last executing test programs:

10m14.38693089s ago: executing program 4 (id=184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000024)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300001e, 0x8131, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xec0, 0xfff1}, {0x0, 0xd00}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

10m11.985940395s ago: executing program 4 (id=191):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
r1 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb08, 0x30c1, 0x0, 0xf0})
setresuid(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000003900)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, <r2=>0xffffffffffffffff}}, './file1\x00'})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)="fcb23f51db30d4193bc55673cd6d594456121d4c0846d635a36bd7bf3ca64a457d62585399930576f86f81a0cd4a615bdb218f866b83b7ed13a132b26980e972e43cef27293d958373d5110b5d9e5cc9ec238832f77bebb01eb5dd23717ec98fa6d80bf40f7e528355461385fa99f5b0e196d039e12da12b704c8dbb4825db7a801ffe8db561e746d79d3b527b97952bbf31975ed9cf2b7468e3d277", 0x9c}, {&(0x7f0000000540)="e3eda63f916315103d27aae8f9127fa18f6bbb4cf0cf97cbf6400d8bdccc521506077b12279f77a39a6531b47b0195a50b9545dec22c71c6c16323007508a6b37398f858e5d2d3ee0f754098c516cb413e3df784ef52d1406fe7f1c2fd6e395a528ffde95e840f847b574af42010a9c1e52c4998c123dabe2fc7c2740517e07c8cbe20c3de193534d8365782c0", 0x8d}, {&(0x7f0000000600)="ee020939e220f2236e252ddcc66f501492edbdc3982049c371a84e26c018fd3ec82b229a90450d331bfdea252040edc02890697eb2c667575d9f25c21905e7493d57971fd540662162e341894883282ecb38ee50bd0e7ee92671b9023bdb7ffa2ffd41e58e708b782c57f290c98b43085ceeef0e3fe2e2d1c10a035477d2a95e90af563f2608ce080170ac2656e9033b98beb3d0faad1c979109bc86a08d6e896b6ec8395bf18512ee4e2d971e121af6a801e72619cd06d22fdb3dfbf58bde9500e45a95c87367daed96c85034791c8d89320de618acc66a2a018509c7f578326e388249a6b3838d569b", 0xea}], 0x3, &(0x7f0000001dc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0]}}, @cred={{0x1c}}], 0x80, 0x44}}, {{&(0x7f0000001e40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001ec0)="e58b89839ae80ec3c26a28a994654a643f549f94df2a", 0x16}, {&(0x7f0000001f00)="a4c214", 0x3}, {&(0x7f0000001f40)="0ee5020340380c41ebba38f9fb42c68b1556bf7f68f732d66de7e6fe7101f64b9f5a25a30ab872b719e769e74a7b283c365d24225ee36029d5f1f687be75638bd4bca1d0275cd18ad1f3b3dc43c4219823cf6553e47abce839fa8b5ff8929e61cc98aa6bfdbb8d74391e620d4daa635fdd64e540712c5ad35ac7622977e8c0", 0x7f}, {&(0x7f0000001fc0)="23ea14f31ba56ce1d5712c8fe288de871c526567a31a830cc9e4d4e3af480efdcb4158f9ece7f6728f417560761ea974c6b6454217f61866a7adc941aa9c39e0ac88388da76ac0b6e2027e19a907dff02e92667afb4da961586fe00004289c06bde3da66abac8fb00858457e21fa90abbc61bc0a4f192070a44b2b6da44f0a16a00f0cc79ad3075eeaa24bb344d85f4837933bc34b2300aa90be2934564331f40ff3b879ade7708b662dcb44c22ea5e1595dc7ec8fa55569e06b11", 0xbb}, {&(0x7f0000002080)="e4fdd6e1e4b6c36859f8efb491b2f5a08e281da95608892df4c158605e8f877764c8be53f63c09203c562a5799b6890a0f202e16b0c6ba60b5d26d05aa4e984b5b164f62441951c14d3d4d804b414512c467d89a727fbc5e4c405d6a73050a07668cdf1cfc5d", 0x66}, {&(0x7f0000002100)="70cab4fb9c70437510e1feef", 0xc}, {&(0x7f0000002140)="d31f0825de0dcf1f5c3a709b22ad7c14d7b9028f87c3a056d5dad983", 0x1c}], 0x7, &(0x7f0000002280)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f00000022c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002340)="893b5f58245734b8bddb1475ab8620352d342c3a94f3c36c82fb5b54d0adb2252e200e5319d4d3418997536f3e13a3aa62779ebcf963c73dc1b91c949f7d32a06a2f4a9443f522049eb255d76b995f56b6aa573311102235abc7f60a46ef", 0x5e}, {&(0x7f00000023c0)="88dde0d492a472eafc31952c75feb36a83fd000a13654b45212b774451ac577f172393f63237cfdc4c8e7a2e840411c4649f60ba93dcc619b8a57205a52b0b815a6b7ebc5846ed7bb069c80e81b3b4c56dc7866788ccf600", 0x58}, {&(0x7f0000002440)="ebccb6f5a2db9d3be5d5fd8beac967dd6f7bf65fd20610b84f2c79a2ab5c0bae500472fe7ee7b9c9ceda34df4195961158926d03a01ddca7d3399b059933b6e00400e841e0da6c9fbb527ff472b607fb41ef932da87fbe32e932c1432637aef0d575aaf4420749cc0d8e698c4ef441e4f6a9935e5d2f36cd94f9c5e4894b4f1470fad34ac46d98cb8c71c46f5b41a2331e7fb4aac178b8fc48cbb1eb65fee9c091eb0f", 0xa3}, {&(0x7f0000002500)="4d96bf38f52df2a792faf581e86679ec15bc34cc86042b1f9c3ad1927231b7af5728725c29dc11c3a5f39e972b2bec8b357cf3a170eb5fd78cafd02b0f1c73107a64472fce5ac0965bba00e29b57ece6812a32cbcde49c598d3c5aaa0a8f95ce519e5d409ff7e86a09eca9b2a5bfbc94404696845daca1a5bc96fe66eec947e4cb60e45adfc47b83fa7b56e9d07b216d4e2aa4da7cd437ec1b597f5f03fe4dab0ab0be18f2a161e9bf43351a00", 0xad}, {&(0x7f00000025c0)="c966a88e988e328309e6cf15134e445a72b41b4e4dfa18700d52101e9c09a1bcc909433a8f5b835847612528bf1797c5801c940728704a2a92f7e81cf002fa16b4258c953e694a999f48d5e3dd3de621d0dc537c846ec779739547b2203ccf9de7e28a83a478284efc63a8a8a6168788402e90070e109b7e8edb4d753dd4a9566c518b3999eb962e574571d138965b371f797115a50f9eb5aef7492f82c6c6cb438b7469647a22b6a1", 0xa9}, {&(0x7f0000002680)="69f4e0cac755bcd63db8e0ceeebab1595e741392cf5bb1c28be51914e24e3e560925d7df283679cd543af92f20eb1a0378b22ee64485f3c120f97c21f5002181f451d68dec0a83eac7f784a1b429db3213c96b153171388b0ff2272d8daa10eb0fa24f7ae4af3ca61a82579a617961c575e6545513c2e195f1f857231e5d56831d1bf15b8598e3771ad1f01969a0f3932c6034736d535630", 0x98}, {&(0x7f0000002740)="000a96f7d05ed0dc66b570780c8ab01f5294e038691085bda553b90e15c0aaa67569480af1a66344186af570f30ff26c6932f20c3c060446be56d52756ec975bea93ffd521bf01424221f9c350a9f52c386175c4257bfa0e1333684523010a0d887540e258caf274146203c36a965722b5b1962392fee3e1f587fb2243da69d77d08c04c238a15246bba41b8db9f9da8be0781e66a81f6b00d5b1bd7e9b9b41186dff116", 0xa4}, {&(0x7f0000002800)="c3a84b8bb5c21be090d8dbf6e3bdd9e13858b71ed650ce645012dd0fd4e5c2a898bcb48eb2d882f85d3119375cb5abcb368fc17b349952bb2814305fe0508fbcca20b5f71cc0596c7c519f744727ff3e883f862a725f4c51bd0b72e9fff6917a0b3f232b6c48d26dac63433fb0f7443a7aa6cd5dfe119abc34293863f54bb755e030596f075b0fd81bb3c87a67a7fb481f0e21ad30ff4e924bb3cb571bcc549ecac7dbeadc50c636c2ede17b1bc523b917f767ae8f01b9f38ecb813759a263621bdeef87e4c992c984801dbcf203959a905cf6ed8668e3bfa51e185a3ecaa9866b21241703315376e76558", 0xeb}, {&(0x7f0000002900)="f8346b91bc467b51c635cb000478521f00dd2dd087cd317df85769bf7d282198f1e6b70734bff51a3c3e97317a858e4cb2baacffae74f41308af333fcc8e68325ad53b671866513ebd9b0c4080588d66da82ab5fc53a4989d44cea49ff4b625803bea30ea6a9b83cbad68d7252c1f63b79d6cb744a09143a57d0f272354d1b12c0fd903db15cb67b3b", 