, {0x2, 0x0, 0x3, 0x60}, {0x2, 0x6, 0x80, 0x3}, {0x8, 0x4, 0x47d, 0x7}, {0x5, 0x4, 0x5, 0xc}, {0x6, 0x3, 0x5}, {0xfffffff9, 0x2, 0x2, 0x3}, {0x0, 0x0, 0x8, 0x5}, {0xa, 0xff, 0x3ff}, {0x42bf, 0x7, 0x9, 0x7}, {0x7, 0x4, 0x41, 0x1}, {0x6a045002, 0x9, 0xa4d8, 0x6}, {0x64e8649e, 0x2, 0x1, 0x4}, {0xe3c, 0x6, 0x4, 0x3}, {0x5, 0xc, 0x9, 0x2}, {0x4ca3, 0x7, 0x7, 0x58}, {0x101, 0xfffff234, 0xfffffc00, 0x8000000}, {0xffffffff, 0x80000001, 0x5, 0x2}, {0x198c, 0x4}, {0x5, 0xb47, 0xffffffff}, {0x3, 0x8, 0x1, 0x4}, {0x1ff, 0x10, 0xa3, 0x10}, {0x7a000000, 0xbbe, 0x6, 0x380f5044}, {0x8, 0x1, 0x7, 0x7ef}, {0x7fffffff, 0x1, 0x1, 0x327a}, {0xfffffff9, 0x59, 0x1000, 0xffff}, {0xfffffbff, 0x9, 0xd46a}, {0x7, 0xa3d4, 0x7, 0x6}, {0x1ff, 0x6, 0x3b, 0x8}, {0x1, 0x5, 0x4, 0x5}, {0x7bc, 0x9, 0x100, 0xa}, {0x0, 0x1, 0x1}, {0x0, 0x8, 0x9, 0x2}, {0x7ff, 0x3, 0x8, 0x7fff}, {0x40, 0x8, 0x8, 0x1ff}, {0x2, 0x2, 0x9, 0x4}, {0x2, 0x2, 0x7ecb, 0xaf}, {0x8000, 0x40, 0x1, 0x3}, {0x100, 0x8, 0x81, 0x80000001}, {0x10, 0x1ff, 0x49cb, 0x9}, {0x2, 0x4, 0x3, 0x7ff}, {0x1, 0x695, 0xfd5a, 0x6}, {0x62, 0x8, 0x2}, {0xf1, 0x1, 0xada9, 0x8}, {0x52e8, 0xf, 0x401, 0x7}, {0x9, 0xffff, 0xffffe57a, 0xfffffc00}, {0x77, 0x981, 0xffff848c, 0x3d5b}, {0xffffff80, 0x4, 0x4, 0xf}, {0x7f, 0x7, 0xe82d, 0x39f3}, {0xf97, 0x40, 0xfff, 0x6}, {0x6, 0xfff, 0x0, 0x825}, {0x200, 0xe, 0xf, 0x7}, {0x4, 0x8, 0x11627499, 0x2}, {0xe3a3, 0x3, 0x2, 0x10000}, {0x8001, 0xfffffffb, 0xe, 0x7fff}, {0x2, 0x4, 0x60d, 0x14d}, {0x9, 0x0, 0xa6, 0x10}, {0x0, 0xf, 0x6, 0x5}, {0x4, 0x8, 0x7}, {0x8, 0xd58, 0x3, 0x7}, {0x7f, 0x5, 0x9, 0x7}, {0x8001, 0x195, 0x300, 0x80000001}, {0x9, 0x5, 0x2, 0x3}, {0x1, 0xe, 0x5, 0x1b7}, {0x4, 0x1, 0x6, 0x590}, {0x80, 0x3, 0xa6, 0x5}, {0x5, 0x8e, 0x1, 0x9}, {0x6, 0x4, 0x2}, {0x2d, 0x8, 0x1, 0x8}, {0x5, 0x4, 0x1000, 0x40}, {0x2, 0x1f8e, 0xfab, 0x9}, {0x1ff, 0x7fff, 0x200, 0x7}, {0x5, 0xfffff601, 0x40, 0x3}, {0x8000, 0x80000001, 0x4, 0x5ff}, {0x5a8, 0xffff, 0x4, 0x9}, {0xec9, 0xdb, 0x4, 0x6}, {0xa, 0x400, 0x2c}, {0xffffffff, 0x4, 0x8, 0x80000001}, {0x1, 0x80000001, 0x1, 0x4}, {0xff, 0xffff0000, 0x1}, {0x0, 0x4e4, 0x7, 0x3}, {0x0, 0xc0000000, 0x5, 0x400}, {0xffff0001, 0x7, 0x6, 0x9}, {0xffffffff, 0xffffffff, 0xb, 0x7ea3}, {0x49be1165, 0x7ff, 0x7ff, 0x8}, {0xf4, 0x7, 0x9, 0x7}, {0x7fff, 0x80000001, 0x7fff}, {0x9, 0x1, 0x80000000, 0x2}, {0x400, 0x7fffffff, 0x7, 0xb}, {0x296, 0x6, 0x3db, 0xb}, {0x6, 0xe, 0x8, 0xa}, {0xffffffff, 0x7, 0xfffffffd, 0xa8d1}, {0x66fe, 0x7, 0xfffffffe, 0xc}, {0x1, 0x0, 0x5, 0x2}, {0x5, 0x1ff, 0xfffffff9, 0x359}, {0x4, 0x5, 0x95, 0x4}, {0x15b69703, 0x7, 0x9000, 0xd2}, {0xfffffffe, 0x0, 0x9, 0xfffffffb}, {0x0, 0x6, 0x0, 0x1}, {0xb, 0x7, 0x4b, 0x7}, {0x8, 0x1, 0x6f, 0x4}, {0x9, 0x7fff8000, 0xcbe, 0x5}, {0x3, 0x2, 0x6, 0x6}, {0x7, 0x0, 0xeb4}, {0x5, 0x1, 0x4, 0x800}, {0x2, 0x2, 0x906, 0x1}, {0x3ae, 0x80000001, 0x4, 0x43}, {0x7, 0x24b, 0xfffffffb, 0x773}, {0x9, 0x40, 0x1, 0x80000001}, {0x1, 0x6, 0x7fffffff, 0x6}, {0x7, 0x1, 0x9, 0x80}, {0x8, 0xfff, 0x5, 0x2}, {0x1, 0x80000000, 0x4, 0x81}, {0x3, 0x4, 0x4, 0xc}, {0x400, 0x3, 0x5}, {0x4, 0xffff, 0x4}, {0xd, 0xffffff01, 0x6, 0x3eb}, {0x7f, 0x8, 0x7fff, 0x40}, {0x0, 0x8001, 0x7}, {0x9, 0xffffffff, 0x4, 0x3}, {0xe, 0x2, 0x2, 0xffffffff}, {0xd, 0x2, 0x3, 0x7}, {0xff, 0x40a1, 0x1, 0x4}, {0x200, 0xbd, 0x280, 0xc}, {0x9, 0x5, 0xfef, 0x4}, {0x9, 0x4723, 0x9, 0x7}, {0x28, 0xffff, 0x0, 0x4b9e}, {0x1, 0xdfa, 0x1000, 0xf38e}, {0x48, 0x6, 0x75, 0x3ff}, {0x9, 0x553, 0x200, 0x2}, {0x0, 0x7ff, 0x8, 0x4}, {0xff, 0xf8d, 0x2, 0x80000000}, {0xfffffffa, 0x5, 0x8, 0xfffffffd}, {0x6, 0x6, 0x2, 0x6}, {0xa, 0x8, 0x9, 0x5b}, {0xff, 0xfffffff8, 0xee, 0x2}, {0xfffff89b, 0x3, 0x6, 0x9}, {0x542, 0x6, 0x3, 0xb}, {0x5, 0xd, 0x1}, {0x9, 0x4, 0x6, 0x10001}, {0xc, 0x1, 0x9, 0x3}, {0xa8a, 0x3, 0xb, 0x8}, {0x1, 0x4, 0x8}, {0x4, 0x9, 0x5, 0x2}, {0x3, 0xffffffff, 0xb, 0x3}, {0xd9, 0x7, 0x5, 0x1}, {0x3, 0x8, 0x6, 0x3672}, {0x4, 0x0, 0xb8ce, 0x1}, {0x0, 0x9, 0x0, 0xff}, {0xc9, 0x7b, 0xffff6d5a, 0xf}, {0x7, 0x1, 0x7, 0x3}, {0xffffffff, 0xf, 0x80000000, 0x657}, {0x9, 0xffffffee, 0x3, 0xffff4c03}, {0x8, 0x7, 0xba59, 0x5}, {0x8, 0x1, 0x1, 0x9}, {0x9, 0x8, 0x8001, 0x3}, {0xffffffff, 0x4, 0x9, 0x81}, {0xfffffff9, 0x7, 0x6, 0xdf30}, {0x0, 0x6, 0x400, 0x2}, {0x6c, 0x1, 0x6c, 0x8000}, {0x2, 0x1000, 0x6, 0x1}, {0x2, 0x9, 0x2, 0x4}, {0x5, 0x10, 0xa, 0x6}, {0x9, 0x6, 0x5, 0x6}, {0x1b, 0x8, 0x7, 0x6}, {0x5, 0xfffffffc, 0x6}, {0xffff, 0x100, 0x4, 0x20e6}, {0x0, 0x4, 0x83, 0x2}, {0x1, 0x10001, 0x6, 0xcf9d}, {0x2, 0x40, 0x7, 0x7fffffff}, {0x1, 0x3, 0x0, 0x3}, {0xa541d74, 0x1, 0x0, 0x1}, {0xcc2b, 0x7fffffff, 0x856, 0x1}, {0x632, 0x7, 0x4, 0x5}, {0x7, 0x5, 0x7, 0x5b}, {0x6, 0x2, 0x9, 0xffffffff}, {0x2, 0x551, 0xffff, 0xf7}, {0xcce, 0x9, 0x8, 0x53fa}, {0x9, 0x6, 0x6, 0x2}, {0x2, 0x1, 0xfffffffb}, {0x7f, 0x10, 0x8, 0x8}, {0x1, 0x6, 0x50, 0x9}, {0x9, 0x73, 0x4, 0x9}, {0xffffffff, 0x8, 0x2, 0xfa}, {0x1, 0x1, 0x40ec, 0x8}, {0x3, 0x7, 0x81, 0x9}, {0x8, 0x9, 0xffffffff, 0x565}, {0x9d6, 0x8, 0x7ff, 0x31d}, {0x4, 0x4, 0xa, 0x10001}, {0xfffffff9, 0x4, 0x6, 0x6}, {0x101, 0xdd7, 0xd175, 0x101}, {0x7c27, 0x7, 0x1, 0xfffffffa}, {0x401, 0x0, 0x2, 0xe971afb}, {0x3ea, 0x4, 0x71, 0x9}, {0x5, 0x80, 0x6, 0x9}, {0x8, 0x5, 0x3}, {0x1, 0x8a7, 0x40, 0x5}, {0x2, 0x1, 0x3, 0x8}, {0x100, 0x20, 0x0, 0x7fff}, {0x8a, 0x3, 0x6, 0x101}, {0x5, 0x8, 0x6, 0xff}, {0x1, 0xfff}, {0x0, 0x44}, {0x8, 0x0, 0xf, 0x618}, {0x2, 0x8000, 0x0, 0xfffffbff}, {0x0, 0xf1d, 0x8, 0x80000001}, {0x5, 0xff, 0xffffffff, 0x4}, {0x9, 0x0, 0x5, 0xff00}, {0x1, 0x7, 0x3, 0xc}, {0x9, 0x200, 0x1, 0x1}, {0x1, 0x1, 0x2, 0x6}, {0x1, 0x1, 0x80000000, 0x9}, {0x5, 0xfffffffe, 0x3b06, 0xffff}, {0x3682, 0x1, 0x10, 0x100}, {0x678afab1, 0x9, 0x6, 0x696}, {0x1, 0xfffff0b9, 0x7f}, {0x7, 0x0, 0x200, 0x4}, {0x3, 0x1ff, 0x3, 0xb7ee}, {0x5, 0x3, 0x3, 0x6}, {0x400, 0x3, 0x8}, {0x30177fc1, 0xd71, 0x2, 0x1000}, {0x9, 0x10000, 0x3, 0x7ff}, {0x4, 0x5, 0x9, 0x3d}, {0x0, 0x3, 0x5d19, 0x6}, {0xa, 0x0, 0x7ff, 0x9}, {0x10, 0x0, 0x401, 0x6}, {0x8f4, 0xad76, 0x5, 0x3}, {0x0, 0x10001, 0xfffffff7}, {0xaf, 0x3, 0xf, 0x6}, {0x0, 0x4, 0x5, 0x1}, {0x346, 0x8000, 0x7}, {0x9, 0x0, 0x8, 0x1}, {0xffff, 0x2, 0x1, 0x101}, {0x5d9, 0x400, 0x7fffffff, 0xa0d}, {0x80, 0x0, 0x2, 0x6}, {0x9, 0x7ff, 0x1, 0xffffff7f}, {0x4, 0x8000, 0x6, 0x7}, {0x81, 0x2, 0xffff, 0xa14}, {0x1b24, 0xaccd, 0x3ff, 0x63}, {0x606, 0xd291fea, 0x7f3d29c9, 0x92f}, {0xffffff81, 0x7, 0x5, 0x2}, {0x41c, 0x0, 0xd, 0x6}, {0x3, 0x4b7, 0x5, 0x7fff}, {0x3, 0x9, 0xf12e}, {0x10001, 0xffffffd1, 0x8, 0x80000000}, {0x4, 0x2, 0x800, 0x2}, {0x4, 0x4, 0x10001, 0x8}, {0x2, 0x401, 0xa529, 0x9}, {0x81, 0x2, 0x1, 0x4}, {0x1, 0x1, 0xfffff000, 0x6}, {0x1, 0x10000, 0x8, 0x10001}, {0x5, 0xe, 0x2, 0xffffffc0}, {0x1, 0x13, 0x4, 0x6}, {0x3, 0xe6e, 0x80000001, 0x7fff}, {0x5, 0xfffffffa, 0x8, 0x5}, {0xffffffff, 0x0, 0x4, 0xfffffff8}, {0x2470a59b, 0x80, 0x2, 0xb74}, {0xe, 0x0, 0x8, 0x4}, {0x4, 0x7, 0x9, 0x3}, {0xe7c, 0x0, 0x2, 0xd02}, {0x1, 0x24cdbc7e, 0x2, 0x4cf}, {0x80000001, 0x7fffffff, 0x0, 0x5}, {0x8, 0x4, 0x8, 0x3ff}, {0x7, 0x8, 0x9, 0xb}, {0x3, 0xddae, 0x7, 0xa}, {0x0, 0x7f, 0x0, 0x4}, {0x10, 0x9, 0x8, 0x8}, {0xdf9e, 0x2, 0x8, 0x8}, {0x3, 0x3, 0x8, 0x1}, {0x3ff, 0xab, 0x2, 0x6}, {0x0, 0x8, 0x6, 0xf58}, {0x400, 0x8, 0x9, 0xfffffffd}, {0x51e, 0x1ff, 0x81, 0x7}, {0x8, 0x8, 0x8, 0x2}, {0x3, 0x4a4c42cf, 0x5, 0x1}, {0x400, 0x4, 0x5, 0x1}, {0xe, 0x1, 0xfffffff9, 0x8}, {0x9, 0x101, 0x2b4, 0x8}, {0x65, 0x2, 0x5, 0x101}, {0x0, 0x9, 0xb5c4ef6, 0x1}, {0x8, 0x1, 0x3, 0x6}, {0x7, 0x7, 0x9, 0x8001}, {0x5, 0x3, 0x7, 0x80000001}, {0x3, 0x0, 0x3, 0x7}, {0x7f, 0x80000001, 0x1000}, {0x6, 0x0, 0x3c6, 0x2}, {0x6, 0x1000, 0x6, 0x5}, {0x0, 0x2, 0x2, 0x8001}, {0x6, 0x1da, 0x35fa}, {0x8000, 0x1, 0x3, 0x5}, {0x0, 0x7, 0x8000, 0x4}, {0x0, 0x2}, {0xd50, 0x8, 0xffff, 0xfc5}, {0x7, 0x9, 0x7, 0x10000}, {0x0, 0x4, 0xcd27, 0xff}, {0x7, 0x1, 0x5, 0x9}, {0x3, 0xff, 0x6, 0x4}, {0x6, 0x4, 0xffffffff, 0x3}, {0x1d82, 0x81, 0x1, 0x40000000}, {0x6, 0x1, 0x401, 0xa}, {0x1, 0x0, 0x7, 0x9}, {0x5e6, 0x101, 0x101, 0x7}, {0x623, 0x1, 0x4, 0x101}, {0x0, 0x695, 0x1b00000, 0x7}, {0x600000, 0xeb7, 0x7, 0x9}, {0xfffff43a, 0xffff29e6, 0x8dc, 0x5}, {0xf7b, 0x200, 0x8001, 0x200}, {0x4, 0x4, 0x0, 0x8}, {0xf, 0x2, 0x4835, 0x2}, {0x3, 0x3ff, 0x0, 0x4}, {0x80000000, 0x7, 0x1, 0xa}, {0x2, 0x4, 0x8}, {0x2, 0x7, 0xe}, {0x763, 0x9, 0xa2dc, 0x4}, {0x5, 0x8e2a, 0xa, 0x9}, {0x0, 0x2, 0x53, 0x4}, {0x80000000, 0x8, 0x9, 0xfff}, {0x10, 0x8, 0x6, 0x8}, {0x7fffffff, 0xfffffffa, 0xff, 0xa85}, {0x7, 0xfff, 0x0, 0x6}, {0x7, 0x200, 0xff, 0x5}, {0x2, 0x8, 0x101, 0x2}, {0x63, 0x7, 0x5, 0xc}, {0x2, 0x9, 0x8, 0x5}, {0x7, 0x9, 0x871, 0x80}, {0x4, 0x3c82, 0x5, 0xfffffffb}, {0x58eb, 0x400, 0x2, 0x1}, {0x6, 0x7, 0x9, 0x9}, {0x6, 0x3, 0xa, 0x400}, {0x22, 0x3, 0xb4}, {0x1, 0x3, 0x5, 0x1}, {0x7, 0x1, 0x0, 0x9}, {0x3, 0x9, 0x0, 0x200}, {0x3, 0x36f, 0x7, 0x3}, {0x8, 0x1, 0xb, 0x5}, {0x2, 0xc6, 0x448}, {0x9d00, 0x1ff, 0x9, 0x5eb5efe}, {0x4, 0xfffffffa, 0x0, 0x1000}, {0x7, 0x7, 0x0, 0x1c34}, {0xe90, 0x6, 0xfffffffb, 0xb6}, {0x1a, 0x1775, 0x3, 0x9}, {0x4, 0x2, 0x5, 0xd61}, {0x59e, 0x8, 0x5, 0x1}, {0x5, 0x8, 0xfb}, {0x0, 0x6, 0x5, 0x510a}, {0x6, 0x2, 0x2d, 0xffffffff}, {0xe4, 0x1, 0x1, 0x80000001}, {0xfff, 0xfffffff8, 0x7ff, 0x1}, {0x7f, 0x2, 0x5, 0x6}, {0xff, 0xfffffffa, 0x9}, {0x4, 0x0, 0x10, 0x8}, {0x2, 0xa4d, 0x80000000, 0x2}, {0x8, 0x10001, 0x1, 0x77}, {0x3, 0x1000, 0x1, 0x1ff}, {0xd4f7, 0x5, 0x5, 0x4b43}, {0x6, 0xf, 0x9, 0x3}, {0x7a8, 0x91, 0x10000}, {0x7fff, 0x5, 0x1, 0x4b70}, {0xfff, 0xfffffff8, 0x100, 0x2}, {0x8001, 0x8, 0x7, 0x6}, {0x2, 0x4, 0x0, 0x6}, {0xdab, 0x8, 0x63d, 0x8}, {0x5, 0x3, 0x8, 0x8}, {0x8, 0x5, 0xd6, 0x10000}, {0x2, 0xead, 0x9, 0x6}, {0x6, 0x8, 0x3ff, 0xefa}, {0x3, 0xfff, 0x3, 0x7}, {0x4d, 0xd6d, 0x3, 0x71}, {0xfffffffa, 0x4, 0xffff, 0x6}, {0x9b87, 0x2, 0x1000, 0x2}, {0x3138576c, 0x10000, 0x3ff, 0x2}, {0x7, 0x0, 0x4, 0x2}, {0x42a, 0xffff8000, 0x5, 0xfd1b}, {0x7, 0x800, 0xc3ff, 0x100}, {0x6, 0x8, 0x1, 0x3}, {0xffffffff, 0x4, 0x8, 0x6}, {0xfffffff5, 0x93, 0xf, 0x3}, {0x4, 0x7f, 0xf}, {0x10, 0x80, 0x9, 0x1ff}, {0x1, 0xa, 0x3, 0xfffffa63}, {0xe, 0x2, 0x8, 0x5}, {0x4, 0x5, 0x4, 0xe1}, {0x2, 0x2, 0x0, 0x8}, {0x1, 0x1, 0x5}, {0xe, 0x7, 0x0, 0xffffffff}, {0x401, 0x21, 0xb8, 0x8}, {0x401, 0xf, 0x8, 0xe7}, {0x0, 0xffff0cd8, 0x7fff, 0x8}, {0xc3, 0x9, 0x100000, 0x5}, {0x1, 0xab, 0x4, 0x3}, {0xc0000000, 0x5, 0x9, 0x3}, {0x8, 0x8, 0x10, 0x2}, {0xfffffff9, 0x7, 0x5, 0xfffff08d}, {0xdc, 0xe, 0x0, 0xc}, {0xe, 0x2, 0x3, 0x6}, {0x8, 0x8, 0x8, 0x6}, {0x7, 0xfffffc01, 0x80, 0x81}, {0xff, 0x6, 0x5, 0x1}, {0x400, 0xe6af42f, 0xd4a8, 0x4933}, {0x8, 0x7fff, 0x400, 0x7f71960e}, {0x68c4, 0x8, 0x7f, 0x6}, {0x6, 0xf4e6, 0x4, 0x9}, {0x7fff, 0x0, 0xffff, 0x4}, {0x80, 0x2, 0xffffff52, 0x8}, {0xe, 0x10001, 0xfffffff9, 0x9}, {0xff, 0xfffffff8, 0x7b, 0x800}, {0x7, 0xccb6, 0x4, 0x6}, {0x3, 0x5, 0x5, 0x1}, {0x7, 0x5c9f, 0xfc}, {0x2, 0x1, 0x5, 0x7}, {0x1, 0x8, 0x376605cf, 0x7}, {0x7, 0x1, 0xffffffff, 0x4}, {0x8, 0x4fe, 0x1000, 0xfffffffc}, {0x400, 0x3, 0x3, 0xfffffffc}, {0x9, 0x101, 0x10000, 0xffff18f0}, {0x8, 0x69c, 0x6, 0x800}, {0x101, 0x3, 0x1, 0x8}, {0x962, 0xa, 0x0, 0x9}, {0x4, 0x8, 0x1, 0x8fc1}, {0x7, 0x2, 0x9, 0x8}, {0x9, 0x0, 0x3, 0x2}, {0x1000, 0x10000, 0x6de, 0x8000}, {0x3, 0x4, 0x3, 0x9}, {0x8, 0x4, 0x1, 0x1}, {0x6b3d, 0x5, 0x100, 0x1ff}, {0x10001, 0x9, 0x1, 0x6}, {0xa, 0x3, 0x395073f7, 0x6}, {0x401, 0x8, 0x2, 0xffff}, {0x298, 0x69, 0xced3, 0x5}, {0x0, 0x6, 0x1, 0x7fffffff}, {0x7, 0xfff, 0x1, 0x7}, {0x3, 0x5, 0x8, 0x5}, {0x8, 0x1, 0x7, 0x8}, {0x5, 0xc, 0x9, 0xd}]}, 0x1f90)

764.657649ms ago: executing program 1 (id=133):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000090000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000800006506d45a599a20e118ae5aea350ad7a81e1033be7486dbd20b4143bf8ff6b896a022857cf39d0ad02fc9b89a96bb7e0b14c94682a6f36c7963e8996d41e45b6ee0c7258b1f59b245fc4bc8544ef794a862801d60c89cf4d936925601930c23fdc00de83aa50dc58a3551fc8a2539c1e6ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f0ffffffb703000008000000b7040000020000008500000003000000850000000f0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc)
r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r9 = socket(0x2, 0x2, 0x0)
r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
ioctl$NBD_SET_SOCK(r8, 0xab00, r9)
ioctl$NBD_DO_IT(r10, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x5)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe})