0x89}], 0x9, &(0x7f0000002b80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r1, r1, 0xffffffffffffffff, r1, r1, r1, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff, r0, r1, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r0, r0]}}], 0x140, 0x40}}, {{&(0x7f0000002cc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002d40)="9324404eddeb7aa8f2e55b4fddd2bf3726f6e6bac5f1e5fd69b075627db99cd17c0d886ec64455899f760278362208afdff2f5ddd357262733ad1b7cfbf70d25389ce1eac1a30ecb30fadbf291e595125675dee92804922350e5ca0c63085a88e9089bf2c2d6315017c64f23e66450d6d6cdab294fa5a7b75de9415b2e7b27616cd6edd4b4d58a5a118dea0a200f0be224a701", 0x93}, {&(0x7f0000002e00)="89a8d656b8fe0dcb110bc1d5eba555d2839fd6de68c4e62f4a6e64c63f9bdc07f81244f555ce5bd6bbd79680497c7bb06e779bd2b0d30c0475e1748251d561cf3552c64243e40df16c329fb74744ec82ff88abb2ed9a323c4691075b6aeedb78004a4f864af278", 0x67}], 0x2, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r1, 0xffffffffffffffff, r0, r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}], 0x90, 0x20000094}}, {{&(0x7f0000003140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000031c0)="1b854e711b00771e4e19a4e63a2a645dac843e13cba2b6280344b118cfa7768f2a0a31e1e7e02cd4ace6349f719bcca42896ea239bbd95d8675b5c625f4ed9cbeddb2b81b7c23c8c9eefa7f63a79539285", 0x51}, {&(0x7f0000003240)="9a05491f717e1e56087bfa8b80385c65cbb847e0c83948bb8886ab27db71cdc6ebedc5cc969b065011c65a9400aa41d38745da0bebbfd475606a80907e4d95c8f07bf3c929f01949a0cbed2cf6b07f31d8b7fbb603789f5e325f44f33eaac6809e6b1abe1ebcf27ac519e3d22ef57fab814f3887bf97064b2591c605a8f3c0fbebf28c3ba1382abc5d5072b8ab1747fbc525e058ce7cf6fd1aa17682215982f05982360c593f5cc081aa3046524fc0fd8468a4eea88bddd24cde1d4613be9319a115db69af33afb63cb0084d86b0176263b06dc28c0b9f3a01d7426951013c81f8ad304fbb11370a763e47f5f3ce3ea28184fff106", 0xf5}, {&(0x7f0000003340)="ce363cad7fc265869344ac46adadfb891ae17bdc74eddd5eccf1bd482c3c902918dd66a0e152bbfb3ca9210cc6f783b61f4fc64603e26ae00ae04293286d57dee7920fd710b018b86f59f5ae18f035b6e9e2bc56f24d82e88f32bed7d71a5c4ce85713311978b008dc8ba495e840be31658dc933cfb6aa11d025b50d37fa701953e254a9d0e166a1631ea9fa03a3b9efb4a34b1e567d7627382c7f8e0a71c97d90f8c73eeee9d5e526bcbff28ac8888d3b3c596d0a9ec5bfdc2d40469b3a", 0xbe}, {&(0x7f0000003400)="785cf5146b01a9d63f876179601d4a5804a925", 0x13}, {&(0x7f0000003440)="a04a8dd941d4346a094239952fb0840c8ccc5a01301bb8a9332815325796b8ba48b58cd14da3ccb3ef45dfbd3f8fc91ff82bf33192c1b3f7c4f92b875832cd3480860a62fa60519435b47f3f2761b300a801821ac08cde5460d08e6c91ab1233a2dc687ecef2fa97f552ecf3efdcee06059da0b9aaee85cfb72cc05dfdb23b32cf7aabe5949ebfe66f303d7541aaa8421cedd9522f56f57164c7e3e3936a76de7bc1246b6ccf30fb47b810b4a4a59c7c95fe95f14ca93e", 0xb7}, {&(0x7f0000003500)="ae77555411b4ede63e2995bad8191a593533c96bec4666a22cf5a87e23ba6a497e25bdef6e1aae9c2272c26a2a27baed802f9717d11f632af7ec5e038eb56ab3f74a8beb931683f80ec646f980ab43dc1f0a52194c62a293d6c97a7afef1c85ab5f24146f780d2b1acb3d0ad11b5c3d59f9754b019a913caeb982b8c008c349976260f8e4fc7a460d0e1da1e9e8544a316729b17c6e6d6966273122e1007d0e5bdccc6d8791664596e44a6cc2c18563713f8be93e7942b500cb73adf2a040d339ae2e7bd1b90888a9d91c08d71439eed696dddbf18c1c51427f292429a4901", 0xdf}, {&(0x7f0000003600)="e92f88060e0daa217e6be71e89422e83c5e625721a25e23031", 0x19}, {&(0x7f0000003640)="1a977e57b8870f7c877641281aba001c3314ef8587066cc92446dced4185ef8f03fc168b2517eed4d5996004ccc3da6fa2c15cb03e369f76f73941b75b02295b8c47b7b3fe4ec1e2ef88e004235974a7084d08a11a6c52347aa2a208caeab36f60e6283e61cf8f739acf1364d3eb447b82c021f3e02a1cdda78e719f3d98359ff1ff2f0ca1f276d886410b323465309aa0acf66c3a7b90f99de3e8315a3a3be9de494d3cff01ce67316470a3474799194a0a7bec7c4be505e2be5b9f605f7560406b6a6a8e774e2f49b721595b0692194aedf0d971b0dc13bc7bbb30527385353dca75c1a0abf4", 0xe7}, {&(0x7f0000003740)="772253e4d6cffd8090d37b9d2f310890276bae5cc047ef18aec02ed719c84e83a4b0232cfb483a078a6e33a68e151a282fec179f8ab749f371ec38c3383c44cf2c708b016c5ebf40725836ce590ac1aeeb905ac2353f3786a5f01ab4151b371ca5ad868bfd71139dfc5b589bcb57e1857a2dad61a5f686b7c45ef52b213f1ab9cc38c2a203cdc9951af2a94d16f616c6c4bbe3f7a6aec400e5dfe34f45cb7ac900340a67bff08d712fc6237211d9037d2d6a35c21b9b4e97f68157cd9214f2abaa2e2bdbe57fc6fe539f554b6371fb", 0xcf}], 0x9, &(0x7f0000003940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0, r0, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0xb0, 0x1}}, {{&(0x7f0000003a00)=@abs={0x7b179385d3365b9e, 0x0, 0x4e20}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003a80)="90f5d278b699d65ea466acdbcf9ab07c47f1dd80a1c803a1e236b5ef7663f1f24d3fff5d3d51f6a4d4bd256aa0a0dbddd81766e5c39bc8e476a3027de38cf9d1637c6abcf145c3f45e3af2d9902b33f69a5438dde53230b129e0898400", 0x5d}, {&(0x7f0000003b00)="ab4faa2d8c4aa93e2cea79db3f4474eca35470e5b5fe79f75d9227d1861063d6b0341fa7bba1cc9f135ca9c34d55d8190fafd831cec884666ee3872b6dd07324432b10eac4a420326cdf04ed59c8372e34b816dc11ad219f2909d9ec4d3791458ac6f49dda89f735414b14ded92d9e4fa9bcb23f92faf99eae23c48b782a796bff4c3e3c91d52efe5909dc866a321f1f18e619233f6074648d863e053ca8833ccaf866c17b422a02612fd1444a62d571495aad433553eba9d5abb36c9b9b8b96795c52e395e469b6cebaf7139225042ba66dfc8536d35607e35456f9921a", 0xde}, {&(0x7f0000003c00)="e768c43610d91d5f69d1f423de249c9e3a1dc6e7f0440b9bec806c5b4e6b0a2221c4e179b105f4c04c2ccb4b277584ee3043e64c5ee0cd3c4a382ac4cb18271555bfdab520aa60c8691e47defd34789e75dd342292f0dab111f2456c7ba8101819c51ba25460c4a61828992dad560ded85", 0x71}, {&(0x7f0000003c80)="57609840d0089d22b44bd61e94c85ba66dc33ad69bbcaabf565a79f523a0a082c57d3eec36f2ddcd1b8030a4b41ea9422392dc0ad066790d419387de44f1ac4258b565303ebcd9be72920781397697", 0x4f}, {&(0x7f0000003d00)="94e5d592afa883813b0e4ef7ae6e9d02372e41e1832cf8790413bf8c81e2bbe754053770e52d582ecaac00af14a9c2b9e3da9c15d1f57a0a478ce3d2b021ad321ec13d409156bde338de2d9b18a48c05f29c18989544d33cb49170b2d460be4fe87148c84f070ccbb2fcff", 0x6b}], 0x5, &(0x7f0000003e00)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x84}}], 0x6, 0x4)
io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f0000000180)={{0x3, @addr=0x8}, 0x8, 0x401, 0xfc7c})
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r8, 0x8010640b, &(0x7f0000000040)={0x0, 0x0})