532.529628ms ago: executing program 0 (id=134):
syz_clone3(&(0x7f0000000600)={0x1c0, &(0x7f0000000380)=<r0=>0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000480), {0x3f}, &(0x7f0000001300)=""/4096, 0x1000, &(0x7f00000004c0)=""/246, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002300)={0x0, <r1=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000003300)={{r1, 0x2, 0x1, 0x4, 0x9, 0xfff, 0x3, 0x44a5, 0x1, 0xb2, 0x9, 0x4, 0x7fff, 0xffffffffffffffff, 0xd}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x181100, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r3}, @generic={0xf9, 0x1, 0x5, 0x1, 0x425}, @ldst={0x0, 0x3, 0x1, 0x3, 0x3, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x2, 0x4, 0x1, 0x40, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)='0', 0x1}], 0x1)
r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80000)
r10 = socket(0x2c, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r11, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r10}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r11, &(0x7f0000000200)}, 0x20)
write$P9_RVERSION(r9, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.u'}, 0x15)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0xbf0}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x20040054)

395.085625ms ago: executing program 2 (id=135):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000080)="1befe5a3c628a8b0fe6b7a1f8a16f71ed81717799a", &(0x7f0000000540)=""/4096, &(0x7f0000000180), &(0x7f0000000380)="94a0fc60ec34ab1680cb25359d016c2357dd6b360e4a398233ca815b6d6f7895e2b2167ace3477e8d2b1798c37c5cc04c0add7c6b04c601382ec68fb160df75524666eea31f200a69b981d820dbcdd4f7799cad047b6b575a35bd4c569e2c90ce0b3375ce1c547f845769e54ceb550061296e11c5403c4b7d50868e0d9ddae8c69168f3694d4e9b3b320dd61ac06ef1dc5d1c63e45f54ec90e6e6a97dd880241bd52604e2488f73ac966e601212f3297ada6cf9617d122d82e2ad3679542eb213e873ec0726acd059b3bf7813206f0", 0x8, r0, 0x4}, 0x38)

367.307177ms ago: executing program 4 (id=136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001b1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x0, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = socket(0x2a, 0x2, 0x101)
getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000802}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@deltclass={0x54, 0x29, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff1}, {0xd, 0x5}, {0xc, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2c}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x10) (async)
getsockname$packet(r5, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000810)

309.356975ms ago: executing program 0 (id=137):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000004c0)={0x1, 0x0, 0x98, &(0x7f0000000400)={0x5, 0x7}})
syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x5, 0x9a, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0xa, 0x10, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d7f54f5b29"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@country_functional={0x6, 0x24, 0x7, 0xd, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xfff6, 0xaa, 0xff, 0xfffd, 0x8}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xf5, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xc2, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0x33}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x0, 0x31, 0x1, 0x10, 0x8}, 0x46, &(0x7f0000000200)={0x5, 0xf, 0x46, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4d, 0xf, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xb, 0x8, 0xfff8}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x37, 0xf00, 0x7, [0x30, 0xc0, 0x18, 0xff0000, 0x81c017]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0xc9, 0x8}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2001}}, {0x52, &(0x7f00000004c0)=@string={0x52, 0x3, "7d6c4f3ab285e4ad5cb37d75b871ea61159c849478b094cf6096c134f9278ccc065ae7dac3e8d330282cccf9e8c1728520ccf910c9f602a2e540570e06332bbb7a440d0deab3cb7e5e4513a07fe1d0aa"}}, {0x32, &(0x7f00000003c0)=@string={0x32, 0x3, "b450793e61166a82f273a7c9abd194efa3945014cd7fd094a7e1a5dec7aab011a03b960fe161c969db561d9ca7338652"}}]})
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8080)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'veth1\x00', 0x2}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)

104.784228ms ago: executing program 2 (id=138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8844}, 0x8004)
r2 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x28}}, 0x30000808)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x101})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delpolicy={0x50, 0x14, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x50}}, 0x20006804)

38.073831ms ago: executing program 3 (id=139):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00')
write(r2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x90, 0xfd, 0x8, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x20, 0x0, 0xe}})
sendmsg$nl_route_sched_retired(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {0x3, 0xb}, {0x0, 0x2}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc16}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0x40)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0)
r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x2d9b, 0x100, 0x200001, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)

0s ago: executing program 4 (id=140):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_extract_tcp_res(0x0, 0x4, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r6 = dup3(r0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x8000, {0x400000, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}})
ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10010, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad33060000003e508b8040c7bc6e583cc41170a13349e2cfcc4b64bf41ee00", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]})
syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x3e1}, &(0x7f0000000280), &(0x7f0000000140))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts.
[   58.234965][   T30] audit: type=1400 audit(1754301603.829:62): avc:  denied  { mounton } for  pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   58.238136][ T5831] cgroup: Unknown subsys name 'net'
[   58.257695][   T30] audit: type=1400 audit(1754301603.829:63): avc:  denied  { mount } for  pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   58.287285][   T30] audit: type=1400 audit(1754301603.889:64): avc:  denied  { unmount } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   58.453486][ T5831] cgroup: Unknown subsys name 'cpuset'
[   58.461497][ T5831] cgroup: Unknown subsys name 'rlimit'
[   58.645791][   T30] audit: type=1400 audit(1754301604.239:65): avc:  denied  { setattr } for  pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.669184][   T30] audit: type=1400 audit(1754301604.239:66): avc:  denied  { create } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.696002][   T30] audit: type=1400 audit(1754301604.239:67): avc:  denied  { write } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.716944][   T30] audit: type=1400 audit(1754301604.239:68): avc:  denied  { read } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.737694][   T30] audit: type=1400 audit(1754301604.269:69): avc:  denied  { mounton } for  pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   58.764136][   T30] audit: type=1400 audit(1754301604.269:70): avc:  denied  { mount } for  pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   58.784317][ T5833] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   58.787494][   T30] audit: type=1400 audit(1754301604.279:71): avc:  denied  { read } for  pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   59.651196][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.990751][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.003686][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   62.010366][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.011339][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.018250][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.025876][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.032295][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.039930][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.047828][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.054075][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.059795][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   62.068706][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.074360][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.088432][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.096038][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.096327][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.103838][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   62.110389][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.125466][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.125664][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   62.132975][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.139686][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.155652][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.162776][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.170059][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   62.534872][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.680970][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   62.705991][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   62.723523][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   62.755318][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.762614][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.769796][ T5849] bridge_slave_0: entered allmulticast mode
[   62.776583][ T5849] bridge_slave_0: entered promiscuous mode
[   62.825629][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.833145][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.840605][ T5849] bridge_slave_1: entered allmulticast mode
[   62.847688][ T5849] bridge_slave_1: entered promiscuous mode
[   62.917754][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   62.932285][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.939344][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.946611][ T5852] bridge_slave_0: entered allmulticast mode
[   62.953909][ T5852] bridge_slave_0: entered promiscuous mode
[   62.969619][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.981375][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.009174][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.016464][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.023660][ T5852] bridge_slave_1: entered allmulticast mode
[   63.030503][ T5852] bridge_slave_1: entered promiscuous mode
[   63.073364][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.081782][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.088835][ T5844] bridge_slave_0: entered allmulticast mode
[   63.096126][ T5844] bridge_slave_0: entered promiscuous mode
[   63.113176][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.122551][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.129644][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.137059][ T5841] bridge_slave_0: entered allmulticast mode
[   63.143795][ T5841] bridge_slave_0: entered promiscuous mode
[   63.158824][ T5849] team0: Port device team_slave_0 added
[   63.164777][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.171923][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.178978][ T5844] bridge_slave_1: entered allmulticast mode
[   63.185932][ T5844] bridge_slave_1: entered promiscuous mode
[   63.193639][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.212018][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.219080][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.226329][ T5841] bridge_slave_1: entered allmulticast mode
[   63.233670][ T5841] bridge_slave_1: entered promiscuous mode
[   63.244415][ T5849] team0: Port device team_slave_1 added
[   63.275311][ T5852] team0: Port device team_slave_0 added
[   63.307631][ T5852] team0: Port device team_slave_1 added
[   63.332050][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.338980][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.364912][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.378282][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.389873][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.408835][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.426720][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.433695][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.459835][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.477612][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.484758][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.511145][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.523841][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.531045][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.556939][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.569096][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.590600][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.597701][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.604855][ T5845] bridge_slave_0: entered allmulticast mode
[   63.612126][ T5845] bridge_slave_0: entered promiscuous mode
[   63.658544][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.665748][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.673241][ T5845] bridge_slave_1: entered allmulticast mode
[   63.679837][ T5845] bridge_slave_1: entered promiscuous mode
[   63.687531][ T5844] team0: Port device team_slave_0 added
[   63.695441][ T5844] team0: Port device team_slave_1 added
[   63.710681][ T5841] team0: Port device team_slave_0 added
[   63.719897][ T5849] hsr_slave_0: entered promiscuous mode
[   63.725953][ T5849] hsr_slave_1: entered promiscuous mode
[   63.758665][ T5841] team0: Port device team_slave_1 added
[   63.788617][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.795862][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.821776][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.851631][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.868239][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.875471][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.901955][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.913463][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.920950][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.946884][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.964332][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.976459][ T5852] hsr_slave_0: entered promiscuous mode
[   63.983043][ T5852] hsr_slave_1: entered promiscuous mode
[   63.988872][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   63.994705][ T5852] Cannot create hsr debugfs directory
[   64.004558][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.011526][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.037428][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.075034][ T5845] team0: Port device team_slave_0 added
[   64.107684][ T5845] team0: Port device team_slave_1 added
[   64.165112][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.172154][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.198571][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.210956][ T5848] Bluetooth: hci3: command tx timeout
[   64.213293][   T51] Bluetooth: hci0: command tx timeout
[   64.216573][ T5850] Bluetooth: hci4: command tx timeout
[   64.222081][ T5856] Bluetooth: hci1: command tx timeout
[   64.227431][ T5848] Bluetooth: hci2: command tx timeout
[   64.257676][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.266106][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.292297][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.310395][ T5844] hsr_slave_0: entered promiscuous mode
[   64.316370][ T5844] hsr_slave_1: entered promiscuous mode
[   64.322535][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   64.328238][ T5844] Cannot create hsr debugfs directory
[   64.351294][ T5841] hsr_slave_0: entered promiscuous mode
[   64.357559][ T5841] hsr_slave_1: entered promiscuous mode
[   64.363868][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   64.369574][ T5841] Cannot create hsr debugfs directory
[   64.507173][ T5845] hsr_slave_0: entered promiscuous mode
[   64.513240][ T5845] hsr_slave_1: entered promiscuous mode
[   64.519057][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   64.525244][ T5845] Cannot create hsr debugfs directory
[   64.698647][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.723466][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.743634][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.756470][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.797733][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.824425][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.834010][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.853512][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.892422][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.905847][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.916301][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.926742][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.027019][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.039874][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.049740][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.060728][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.075175][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.124751][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.168875][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.179833][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.187104][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.199186][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.213356][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.220444][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.228337][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.241185][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.253862][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.307775][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   65.330645][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.337717][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.346730][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.353787][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.392580][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.439881][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   65.439896][   T30] audit: type=1400 audit(1754301611.029:86): avc:  denied  { sys_module } for  pid=5849 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   65.445381][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.525492][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.532623][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.553162][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.560263][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.574631][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.632412][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.689109][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.696222][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.763332][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.770474][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.818020][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.836511][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.903633][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.916982][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.942262][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.949358][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.984815][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.991947][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.021563][ T5849] veth0_vlan: entered promiscuous mode
[   66.032470][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.075802][ T5849] veth1_vlan: entered promiscuous mode
[   66.204175][ T5849] veth0_macvtap: entered promiscuous mode
[   66.231325][ T5852] veth0_vlan: entered promiscuous mode
[   66.247085][ T5849] veth1_macvtap: entered promiscuous mode
[   66.259002][ T5852] veth1_vlan: entered promiscuous mode
[   66.291010][ T5850] Bluetooth: hci1: command tx timeout
[   66.296402][ T5850] Bluetooth: hci0: command tx timeout
[   66.302100][ T5848] Bluetooth: hci3: command tx timeout
[   66.302700][ T5856] Bluetooth: hci4: command tx timeout
[   66.307468][ T5848] Bluetooth: hci2: command tx timeout
[   66.354651][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.388131][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.409311][ T5841] veth0_vlan: entered promiscuous mode
[   66.439466][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.462779][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.473853][ T5852] veth0_macvtap: entered promiscuous mode
[   66.487091][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.496989][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.516463][ T5852] veth1_macvtap: entered promiscuous mode
[   66.524135][ T5841] veth1_vlan: entered promiscuous mode
[   66.542531][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.573031][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.592578][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.634818][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.659310][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.668854][ T5845] veth0_vlan: entered promiscuous mode
[   66.670906][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.681209][ T5841] veth0_macvtap: entered promiscuous mode
[   66.707798][ T5841] veth1_macvtap: entered promiscuous mode
[   66.719886][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.744551][   T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.753627][   T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.777458][ T5845] veth1_vlan: entered promiscuous mode
[   66.784096][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.795332][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.803845][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.819050][ T5844] veth0_vlan: entered promiscuous mode
[   66.835865][   T30] audit: type=1400 audit(1754301612.429:87): avc:  denied  { mounton } for  pid=5849 comm="syz-executor" path="/root/syzkaller.125OvL/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   66.848584][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.875288][   T30] audit: type=1400 audit(1754301612.459:88): avc:  denied  { mount } for  pid=5849 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   66.885535][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.925916][   T30] audit: type=1400 audit(1754301612.459:89): avc:  denied  { mounton } for  pid=5849 comm="syz-executor" path="/root/syzkaller.125OvL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   66.925921][ T5844] veth1_vlan: entered promiscuous mode
[   66.925953][   T30] audit: type=1400 audit(1754301612.459:90): avc:  denied  { mount } for  pid=5849 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   66.975062][ T5844] veth0_macvtap: entered promiscuous mode
[   66.988457][   T30] audit: type=1400 audit(1754301612.459:91): avc:  denied  { mounton } for  pid=5849 comm="syz-executor" path="/root/syzkaller.125OvL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   67.016292][   T30] audit: type=1400 audit(1754301612.459:92): avc:  denied  { mounton } for  pid=5849 comm="syz-executor" path="/root/syzkaller.125OvL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   67.047936][   T30] audit: type=1400 audit(1754301612.469:93): avc:  denied  { unmount } for  pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   67.059391][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.075419][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.082558][   T30] audit: type=1400 audit(1754301612.519:94): avc:  denied  { mounton } for  pid=5849 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   67.110042][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.113265][   T30] audit: type=1400 audit(1754301612.519:95): avc:  denied  { mount } for  pid=5849 comm="syz-executor" name="/" dev="gadgetfs" ino=7222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   67.119414][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.151304][ T5844] veth1_macvtap: entered promiscuous mode
[   67.168787][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.178586][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.194540][ T5845] veth0_macvtap: entered promiscuous mode
[   67.214239][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.244541][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.265787][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.293045][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.302507][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.302773][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.319131][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.328963][ T5845] veth1_macvtap: entered promiscuous mode
[   67.346746][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.359765][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.385845][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.398770][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.436295][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.448421][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.514202][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.528439][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.539747][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.560282][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.569121][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.611709][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.696851][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.705712][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.730568][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.817167][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.842099][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.909537][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.945970][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.073247][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.131244][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.160340][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.240212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   68.269186][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   68.370351][ T5850] Bluetooth: hci0: command tx timeout
[   68.376410][ T5848] Bluetooth: hci2: command tx timeout
[   68.376455][ T5860] Bluetooth: hci3: command tx timeout
[   68.382340][ T5848] Bluetooth: hci1: command tx timeout
[   68.387239][ T5856] Bluetooth: hci4: command tx timeout
[   68.500747][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.530925][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   68.611513][ T5967] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.640379][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.710313][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.718762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.729153][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   68.804475][ T5967] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   68.820230][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.843991][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.866577][ T5967] usb 1-1: config 0 descriptor??