10m11.9600108s ago: executing program 4 (id=192):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000014000010000000007910b80000008e6900000000000000a79babd3ef63bed6aea622b4770a50298bf70d3fbd7664f0051dd5"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000280), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="59d0000000000100000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
socket(0x27, 0x800, 0x0)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r6, r5, 0x0, 0x3a)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c1)
read$FUSE(r5, &(0x7f0000004740)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
fchdir(r4)
setresgid(r7, r7, 0x0)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)

10m10.725447325s ago: executing program 4 (id=199):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x80}}, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
vmsplice(r2, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1f6ff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)

10m9.290010613s ago: executing program 4 (id=202):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x20d8, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x40000, 0x108)
write$sndseq(r4, &(0x7f00000004c0)=[{0x6, 0x8, 0x8, 0x3, @time={0x8001}, {0xb, 0xb1}, {0x6, 0x7}, @addr={0x7}}, {0xe, 0x6, 0x2, 0xff, @tick=0x2, {0x1, 0x4}, {0x8, 0x22}, @connect={{0x2, 0x6}, {0x0, 0xff}}}, {0x1, 0x0, 0x2, 0xf, @time={0x6, 0x8}, {0x10, 0x69}, {0x9, 0x1}, @quote={{0x1, 0x7f}, 0x1, &(0x7f00000000c0)={0x2, 0x8, 0x0, 0xf9, @tick=0x7, {0x2, 0x4}, {0xfa}, @ext={0xb2, &(0x7f0000000380)="f2e8d9df256627df002a46cb32e468d7422c45b24793781c13ccbcd044d041533bbc170be24ae0bb67e901702d5c46fce1cb817f2bb2f8e1c994eebc378d64f657af640c7c525d16ed9c91b1048822e81ff6193c4ba0f84c0c4fa4a3efbdd4aa4001fdbfba883843e6eda26a5708c68674c75607dcc77411468bc20f9e6aefb6d7abefdf9dc6145b80603723c0a8c09b497c8354dd5e8b4d45cc66d7c6c367eafdcf3bbfe7d370787ed9107987e7833010a2"}}}}, {0xff, 0xd7, 0xf4, 0x8, @tick=0x70, {0x9, 0x5}, {0xc4}, @ext={0x73, &(0x7f0000000440)="f9b5429645162d513580a15e38d4c99f52cafe0affa8c0afcbb224d91b9d8498078fe928a2fc9fef4f6800314e7775d27533ba9b1678cb469f9b7fcc31d4d75c7f5f9f61818c3aeb06267cc5008c958dea38cc05d9ad2b5dc5a3f951ff0d74fb7469429f3e9b39988e18224254536580c2a3ab"}}, {0x0, 0x5, 0x8, 0x6, @time={0x400, 0xe}, {0x9, 0xf}, {0x56, 0x1}, @control={0x40, 0xfffffffb, 0x3}}, {0x8, 0x6, 0x10, 0x9, @tick=0x7, {0x0, 0xb}, {0x51, 0x5}, @connect={{0x3, 0x81}, {0x9, 0x2e}}}], 0xa8)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000001280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001240), 0x106, 0x3}}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard')

10m8.935345446s ago: executing program 4 (id=204):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000180)={0x40, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x2, 0x4}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x51, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

10m7.894706179s ago: executing program 32 (id=204):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000180)={0x40, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x2, 0x4}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x51, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

2m45.575775881s ago: executing program 0 (id=1611):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0xc7c, 0xe03)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8000)
setregid(0x0, 0xee00)
prlimit64(0x0, 0xc, 0x0, &(0x7f0000000240))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673c35d]}})

2m44.624381333s ago: executing program 0 (id=1613):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r4, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000006dc0)=[{{&(0x7f0000000800)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000d80)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x240488d1)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00')
r5 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r7, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)=0x7)
bind$inet(r8, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r8, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10)
sendto(r8, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0)

2m43.622355962s ago: executing program 0 (id=1617):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ptrace$peeksig(0x4209, r1, &(0x7f0000000200)={0x8, 0x1, 0x5}, &(0x7f0000000540)=[{}, {}, {}, {}, {}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000100000000000000da0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000020000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98e4ffffffffff55080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4, 0x8, 0x7ff, 0x282, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x4}})

2m41.292749903s ago: executing program 0 (id=1625):
r0 = io_uring_setup(0x4031, &(0x7f0000000240)={0x0, 0x400008d6, 0x4000, 0x2, 0xd3})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default us'], 0x2a, 0x0)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000040)
syz_emit_ethernet(0x7a, &(0x7f0000001400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xec, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x14, 0x0, 0x100, 0x70bd2e, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000)
pipe(0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "ea5898fd54af3a2862f56f49464868fd4c5712ce39d0524b26a66918fc7c863e8a217bd49324505982cf2075e3b337686a081ea6e695346542d6f41bdb163cd2", 0x2f}, 0x48, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
syz_io_uring_setup(0x6031, &(0x7f00000000c0)={0x0, 0x409b, 0x2000, 0x1, 0x40196, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000340))

2m39.190602928s ago: executing program 0 (id=1634):
socket(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0)
socket(0x1e, 0x805, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc0, 0xe, 0x1, 0x5, 0x10})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4)
sendto$inet(r5, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10)
recvfrom$l2tp6(r5, 0x0, 0x0, 0x2022, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)={0x6, 0x1})

2m37.561859226s ago: executing program 0 (id=1637):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
ioctl$BLKBSZSET(r3, 0x40041271, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x511000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000002740)={0x0, 0x4, 0x1})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
init_module(0x0, 0xa10, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c0003"], 0x10c}}, 0x10)
sendfile(r6, r8, 0x0, 0x20000023892)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)

2m22.12090119s ago: executing program 33 (id=1637):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
ioctl$BLKBSZSET(r3, 0x40041271, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x511000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000002740)={0x0, 0x4, 0x1})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
init_module(0x0, 0xa10, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c0003"], 0x10c}}, 0x10)
sendfile(r6, r8, 0x0, 0x20000023892)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)