[   69.043987][   T24] usb 3-1: config 127 has an invalid interface number: 163 but max is 0
[   69.058076][   T24] usb 3-1: config 127 has no interface number 0
[   69.476056][ T5967] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   69.487832][   T24] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9
[   69.516290][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.540046][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   69.551708][   T24] rtl8150 3-1:127.163: couldn't find required endpoints
[   69.563623][   T24] rtl8150 3-1:127.163: probe with driver rtl8150 failed with error -5
[   69.616564][ T5992] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   69.625441][ T5992] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   69.634703][ T5992] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   69.667277][ T5993] process 'syz.1.13' launched './file0' with NULL argv: empty string added
[   69.678469][ T5967] [drm:udl_init] *ERROR* Selecting channel failed
[   69.705247][ T5967] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[   69.720172][ T5920] usb 4-1: Using ep0 maxpacket: 16
[   69.726719][ T5920] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   69.741203][ T5967] [drm] Initialized udl on minor 2
[   69.765866][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.780149][ T5967] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   69.831966][  T919] usb 3-1: USB disconnect, device number 2
[   69.837867][ T5967] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   69.847972][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   69.875456][   T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   69.984278][ T5967] usb 1-1: USB disconnect, device number 2
[   69.994437][   T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   70.002013][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   70.020235][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.030572][ T5920] usb 4-1: Product: syz
[   70.034733][ T5920] usb 4-1: Manufacturer: syz
[   70.039294][ T5920] usb 4-1: SerialNumber: syz
[   70.467249][ T5856] Bluetooth: hci1: command tx timeout
[   70.472804][ T5856] Bluetooth: hci0: command tx timeout
[   70.478189][ T5856] Bluetooth: hci4: command tx timeout
[   70.483676][ T5856] Bluetooth: hci3: command tx timeout
[   70.489055][ T5856] Bluetooth: hci2: command tx timeout
[   70.492738][ T5920] usb 4-1: 0:2 : does not exist
[   70.585703][   T30] kauditd_printk_skb: 59 callbacks suppressed
[   70.585716][   T30] audit: type=1400 audit(1754301616.179:155): avc:  denied  { setopt } for  pid=6005 comm="syz.0.16" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.639919][   T30] audit: type=1400 audit(1754301616.209:156): avc:  denied  { connect } for  pid=6005 comm="syz.0.16" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.698177][   T30] audit: type=1400 audit(1754301616.269:157): avc:  denied  { write } for  pid=6009 comm="syz.0.18" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   70.766587][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.857128][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[   70.866579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[   70.877506][   T30] audit: type=1400 audit(1754301616.429:158): avc:  denied  { read } for  pid=6014 comm="syz.4.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   70.934920][ T5879] usb 2-1: config 127 has an invalid interface number: 163 but max is 0
[   70.953167][   T30] audit: type=1400 audit(1754301616.429:159): avc:  denied  { open } for  pid=6014 comm="syz.4.19" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   70.960132][ T5879] usb 2-1: config 127 has no interface number 0
[   70.989598][   T30] audit: type=1400 audit(1754301616.449:160): avc:  denied  { ioctl } for  pid=6014 comm="syz.4.19" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   71.037525][   T30] audit: type=1400 audit(1754301616.479:161): avc:  denied  { ioctl } for  pid=6009 comm="syz.0.18" path="socket:[8630]" dev="sockfs" ino=8630 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.104393][   T13] Bluetooth: hci5: Frame reassembly failed (-84)
[   71.111282][   T30] audit: type=1400 audit(1754301616.519:162): avc:  denied  { read } for  pid=6007 comm="syz.2.17" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   71.138526][   T30] audit: type=1400 audit(1754301616.519:163): avc:  denied  { open } for  pid=6007 comm="syz.2.17" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   71.167076][   T30] audit: type=1400 audit(1754301616.529:164): avc:  denied  { ioctl } for  pid=6007 comm="syz.2.17" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   71.170163][ T5879] usb 2-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9
[   71.215288][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.309000][ T5879] rtl8150 2-1:127.163: couldn't find required endpoints
[   71.333034][ T5879] rtl8150 2-1:127.163: probe with driver rtl8150 failed with error -5
[   71.416462][ T5920] usb 4-1: 1:0: failed to get current value for ch 0 (-22)
[   71.551478][ T1209] usb 2-1: USB disconnect, device number 2
[   71.556598][ T5920] usb 4-1: USB disconnect, device number 2
[   71.664475][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.364921][ T5860] Bluetooth: hci5: command 0x1003 tx timeout
[   73.376780][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   73.460078][ T5920] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   73.550050][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   73.577254][ T6072] netlink: 'syz.2.38': attribute type 21 has an invalid length.
[   73.585096][ T6072] netlink: 152 bytes leftover after parsing attributes in process `syz.2.38'.
[   73.612085][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.622796][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[   73.632850][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   73.645988][ T5920] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   73.658472][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.685390][ T6076] netlink: 236 bytes leftover after parsing attributes in process `syz.4.39'.
[   73.706088][ T5920] usb 4-1: config 0 descriptor??
[   73.726630][ T5879] usb 2-1: config 127 has an invalid interface number: 163 but max is 0
[   73.740658][ T5879] usb 2-1: config 127 has no interface number 0
[   73.746942][ T5879] usb 2-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9
[   73.757067][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.777410][ T5879] rtl8150 2-1:127.163: couldn't find required endpoints
[   73.785440][ T5879] rtl8150 2-1:127.163: probe with driver rtl8150 failed with error -5
[   73.875982][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'.
[   73.888448][ T6083] Zero length message leads to an empty skb
[   74.204387][ T5907] usb 2-1: USB disconnect, device number 3
[   74.257117][ T1209] usb 4-1: USB disconnect, device number 3
[   74.470041][ T5928] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.621738][ T5928] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   74.631687][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0
[   74.639948][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   74.649051][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   74.657247][ T5928] usb 1-1: Product: syz
[   74.662541][ T5928] usb 1-1: Manufacturer: syz
[   74.667121][ T5928] usb 1-1: SerialNumber: syz
[   74.673173][ T5928] usb 1-1: config 0 descriptor??
[   74.684870][ T5928] usb 1-1: selecting invalid altsetting 0
[   74.945711][ T6093] bridge1: the hash_elasticity option has been deprecated and is always 16
[   74.954985][ T6093] bridge1: entered allmulticast mode
[   74.962434][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.971492][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.981645][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.992705][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.079940][ T6094] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   75.095302][ T6094] batman_adv: batadv0: Adding interface: gretap1
[   75.101685][ T6094] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.127072][ T6094] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   75.182517][ T5879] usb 1-1: USB disconnect, device number 3
[   75.619426][ T6101] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   75.725751][   T30] kauditd_printk_skb: 38 callbacks suppressed
[   75.725765][   T30] audit: type=1400 audit(1754301621.319:203): avc:  denied  { write } for  pid=6100 comm="syz.4.48" name="udplite" dev="proc" ino=4026533170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   75.976668][   T43] cfg80211: failed to load regulatory.db
[   76.190108][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   76.658871][   T30] audit: type=1400 audit(1754301622.039:204): avc:  denied  { bind } for  pid=6103 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   76.658887][ T5879] usb 2-1: config 0 has no interfaces?
[   76.658916][ T5879] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   76.760201][ T5907] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.768040][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.781662][ T5879] usb 2-1: config 0 descriptor??