15.61013299s ago: executing program 6 (id=2012):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68)
flock(0xffffffffffffffff, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000b40)=ANY=[], 0x10448)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000180)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000480)={{r2}, r5, 0x0, @unused=[0x0, 0x9, 0x4, 0xffff], @name="7a9506527b7180f0ce96c49e4d26534a9f05db0c7472da37e3c57347ff608f8b755c712e8cc8443eb4140d916fb654d82ffdf591c053b103c93728f0be23e06773b5e38e86dd41361990a9b042a759fd3a5dda8f94bd41c386ada7b595a0e850d67ab2b74d77ce1bdba85ea97d04d28c9484d0fb9328ea19a708a527d1541f6f1c16e960c15d55ab2a7c9bbadf0a86089cde7cb7f225002e72cbbe110c41d4267314e2eac7f0ad2a0c3431b0ce0cd66af3a0e97edf122adf0dc6e3dfbdf6f29e0a1ba1471cdd10e2bde5cfdc96bdca8d40999fcb79da7f328e07bc36a94e9c214eef92995711c16adcde84b441fe1d409ef4058f300f96b493590e6bf9a364cbf8bf83dec0dd018721cbee4633f38afaf67276127d56d50fc320c90607db5645fd2c69fa865e3e6f8f5ce788c0b5b16c46e40799c6cc27f8d5e3e2218a3e04e0695422bab7df9067c2edfe52a26f29fa348efd497a8343969a4030c03b552e032fde5e14541edede37f2927d7c45f3d7cb517ae8e404e9f2374ff9088656703df2abfa82b3ddacc5bd702e33711e34612c4f2d6950c97cf1e04a56fc667c93dc6755aced3fd806682475a9bf8489e8162f62eff7d08217b74c87efff33cf66ea85e957d3dc7e948ca295a20a92b92970a8bddd1ff1bf8d85c80b85e66c7dc4c11f03318369de9083276c04cd5fe03e34ddad6fd06ec1c0dd3779439fb413bf18f5c370666576dd272eecab1b30ec97362c6d2761e3f717e0a657b9bcb55e2120cae225dc2bf7baff9a7aa2464f11760f6dfd0be0c6dea6a6f59c60ded2cb4ac0b6cd7239d122541a768e8ac0a0589ce3b6d46751d5ec4802d27707833ef4e1a3903ae079bbfb74122c5ede7ee68e9fcd090bead2872f56c2a3aa3991dd0bd169343c8006b028429e0745e169beda2fa03be73dbbd665e075fce660ed575186a71610deb44692ff958189fa99a3bf7ace3a41e541ab819b8d16cc2a3f606cdabe90e11a3d6e9f9ef25faa316d04055cfb6e56e5ebfbc7983c9448bd735eb2284687911d9e7c466ab70163c665f1f38560a09bbb24a96a0c024fe67e110e3306b249c09837c11bebcc11682a12ac8b7eb2b8df414f798f56eaee12cb6911228aa152ceb5443ff3d9d4c576334f797feb61b96aae9eb6ab29490756b04c94eb32c5ff009663f1884982847a50a1dcf00ce9b4bc5ca34867d6e87485f98464042394a33ab3272ed67369cdc0bd3b76c9efd816064c5dd0900a3733f665e65a3dd49cfa73067031c69ee51f8a33f9478e78174d3cd647d3d8211881e9666ba8c3bb98f45da1f59a66cca263fa39035d804cba36145959388a2899d6b24936eed2c3a9ac98563a5f895fd37fa849a6855444a5100bcafe415792d64159b3b8c374434ea669d999c8a78c56adc37b2f9293135596b5fb6e67f9374a01585f2ce284cfedb64c88fafcafd33178f8a5029bf749361438b769bad8d2375401675de11275049b10b21dce0d1cf980901c5d223b92325e2feda603cc78a1df4b5ca0cd3e410a65ebed187c472e51b60c230f2cd2200f736fd00425b26580fcc71a05b59b0801ac2422c119258e04d51fa12a70fb3b4f02cb9b961e45b61ac0867c739997eab9bb3be377558b90a4b1d63cb4f7d04c41990653cc4fd76c94827f6805c5924f2ee4c075a76928f297a60baa07c344a6716d5baf77e1e2689e196b7e77f83f24dcf4168e1554ac9d54f8b5312fc58ea0cdb4976bde69b54c027eb83a27b256bd79e290127b2784f59a1b22c37292f3157e36e424b0fea91d883c0db1d380183b2a6575694100668eb9d4fcf103eb5c53092f9b8e337c983de9fea238056f75b6da172f75250958ca32e2866f6b623d0de45b81fcaee4664ab0413d047b0f4b8119c47ccd69ec6e847905a5b14d93539ee2a5200f968288497d37341d3242338469cf0ba6911f107f77e926d9c690334dc1e1ee749c5170107c17a089b24cfa9d8d1eb70fdb8af81a7c90f4d6f6f285f9a32369d99a237fd597fb6222d1a02a964c4130694554985af10ed22045f5d17b03eb4163be0e3f10671da08f0e0be7d849ab2183de4e554c365fd7a6f441e7173ae241745fa65ee4d14a5e9b8b6d992a9a40ba079da4079b6b8db1b281b62b6e0bb5b8d7e553489c7783828e6b354d8b0adcd8d9bf16ca4c818375100e54cdd3723fbfcea1cc2800656c1e33e0d5af0500a285d5edbddb6bbd914749bd5ab31bc6e5e22db67c9b2e0c8c963e33e0a68cb44d341ac55670bdf774bd6c960f23a018cebfea356324b986d165d193d26340542f2e1b0b4655bac176dc37b8298c6999a187756169f248d4795183bad90637e9d2930c42a96d6a900d34feabeddf2dfcbc0b5d13a70299f9c8ec95a33534905f8e118256e151d08ba31f714ea3c13909bc12348ff7ba1856b929d8d6e0fed328280e027de49d44e687beca00094737da1547b7a224046f0cbddc4a408c2ca0d376c5b9caea360395a78712925cbadbc4a193865774119b1debf6b77714055952cb2b60400d46e043832d8a52afdcbff9668c4fbba17f6966ec01ed084d78a9c889ced4224d697df81a9d4ef96e767cba970e633fa309deea76cb6ffc14172dfe56f85d553b72354a2f4f08d126f624c29872e4186e73f9f9042590edaf4b4e058d3801eb9cf1de8e83c368bdef256d6ff0bd6297a3843fb864aee2a62ee06781c817ac7eba34242b5ae8bde6f8e6ea926ace42f1a9f31eacce11af0ef66ff9f1798a754a812c7c9e9f793a28f6d31736809ea804df2ace07c0c151b481282a091563a454a07631017c92ef68092ebfb4169caa54eef51a5b86107117faa7d455922422419a3e81000193d33dc586cfc43d505fdc49bfcefef7c958b3bcf2061df50bd9dbefcf02aaf00b3cad498f0845932fea6e801eadfee3133c963987266b1ae96a9d11eeb5c83d92f62fef65b38b09fd2d7a81313ac856b529bb929911bd759fab08473e