[   76.910252][   T30] audit: type=1400 audit(1754301622.499:205): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   77.096187][ T5907] usb 5-1: config 127 has an invalid interface number: 163 but max is 0
[   77.116517][ T5907] usb 5-1: config 127 has no interface number 0
[   77.135930][ T5907] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9
[   77.146220][   T30] audit: type=1400 audit(1754301622.709:206): avc:  denied  { create } for  pid=6105 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   77.220898][ T6127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.263580][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.580569][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.615126][ T5907] rtl8150 5-1:127.163: couldn't find required endpoints
[   77.634921][ T5907] rtl8150 5-1:127.163: probe with driver rtl8150 failed with error -5
[   77.755507][ T6130] No buffer was provided with the request
[   77.795444][ T5920] usb 2-1: USB disconnect, device number 4
[   77.883384][ T5967] usb 5-1: USB disconnect, device number 2
[   77.949535][   T30] audit: type=1400 audit(1754301623.539:207): avc:  denied  { bind } for  pid=6128 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   77.971699][   T30] audit: type=1400 audit(1754301623.539:208): avc:  denied  { name_bind } for  pid=6128 comm="syz.3.57" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   77.998557][   T30] audit: type=1400 audit(1754301623.539:209): avc:  denied  { node_bind } for  pid=6128 comm="syz.3.57" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   78.117129][   T30] audit: type=1400 audit(1754301623.709:210): avc:  denied  { write } for  pid=6128 comm="syz.3.57" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   78.336775][ T6138] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[   78.336775][ T6138]    program syz.2.58 not setting count and/or reply_len properly
[   78.439525][ T6140] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[   78.439525][ T6140]    program syz.0.59 not setting count and/or reply_len properly
[   78.859734][ T6142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.863336][   T30] audit: type=1400 audit(1754301624.449:211): avc:  denied  { create } for  pid=6141 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   78.919298][ T6133] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.57'.
[   78.966357][ T6146] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   79.367102][   T30] audit: type=1400 audit(1754301624.959:212): avc:  denied  { write } for  pid=6148 comm="syz.0.63" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   79.472517][ T6155] netlink: 'syz.2.60': attribute type 21 has an invalid length.
[   79.490873][ T6155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.60'.
[   79.563031][ T6155] netlink: 'syz.2.60': attribute type 21 has an invalid length.
[   79.570954][ T6155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.60'.
[   79.874027][ T6164] block device autoloading is deprecated and will be removed.
[   80.290987][ T6171] ubi9: attaching mtd0
[   80.302851][ T6171] ubi9 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65)
[   80.806131][   T30] kauditd_printk_skb: 33 callbacks suppressed
[   80.806194][   T30] audit: type=1400 audit(1754301626.399:246): avc:  denied  { mount } for  pid=6180 comm="syz.0.70" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   80.836410][ T6182] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   80.890070][ T5928] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   81.081631][ T5928] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   81.142458][ T5928] usb 4-1: config 0 has no interface number 0
[   81.214379][ T6189] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[   81.214379][ T6189]    program syz.2.71 not setting count and/or reply_len properly
[   81.307497][ T5928] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   81.610232][ T5928] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   81.625282][ T5928] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   81.642547][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.921808][ T5928] usb 4-1: Product: syz
[   81.977524][ T5928] usb 4-1: Manufacturer: syz
[   81.986993][ T5928] usb 4-1: SerialNumber: syz
[   82.412112][ T5928] usb 4-1: config 0 descriptor??
[   82.430349][ T6179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   82.490222][ T6179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   82.540102][ T5967] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   82.567659][ T5928] smsc95xx v2.0.0
[   82.623411][ T6200] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[   82.623411][ T6200]    program syz.0.74 not setting count and/or reply_len properly
[   82.740062][ T5967] usb 3-1: device descriptor read/64, error -71
[   82.803030][ T6179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   82.900462][ T6179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   83.155663][ T5928] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   83.166434][ T5928] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   83.200184][ T5967] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   83.351486][ T5967] usb 3-1: device descriptor read/64, error -71
[   83.399177][   T30] audit: type=1400 audit(1754301628.989:247): avc:  denied  { ioctl } for  pid=6206 comm="syz.4.76" path="socket:[8072]" dev="sockfs" ino=8072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   83.460357][ T5967] usb usb3-port1: attempt power cycle
[   83.496021][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.76'.
[   83.510908][   T30] audit: type=1400 audit(1754301629.089:248): avc:  denied  { create } for  pid=6206 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   83.535896][   T30] audit: type=1400 audit(1754301629.099:249): avc:  denied  { create } for  pid=6206 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   83.562597][   T30] audit: type=1400 audit(1754301629.099:250): avc:  denied  { write } for  pid=6206 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   83.634324][   T30] audit: type=1326 audit(1754301629.229:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.1.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   83.769624][   T30] audit: type=1326 audit(1754301629.229:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.1.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   83.810722][ T5967] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   83.841756][ T5967] usb 3-1: device descriptor read/8, error -71
[   84.080659][ T5967] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   84.102734][ T5967] usb 3-1: device descriptor read/8, error -71
[   84.211931][ T5967] usb usb3-port1: unable to enumerate USB device
[   84.483550][ T6216] FAULT_INJECTION: forcing a failure.
[   84.483550][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   84.533461][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.4.78 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) 
[   84.533486][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.533495][ T6216] Call Trace:
[   84.533500][ T6216]  <TASK>
[   84.533506][ T6216]  dump_stack_lvl+0x16c/0x1f0
[   84.533534][ T6216]  should_fail_ex+0x512/0x640
[   84.533570][ T6216]  _copy_to_user+0x32/0xd0
[   84.533592][ T6216]  simple_read_from_buffer+0xcb/0x170
[   84.533622][ T6216]  proc_fail_nth_read+0x197/0x240
[   84.533641][ T6216]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.533662][ T6216]  ? rw_verify_area+0xcf/0x6c0
[   84.533686][ T6216]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.533704][ T6216]  vfs_read+0x1e1/0xc60
[   84.533724][ T6216]  ? __pfx___mutex_lock+0x10/0x10
[   84.533750][ T6216]  ? __pfx_vfs_read+0x10/0x10
[   84.533772][ T6216]  ? __fget_files+0x20e/0x3c0
[   84.533797][ T6216]  ksys_read+0x12a/0x250
[   84.533812][ T6216]  ? __pfx_ksys_read+0x10/0x10
[   84.533826][ T6216]  ? syscall_user_dispatch+0x78/0x140
[   84.533852][ T6216]  do_syscall_64+0xcd/0x4c0
[   84.533879][ T6216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.533896][ T6216] RIP: 0033:0x7f479918d57c
[   84.533909][ T6216] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   84.533924][ T6216] RSP: 002b:00007f479a00f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   84.533940][ T6216] RAX: ffffffffffffffda RBX: 00007f47993b5fa0 RCX: 00007f479918d57c
[   84.533951][ T6216] RDX: 000000000000000f RSI: 00007f479a00f0a0 RDI: 0000000000000003
[   84.533960][ T6216] RBP: 00007f479a00f090 R08: 0000000000000000 R09: 0000000000000000
[   84.533970][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.533980][ T6216] R13: 0000000000000000 R14: 00007f47993b5fa0 R15: 00007fff6e162588
[   84.534002][ T6216]  </TASK>
[   84.879234][ T5928] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   84.957575][ T5928] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[   85.197665][   T30] audit: type=1400 audit(1754301630.789:253): avc:  denied  { create } for  pid=6230 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.264757][ T6235] ksmbd: Unknown IPC event: 3, ignore.
[   85.346081][ T6235] usb usb8: usbfs: process 6235 (syz.4.81) did not claim interface 0 before use
[   85.427899][   T30] audit: type=1400 audit(1754301631.009:254): avc:  denied  { ioctl } for  pid=6230 comm="syz.1.83" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   85.493682][   T30] audit: type=1400 audit(1754301631.079:255): avc:  denied  { read } for  pid=6230 comm="syz.1.83" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   85.935554][   T30] audit: type=1400 audit(1754301631.079:256): avc:  denied  { open } for  pid=6230 comm="syz.1.83" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   86.035610][ T6242] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[   86.042334][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   86.050427][   T30] audit: type=1400 audit(1754301631.119:257): avc:  denied  { create } for  pid=6238 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   86.082416][ T6242] vhci_hcd vhci_hcd.0: Device attached
[   86.102542][ T5928] usb 4-1: USB disconnect, device number 4
[   86.320077][ T5967] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[   86.423776][ T6246] vhci_hcd: connection reset by peer
[   86.490822][ T6256] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[   86.490822][ T6256]    program syz.0.87 not setting count and/or reply_len properly
[   86.622631][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   86.668240][   T36] vhci_hcd: stop threads
[   86.688301][   T36] vhci_hcd: release socket
[   86.702964][   T36] vhci_hcd: disconnect device
[   86.835306][ T5928] usb 4-1: device descriptor read/64, error -71
[   87.145327][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.597418][ T6261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.631050][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   87.800597][ T6264] FAULT_INJECTION: forcing a failure.
[   87.800597][ T6264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.824171][ T5928] usb 4-1: device descriptor read/64, error -71
[   87.833195][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.0.90 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) 
[   87.833219][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   87.833229][ T6264] Call Trace:
[   87.833234][ T6264]  <TASK>
[   87.833240][ T6264]  dump_stack_lvl+0x16c/0x1f0
[   87.833259][ T6264]  should_fail_ex+0x512/0x640
[   87.833278][ T6264]  _copy_from_user+0x2e/0xd0
[   87.833289][ T6264]  restore_altstack+0x93/0x170
[   87.833306][ T6264]  ? __pfx_restore_altstack+0x10/0x10
[   87.833322][ T6264]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.833339][ T6264]  ? lockdep_hardirqs_on+0x7c/0x110
[   87.833353][ T6264]  ? _raw_spin_unlock_irq+0x2e/0x50
[   87.833365][ T6264]  ? set_current_blocked+0xdd/0x120
[   87.833376][ T6264]  __do_sys_rt_sigreturn+0x13c/0x230
[   87.833391][ T6264]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[   87.833408][ T6264]  do_syscall_64+0xcd/0x4c0
[   87.833424][ T6264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.833435][ T6264] RIP: 0033:0x7f071132ad69
[   87.833443][ T6264] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[   87.833453][ T6264] RSP: 002b:00007f07121e0340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
[   87.833463][ T6264] RAX: ffffffffffffffda RBX: 00007f07115b5fa0 RCX: 00007f071132ad69
[   87.833469][ T6264] RDX: 00007f07121e0340 RSI: 00007f07121e0470 RDI: 0000000000000021
[   87.833475][ T6264] RBP: 00007f07121e1090 R08: 0000000000000000 R09: 0000000000000000
[   87.833481][ T6264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   87.833487][ T6264] R13: 0000000000000000 R14: 00007f07115b5fa0 R15: 00007ffea75d1b78
[   87.833499][ T6264]  </TASK>
[   88.045920][ T5928] usb usb4-port1: attempt power cycle
[   88.174234][   T30] audit: type=1326 audit(1754301633.769:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   88.236964][   T30] audit: type=1326 audit(1754301633.829:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   88.291695][   T30] audit: type=1400 audit(1754301633.859:260): avc:  denied  { bind } for  pid=6267 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.364086][   T30] audit: type=1400 audit(1754301633.859:261): avc:  denied  { listen } for  pid=6267 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.398682][ T6277] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   88.419110][   T30] audit: type=1326 audit(1754301633.939:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   88.443156][ T5928] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   88.504590][ T5928] usb 4-1: device descriptor read/8, error -71
[   88.513565][   T30] audit: type=1326 audit(1754301633.939:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   88.579681][   T30] audit: type=1326 audit(1754301633.939:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   88.659908][   T30] audit: type=1326 audit(1754301633.949:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd53a98eb69 code=0x7ffc0000
[   88.773143][ T5928] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   88.837101][ T5928] usb 4-1: device descriptor read/8, error -71
[   89.130046][ T5928] usb usb4-port1: unable to enumerate USB device
[   89.487762][ T6289] input: syz0 as /devices/virtual/input/input5
[   90.113669][ T6304] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[   90.113669][ T6304]    program syz.0.101 not setting count and/or reply_len properly
[   90.710116][ T6312] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[   90.716729][ T6312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   90.724634][ T6312] vhci_hcd vhci_hcd.0: Device attached
[   91.480054][ T5967] vhci_hcd: vhci_device speed not set
[   91.943641][ T6317] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   92.482653][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.2.105
[   92.513212][   T30] kauditd_printk_skb: 40 callbacks suppressed
[   92.513235][   T30] audit: type=1326 audit(1754301637.829:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   92.780375][   T30] audit: type=1326 audit(1754301637.839:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   92.804138][   T30] audit: type=1326 audit(1754301637.839:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   92.827934][ T6313] vhci_hcd: connection closed
[   92.828338][   T30] audit: type=1326 audit(1754301637.839:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   92.869484][   T30] audit: type=1326 audit(1754301637.849:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   92.876552][ T1167] vhci_hcd: stop threads
[   92.898004][   T30] audit: type=1326 audit(1754301637.859:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   93.001891][ T1167] vhci_hcd: release socket
[   93.064815][ T5928] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[   93.264215][   T30] audit: type=1326 audit(1754301637.859:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   93.280974][ T1167] vhci_hcd: disconnect device
[   93.335141][   T30] audit: type=1326 audit(1754301637.859:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   93.366729][   T30] audit: type=1326 audit(1754301637.869:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   93.383316][ T6330] bridge1: entered promiscuous mode
[   93.392460][   T30] audit: type=1326 audit(1754301637.879:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x7ffc0000
[   95.373581][ T5907] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   95.692580][ T5907] usb 3-1: Using ep0 maxpacket: 16
[   95.699406][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.720026][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.729751][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   95.750253][ T5907] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   95.759283][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.768636][ T6371] openvswitch: netlink: Message has 16 unknown bytes.
[   95.775519][ T6371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.819263][ T5907] usb 3-1: config 0 descriptor??
[   96.264324][ T6358] random: crng reseeded on system resumption
[   96.401910][ T5907] input: HID 0955:7214 Haptics as /devices/virtual/input/input6
[   96.491515][ T5907] shield 0003:0955:7214.0001: Registered Thunderstrike controller
[   96.507967][ T5907] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[   96.757144][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.771096][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.800499][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.825155][ T1209] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   96.843841][    T9] usb 3-1: USB disconnect, device number 7
[   96.867087][ T1209] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   96.897353][ T1209] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   96.927278][ T1209] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   96.970677][ T5920] usb 1-1: Using ep0 maxpacket: 16
[   96.986557][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.028060][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.116835][ T6391] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[   97.123448][ T6391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   97.135950][ T6391] vhci_hcd vhci_hcd.0: Device attached
[   97.149135][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   97.257319][ T5920] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   97.325947][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.648530][ T5920] usb 1-1: config 0 descriptor??
[   98.753806][ T6398] random: crng reseeded on system resumption
[   99.350544][ T5920] input: HID 0955:7214 Haptics as /devices/virtual/input/input7
[   99.370078][ T6392] vhci_hcd: connection reset by peer
[   99.388018][   T30] kauditd_printk_skb: 94 callbacks suppressed
[   99.388030][   T30] audit: type=1326 audit(1754301644.979:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.0.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f071138eb69 code=0x0
[   99.405762][ T5920] shield 0003:0955:7214.0002: Registered Thunderstrike controller
[   99.417552][   T13] vhci_hcd: stop threads
[   99.425131][ T5920] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[   99.507105][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.531766][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.559776][   T13] vhci_hcd: release socket
[   99.590975][   T13] vhci_hcd: disconnect device
[   99.659259][ T6406] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[   99.669504][   T10] usb 1-1: USB disconnect, device number 4
[   99.670064][ T5967] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   99.675546][ T5928] vhci_hcd: vhci_device speed not set
[   99.700045][ T5967] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   99.742703][ T5967] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   99.764429][ T5967] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   99.872203][ T6411] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET)
[  100.326522][   T30] audit: type=1400 audit(1754301645.919:411): avc:  denied  { write } for  pid=6409 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  100.403879][ T6422] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[  100.403879][ T6422]    program syz.4.131 not setting count and/or reply_len properly
[  100.432377][   T30] audit: type=1400 audit(1754301645.949:412): avc:  granted  { setsecparam } for  pid=6420 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  100.846869][   T30] audit: type=1400 audit(1754301646.439:413): avc:  denied  { setopt } for  pid=6409 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  100.866315][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.994252][ T6427] tipc: Started in network mode
[  101.090701][ T6427] tipc: Node identity 8ec8ca56bb9, cluster identity 4711
[  101.097927][ T6427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.135181][ T6430] kvm: emulating exchange as write
[  101.140084][   T30] audit: type=1400 audit(1754301646.709:414): avc:  denied  { ioctl } for  pid=6429 comm="syz.4.136" path="socket:[10603]" dev="sockfs" ino=10603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  101.164856][    C1] vkms_vblank_simulate: vblank timer overrun