756b9b284d25278223e2b72eddb09ed7eab9cdbeba3d1fb101009a7231fbe3baf57d6f1534e4ba83bd8ec55bd9cd139d574aacb6a33e6df52510f5c5ab1f730f41d000ad6c3c5a49a64d63f6ce2919e941b0c2981b9e8c849b38c78493986266eb92693ba8bf329687c7b164bfd86f3bb24e03710c0d8c362846649ca9ef5a99eb45e3f77a7b41ebc1cc918ac40e46e84aab53004dc86e4118914823df53c15886278f85bc5ef627a39160f037ca44343849ed9636087255e55ed6bfa7412d194b721e6917fc74f6fcc22f299ad0950825bbd3c8e11dab1cb7315396accf0cc40434bcae1345dd70623bb2d28c8fa280fa73a488d2835b90392a51c3c817b185c7e24f694885756e5eb251fbf62019e25c606253a0612a81d4ef0d176febf67e1a6de75710691adeab678cea2dd37a4c20e17f5d1e815d634b465c997e2737919571e8fab012b4eaafbd1e59054e2951f9b79c6faa80548747fd45c04c099c4f347000ca6a4194b14634aaac9d020c5b60f0b8fa28580b809c1400b24f5cca4dc935116c2efc33faa61803c7344d74995150f4c69ea85ca86c8ae33d087e436b14a59310e746af59d382608a148847df0454393f93b2ceef191c1bd53ab9f6c0d3d7c327bf2ddc898c65fc7fc4866bfc200c34701d99249f001125d47e3a47c70aa24ec331eb4b6bd1cecdfdea9bc426208b452dc50eecb1c5f55fd41426cd2481fc0678c698092b55767ab19f11d78084bfaba71d05787c8b53bd2ad7e5ef1c8d4c6c9e00eaf133c6681ef886ef09a47dfe8023ed4af14049c551f7873ec130145e74758d0ee710ef5544891400597159ec2711b642abc5a7245cca614c8d9fbd95e0ea94d202776afe2c2371eae08609012eba0889f396b1e1a6dba780bd01d9cf05ecdee3dbc90e6170d98063f9219875ecb5ab9bf1580a9cdeaee7a75cb66a52fd6002f8f202f6d080b2672267841cd63eaeae74ca4b919b07f42276ee33726e90e1ffc54956b7ca80dbada9f5a80ed748d0354c6404d0f101a66f1f2057420403aeec5e84e66b919beae2c52392725da39c8b9f2c63fc19f1ad51acf34a4eaf10018cbc36904226e5979f585b056d6e933d8039eeef892c3621f2cd2a23f2a228c3a392fc743fba7d57fb6ced14d861144ebbac06a86419ffcbc792b40ed83aad9369cbba547bfc98dd862abfbca3b9e747f9e89f203a41180ca1c5852154a9566f962bb00a78f82052eb7b2fe9ff1fe8814cbe53d76678169b0e6769fbf3f0593f2422679efd3ecbd4ae22cddee3582d246e3c47270f6bfbee01b7f48f9280709cc75f86a11629f5e3fd11f8556d07c1a8e057803a003b90ccbb03719bf41ca1a8f04225117f3b47a5f62fd24e232b68b93a0a46e66ab77dcf3778f7bede204477cc68460a1cd4b835f3e3b972a736caa2574807f1704fcfa46825303737056d8ae23bf900e65da40535998bf89f87eea3b45bab4fac5efb1f5195192fdd3196526b5dc27a5586abfaa85ec94b2f2712465cc831fc85648efb914233f7b7262546390717d8773216ea668cb9d4991e6873a2567c8049dbd1ac04544e40b8aa32ade00314f497b5f3b81e794509e0ff5074740ea83b5d3523f738da98bd366bbee96b3df21a3f85709c8b180be6fa741447891562b1644f3653126f52e23c58ceba32554c377c54f40fee5a294d7cb99126df73252dc572f357308bb0b6eb4ef2557ae3ceea392c5f02b79c8a7a9d23d7a931e3d8d7f22616ef26b430ab1e2918479c15d35548da91fd3231998f34cbd5ef13bec150a7fb829fdd509924c4a596cd9a494afdc1f10137c6d0aa4d0e76b41bfeac868a9bed51c77c23ccfe662f69ee69feb1631a2d39a9c9463e28062601cb9fcf61926b572d1a19c8b50b4f33d5fea5e1ae9d8e214f71c0b4d5a5555ac3b0e6656b14f269df68965ad70783a91ff42fd8e6bfa62e737005605abcaf4be8b2e6cef29e21cdd6e685489d38ac09c2f4067083e7f6da8d1e6426ef701e4bb97a9672e656343e51372e3f26e420a7087d12436adeaefc2dbd7dd22bf69b249fc7a3d2768778956196d4747b7df6d2292852907d9e26e6c5ded35f75afd6d3d03e14ceba35624fc76d6920987d6bf762fbcc9982d616befac511f39214034c4d8683e43ce3c043c992b526c02c0fa5689d4f995fd7799cde80b0d6a6072b854d77241a844b3952bebd3a386c9f69af1ea45e24be05c5e29348f64e72ef29cfe8a3f8b0e41c1a98fd7121c0051d484a9dcd33e5da7e66248d20fed33a5d4119d52d46acd31fec5ec5b897f1ec0caac2e4a5ecdf655171966f14012253768f724dd450db28931da24ec4051e8f38ed459e5310a9494824ccc87f444f93cd5fbe4f1fbd376d094c85d61f61971ea6974391f381ae4a5d884b28b7c3e713c003881aaad48fc4b3b97fa83111cc13e4a1ced27fcbb7c60d3d6b4d7f101a7d5c7c47469e37fbccdbd349ddfdb96b1cab1b94bd3c7b06e9fabbd2eb5286750792f17f3eec112f4be6254c110d3564d5cf6cd10780dcd01bb937b552b8edde743de6a0cc481075c625496df40e0b608c91561ddbc85af205bd7799547559c4b20ac24059508837fbb02bdcd1b9fc27fa9118411685b9cc052cf7ac9630a2bb4f39e91e3ab08bf4358179e9c36a7198f7fe02d8e6707791aa9410ee958c89413ffa835fdde3527269013fc35eeb38cd20b9a6f8"})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r8 = socket(0x10, 0x5, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000ffff000000000800080009030000e6be2c76e03d3ed4f6813a40872758e016901addeac7a6145165b5efa3d9a3723723453ae2448a1ac026e83bf2637096cdd5c1fd94d3d5366968c9d68b5771cfe99cb1580300000000000000649a4a27767c498a08ebbb19bd4b50b0cfeac1ebc8759b22fd41aeba47484646afe0c550d2813db18cb06cbd8df369348dea8c7f067340152fbaf54ea01bdef4f9db69518520e7f8cc23e792e083b19c57d43ee77cd968a9a72f0500"/209], 0x34}}, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14)
close(r8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r12 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
copy_file_range(r11, 0x0, r12, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)