[  101.208776][   T30] audit: type=1400 audit(1754301646.739:415): avc:  denied  { create } for  pid=6429 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.249430][   T30] audit: type=1400 audit(1754301646.739:416): avc:  denied  { connect } for  pid=6429 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.270144][   T30] audit: type=1400 audit(1754301646.739:417): avc:  denied  { ioctl } for  pid=6429 comm="syz.4.136" path="socket:[10606]" dev="sockfs" ino=10606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.303512][   T30] audit: type=1400 audit(1754301646.739:418): avc:  denied  { write } for  pid=6429 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.334715][ T6438] syz.1.133: attempt to access beyond end of device
[  101.334715][ T6438] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[  101.349058][   T30] audit: type=1400 audit(1754301646.929:419): avc:  denied  { mounton } for  pid=6425 comm="syz.1.133" path="/27/file1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.404723][ T6440] mmap: syz.2.138 (6440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  101.437735][ T6438] ------------[ cut here ]------------
[  101.443284][ T6438] WARNING: CPU: 1 PID: 6438 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560
[  101.452452][ T6438] Modules linked in:
[  101.456931][ T6438] CPU: 1 UID: 0 PID: 6438 Comm: syz.1.133 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) 
[  101.468793][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  101.478962][ T6438] RIP: 0010:__getblk_slow+0x4cc/0x560
[  101.484390][ T6438] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 4c 3c 73 ff 48 c7 c6 20 5b c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 35 3c 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 80 5c c0 8b 31 db e8 7d ee 51
[  101.504212][ T6438] RSP: 0018:ffffc9000c1377f0 EFLAGS: 00010287
[  101.510696][ T6438] RAX: 00000000000099e4 RBX: 0000000000000200 RCX: ffffc9000f752000
[  101.513340][ T6427] nbd1: detected capacity change from 0 to 10
[  101.518923][ T6438] RDX: 0000000000080000 RSI: ffffffff82484c5b RDI: 0000000000000005
[  101.533257][ T6438] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000
[  101.541304][ T6438] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148df0000
[  101.549846][ T6438] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888148df0000
[  101.558356][ T6438] FS:  00007fd53b7906c0(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000
[  101.567400][ T6438] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.573340][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read
[  101.574059][ T6438] CR2: 0000555561e4b5c8 CR3: 000000007e064000 CR4: 00000000003526f0
[  101.585235][ T6001] Buffer I/O error on dev nbd1, logical block 1, async page read
[  101.589773][ T6438] Call Trace:
[  101.589782][ T6438]  <TASK>
[  101.589793][ T6438]  ? __pfx___might_resched+0x10/0x10
[  101.608979][ T6438]  bdev_getblk+0xd4/0xe0
[  101.613257][ T6438]  __bread_gfp+0x86/0x3c0
[  101.617604][ T6438]  udf_read_tagged+0xae/0x740
[  101.622338][ T6438]  udf_check_anchor_block+0x89/0x4b0
[  101.623228][ T6001] Buffer I/O error on dev nbd1, logical block 2, async page read
[  101.627599][ T6438]  ? udf_get_last_block+0x1ce/0x2a0
[  101.637771][ T6001] Buffer I/O error on dev nbd1, logical block 3, async page read
[  101.640552][ T6438]  ? __pfx_udf_check_anchor_block+0x10/0x10
[  101.648432][ T6001] Buffer I/O error on dev nbd1, logical block 4, async page read
[  101.654815][ T6438]  udf_load_vrs+0x3b8/0x1070
[  101.654851][ T6438]  ? __pfx_udf_load_vrs+0x10/0x10
[  101.654874][ T6438]  ? __pfx_udf_get_last_session+0x10/0x10
[  101.654902][ T6438]  ? lockdep_init_map_type+0x5c/0x280
[  101.654937][ T6438]  udf_fill_super+0x791/0x1df0
[  101.654962][ T6438]  ? __pfx_udf_fill_super+0x10/0x10
[  101.654982][ T6438]  ? do_raw_spin_lock+0x12c/0x2b0
[  101.655001][ T6438]  ? find_held_lock+0x2b/0x80
[  101.655029][ T6438]  ? sb_set_blocksize+0x176/0x1d0
[  101.655053][ T6438]  ? setup_bdev_super+0x369/0x730
[  101.655085][ T6438]  get_tree_bdev_flags+0x389/0x620
[  101.655103][ T6438]  ? __pfx_udf_fill_super+0x10/0x10
[  101.655124][ T6438]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  101.655149][ T6438]  ? bpf_lsm_capable+0x9/0x10
[  101.655175][ T6438]  ? security_capable+0x7e/0x260
[  101.655196][ T6438]  vfs_get_tree+0x8e/0x340
[  101.655223][ T6438]  path_mount+0x1482/0x1fd0
[  101.655251][ T6438]  ? __pfx_path_mount+0x10/0x10
[  101.655276][ T6438]  ? kmem_cache_free+0x2d1/0x4d0
[  101.655294][ T6438]  ? putname+0x154/0x1a0
[  101.663926][ T6001] Buffer I/O error on dev nbd1, logical block 5, async page read
[  101.668100][ T6438]  ? putname+0x154/0x1a0
[  101.673261][ T6001] Buffer I/O error on dev nbd1, logical block 6, async page read
[  101.678798][ T6438]  ? __x64_sys_mount+0x28d/0x310
[  101.678822][ T6438]  __x64_sys_mount+0x28d/0x310
[  101.684309][ T6001] Buffer I/O error on dev nbd1, logical block 7, async page read
[  101.688995][ T6438]  ? __pfx___x64_sys_mount+0x10/0x10
[  101.805207][ T6438]  do_syscall_64+0xcd/0x4c0
[  101.809706][ T6438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.815619][ T6438] RIP: 0033:0x7fd53a98eb69
[  101.820041][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.839741][ T6438] RSP: 002b:00007fd53b790038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.848204][ T6438] RAX: ffffffffffffffda RBX: 00007fd53abb6160 RCX: 00007fd53a98eb69
[  101.856773][ T6438] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[  101.865301][ T6438] RBP: 00007fd53aa11df1 R08: 0000000000000000 R09: 0000000000000000
[  101.869258][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read
[  101.873321][ T6438] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000
[  101.873336][ T6438] R13: 0000000000000001 R14: 00007fd53abb6160 R15: 00007fff476ee2f8
[  101.890101][ T6001] Buffer I/O error on dev nbd1, logical block 1, async page read
[  101.897353][ T6438]  </TASK>
[  101.907712][ T6438] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  101.914983][ T6438] CPU: 1 UID: 0 PID: 6438 Comm: syz.1.133 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) 
[  101.926512][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  101.936557][ T6438] Call Trace:
[  101.939824][ T6438]  <TASK>
[  101.942753][ T6438]  dump_stack_lvl+0x3d/0x1f0
[  101.947352][ T6438]  vpanic+0x6a3/0x780
[  101.951316][ T6438]  ? __pfx_vpanic+0x10/0x10
[  101.955799][ T6438]  ? __getblk_slow+0x4cc/0x560
[  101.960543][ T6438]  panic+0xca/0xd0
[  101.964268][ T6438]  ? __pfx_panic+0x10/0x10
[  101.968687][ T6438]  check_panic_on_warn+0xab/0xb0
[  101.973596][ T6438]  __warn+0xf6/0x3c0
[  101.977461][ T6438]  ? __getblk_slow+0x4cc/0x560
[  101.982204][ T6438]  report_bug+0x3c3/0x580
[  101.986510][ T6438]  ? __getblk_slow+0x4cc/0x560
[  101.991250][ T6438]  handle_bug+0x184/0x210
[  101.995552][ T6438]  exc_invalid_op+0x17/0x50
[  102.000025][ T6438]  asm_exc_invalid_op+0x1a/0x20
[  102.004849][ T6438] RIP: 0010:__getblk_slow+0x4cc/0x560
[  102.010200][ T6438] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 4c 3c 73 ff 48 c7 c6 20 5b c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 35 3c 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 80 5c c0 8b 31 db e8 7d ee 51
[  102.029791][ T6438] RSP: 0018:ffffc9000c1377f0 EFLAGS: 00010287
[  102.035838][ T6438] RAX: 00000000000099e4 RBX: 0000000000000200 RCX: ffffc9000f752000
[  102.043784][ T6438] RDX: 0000000000080000 RSI: ffffffff82484c5b RDI: 0000000000000005
[  102.051729][ T6438] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000
[  102.059677][ T6438] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148df0000
[  102.067622][ T6438] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888148df0000
[  102.075577][ T6438]  ? __getblk_slow+0x4cb/0x560
[  102.080335][ T6438]  ? __pfx___might_resched+0x10/0x10
[  102.085605][ T6438]  bdev_getblk+0xd4/0xe0
[  102.089831][ T6438]  __bread_gfp+0x86/0x3c0
[  102.094142][ T6438]  udf_read_tagged+0xae/0x740
[  102.098801][ T6438]  udf_check_anchor_block+0x89/0x4b0
[  102.104062][ T6438]  ? udf_get_last_block+0x1ce/0x2a0
[  102.109240][ T6438]  ? __pfx_udf_check_anchor_block+0x10/0x10
[  102.115115][ T6438]  udf_load_vrs+0x3b8/0x1070
[  102.119691][ T6438]  ? __pfx_udf_load_vrs+0x10/0x10
[  102.124693][ T6438]  ? __pfx_udf_get_last_session+0x10/0x10
[  102.130394][ T6438]  ? lockdep_init_map_type+0x5c/0x280
[  102.135754][ T6438]  udf_fill_super+0x791/0x1df0
[  102.140501][ T6438]  ? __pfx_udf_fill_super+0x10/0x10
[  102.145673][ T6438]  ? do_raw_spin_lock+0x12c/0x2b0
[  102.150672][ T6438]  ? find_held_lock+0x2b/0x80
[  102.155332][ T6438]  ? sb_set_blocksize+0x176/0x1d0
[  102.160335][ T6438]  ? setup_bdev_super+0x369/0x730
[  102.165346][ T6438]  get_tree_bdev_flags+0x389/0x620
[  102.170435][ T6438]  ? __pfx_udf_fill_super+0x10/0x10
[  102.175611][ T6438]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  102.181221][ T6438]  ? bpf_lsm_capable+0x9/0x10
[  102.185882][ T6438]  ? security_capable+0x7e/0x260
[  102.190797][ T6438]  vfs_get_tree+0x8e/0x340
[  102.195197][ T6438]  path_mount+0x1482/0x1fd0
[  102.199684][ T6438]  ? __pfx_path_mount+0x10/0x10
[  102.204514][ T6438]  ? kmem_cache_free+0x2d1/0x4d0
[  102.209425][ T6438]  ? putname+0x154/0x1a0
[  102.213649][ T6438]  ? putname+0x154/0x1a0
[  102.217872][ T6438]  ? __x64_sys_mount+0x28d/0x310
[  102.222790][ T6438]  __x64_sys_mount+0x28d/0x310
[  102.227533][ T6438]  ? __pfx___x64_sys_mount+0x10/0x10
[  102.232804][ T6438]  do_syscall_64+0xcd/0x4c0
[  102.237292][ T6438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.243161][ T6438] RIP: 0033:0x7fd53a98eb69
[  102.247552][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.267133][ T6438] RSP: 002b:00007fd53b790038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  102.275521][ T6438] RAX: ffffffffffffffda RBX: 00007fd53abb6160 RCX: 00007fd53a98eb69
[  102.283467][ T6438] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[  102.291413][ T6438] RBP: 00007fd53aa11df1 R08: 0000000000000000 R09: 0000000000000000
[  102.299357][ T6438] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000
[  102.307302][ T6438] R13: 0000000000000001 R14: 00007fd53abb6160 R15: 00007fff476ee2f8
[  102.315260][ T6438]  </TASK>
[  102.318435][ T6438] Kernel Offset: disabled
[  102.322729][ T6438] Rebooting in 86400 seconds..