14.315767206s ago: executing program 5 (id=2018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c)
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000380)={0x0, 0x18})
socket$kcm(0x29, 0x0, 0x0)
syz_usb_connect(0x1, 0x24, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100))
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r7, &(0x7f0000000480)=[{0x3, 0xff, 0x0, 0xfb, @time={0x8b, 0x6}, {0x5, 0x10}, {0xb4, 0x1}, @ext={0x8b, &(0x7f00000003c0)="73c2b4a2a777df79cdfdef84a665c49584c70253d57b9996b91bfce663e7cabadf68094983169b9ca4a7011a082ba35ec861a4c90b93b7651f9421ad5e0bb918971c02b1adc8e5c64d41ee6a52a6543c6ffb3692dc5da8909fbabf5c90527f336159f0ae75439a37b69b8db149eefb5ee48d4eb073ca6eb601dbefe74e5e5f524f23e98493030000002bd1"}}, {0x3, 0x3b, 0x3, 0x44, @time={0xd, 0x2}, {0x5, 0x4}, {0x6, 0xf5}, @queue={0x5, {0x1}}}, {0xf, 0xf8, 0x2, 0xf7, @tick=0x1, {0x2, 0x9}, {0x40, 0x2}, @result={0xfffffff9, 0x101}}, {0x8, 0x80, 0xe5, 0x3, @tick=0x7, {0x9, 0x6}, {0x0, 0x27}, @connect={{0x7, 0x8}, {0x6, 0x81}}}, {0xf5, 0x1, 0x6, 0x27, @time={0x4a, 0x4}, {0x2, 0x1}, {0x4, 0x4}, @result={0x7a59}}, {0x5, 0x1, 0x2, 0x2, @tick=0x80, {0x6, 0x26}, {0xd8, 0x4}, @note={0x1, 0x94, 0x4, 0x0, 0x81}}, {0x1, 0x6, 0x3, 0x9f, @time={0x7, 0xa81}, {0x5, 0x5}, {0x2, 0x86}, @quote={{0x6, 0x9}, 0x9, &(0x7f00000005c0)={0xfa, 0x10, 0x80, 0xe, @time={0x7f, 0x80}, {0x3, 0xdb}, {0x9, 0x4}, @quote={{0x4, 0x6}, 0x7fff}}}}, {0x2, 0x6e, 0x2, 0x80, @tick=0xffffffff, {0x0, 0x5}, {0x3, 0x4}, @connect={{0xe8, 0xaa}, {0x2, 0x6}}}], 0xe0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e23, 0x9, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0xff}, {0x100000001, 0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x1}, {0x8, 0x340000000000000, 0xfffffffffffffffb}, 0x8, 0x6e6bbf}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x804d5, 0x3c}, 0x8, @in=@private=0xa010104, 0x3504, 0x1, 0x2, 0x5, 0x1000, 0x916d, 0x4}}, 0xe8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

13.785607361s ago: executing program 6 (id=2020):
r0 = io_uring_setup(0x4031, &(0x7f0000000240)={0x0, 0x400008d6, 0x4000, 0x2, 0xd3})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default us'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000040)
syz_emit_ethernet(0x1cd, &(0x7f0000000b40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "76a732", 0x18f, 0x11, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, {[@srh={0x6c, 0xa, 0x4, 0x5, 0x8, 0x20, 0xd, [@loopback, @remote, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0]}, @routing={0x6c, 0x2, 0x2, 0x7, 0x0, [@private1]}, @dstopts={0x1d}, @routing={0x4, 0x8, 0x0, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast1, @private2]}, @dstopts={0x33, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}]}, @fragment={0x29, 0x0, 0x80, 0x0, 0x0, 0x8, 0x64}], {0x4e21, 0x4e24, 0xaf, 0x0, @wg=@data={0x4, 0x1000, 0x7, "5bdaff589ea50cc955cdf6be1c85b29feb11579b9e51b9c31ad476dbb7af0bd5efae87b75754d995ab242e8f9ff9ed1f26ecc8d960c579e14ff8820fd52747e09d1ef7d0816fb1abb5316d542e5110f44842c027e9aad4607044ada2d6a63f1f8eb690392da8729f64df96fadbb7f79e15306147ceb43c687f39aef0497c254a70da0ab56acf70faa727cd97a0606ce09e6bdd621b378f"}}}}}}}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x14, 0x0, 0x100, 0x70bd2e, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000)
pipe(0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r3 = getpid()
sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
syz_io_uring_setup(0x6031, &(0x7f00000000c0)={0x0, 0x409b, 0x2000, 0x1, 0x40196, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000340))

12.134759522s ago: executing program 6 (id=2021):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r5, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd3ca, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x1, @pix={0x0, 0x80000001, 0x43564548, 0x9, 0x7, 0x200, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1}})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000008010100070000090900010073797a00"], 0x20}}, 0x10)

11.600267874s ago: executing program 3 (id=2022):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0xc7c, 0xe03)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8000)
setregid(0x0, 0xee00)
prlimit64(0x0, 0xc, 0x0, &(0x7f0000000240))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673c35d]}})

11.481614297s ago: executing program 6 (id=2023):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20480, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1}}], 0x2, 0x0)
shutdown(r2, 0x1)
acct(&(0x7f0000000080)='./cgroup\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xd, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000200000000000000340e000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000550901000000000095000000000000001801000020786c250000bfa100000000000007010000f8ff15009e02000008000000b7030000400001008500000006000000b7080000000000007b8af8ff00000000b7080000040000007b91f0ff00000000bfa100000000000007010004f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/196, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b700000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020)

11.034345061s ago: executing program 2 (id=2024):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000300000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000004800010073686132353600"/199], 0x140}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000"], 0xb0}, 0x1, 0x7}, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x60500)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
listen(r5, 0x1ad72f7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x48}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0)

10.361035802s ago: executing program 3 (id=2026):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$packet(r0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20011, &(0x7f00000023c0)=ANY=[])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000006200)=[{{&(0x7f00000023c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000002440)="be68c0c029ae49a1b7cb2433453e226f1a4315186794736237fc3b7a01ccd8b55bd3af65cadc69f381e483ca561bc57b08a0bf2225c183e14188c2cf816e69b851cad20fe8c76b100c3c3de267f52c45cd2cc603fb73ecfd851866930426ce4ef3f84f3b3d5f2fd6d9a9570a66e15fcea1f5737b6009c26cea535650297452a920e630", 0x83}], 0x1, &(0x7f0000002540)}}], 0x1, 0x420c0)
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x10001)
recvmmsg(r5, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/102, 0x66}, {&(0x7f0000002640)=""/108, 0x6c}, {&(0x7f0000002500)=""/34, 0x22}], 0x3, &(0x7f0000002700)=""/26, 0xfffffcb4}, 0xb8}, {{&(0x7f0000002740)=@nfc_llcp, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/186, 0xba}], 0x1}, 0x80000001}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002940)=""/236, 0xec}, {&(0x7f0000002a40)=""/165, 0xa5}, {&(0x7f0000002b00)=""/115, 0x73}, {&(0x7f00000060c0)=""/182, 0xb6}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/114, 0x72}, {&(0x7f0000003cc0)=""/74, 0x4a}, {&(0x7f0000003d40)=""/41, 0x29}, {&(0x7f0000003d80)=""/24, 0x18}], 0x9, &(0x7f0000003e80)=""/40, 0x28}, 0x208c}, {{&(0x7f0000003ec0)=@x25={0x9, @remote}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003f40)=""/196, 0xc4}, {&(0x7f0000004040)=""/63, 0x3f}, {&(0x7f0000004080)=""/67, 0x43}, {&(0x7f0000004100)=""/82, 0x52}, {&(0x7f0000004180)=""/188, 0xbc}, {&(0x7f0000004240)=""/7, 0x7}, {&(0x7f0000004280)=""/236, 0xec}, {&(0x7f0000004380)=""/177, 0xb1}], 0x8, &(0x7f00000044c0)=""/144, 0x90}, 0x3}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004600)=""/202, 0xca}], 0x1, &(0x7f0000004740)=""/166, 0xa6}, 0x800}, {{&(0x7f0000004800)=@hci, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004880)=""/116, 0x74}, {&(0x7f0000004900)=""/187, 0xbb}], 0x2, &(0x7f0000004a00)=""/215, 0xd7}, 0x6}, {{&(0x7f0000004b00)=@sco={0x1f, @none}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000004b80)=""/246, 0xf6}, {&(0x7f0000004c80)=""/134, 0x86}, {&(0x7f0000004d40)=""/53, 0x35}, {&(0x7f0000004d80)=""/138, 0x8a}, {&(0x7f0000004e40)=""/4096, 0x1000}], 0x5, &(0x7f0000005ec0)=""/34, 0x22}, 0x6}], 0x7, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x6, 0x132, 0x3})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})

10.266870876s ago: executing program 5 (id=2027):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0)
recvmmsg(r0, &(0x7f0000007a40)=[{{&(0x7f0000001300)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/136, 0x88}, {&(0x7f00000025c0)=""/249, 0xf9}, {&(0x7f00000026c0)=""/65, 0x41}, {&(0x7f0000002740)=""/35, 0x23}, {&(0x7f0000002780)=""/249, 0xf9}, {&(0x7f0000002880)=""/42, 0x2a}], 0xa, &(0x7f0000002980)=""/174, 0xae}, 0x8}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ac0)=""/80, 0x50}, {&(0x7f0000002b40)=""/73, 0x49}, {&(0x7f0000002bc0)=""/158, 0x9e}, {&(0x7f0000002c80)=""/183, 0xb7}, {&(0x7f0000002d40)=""/193, 0xc1}, {&(0x7f0000002e40)=""/236, 0xec}, {&(0x7f0000002f40)=""/80, 0x50}, {&(0x7f0000002fc0)=""/112, 0x70}], 0x8}, 0xff}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/187, 0xbb}], 0x1, &(0x7f00000031c0)=""/107, 0x6b}, 0x1000}, {{&(0x7f0000003240)=@isdn, 0x80, &(0x7f0000004700)=[{&(0x7f00000032c0)=""/248, 0xf8}, {&(0x7f00000033c0)=""/86, 0x56}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/179, 0xb3}, {&(0x7f0000004500)=""/191, 0xbf}, {&(0x7f00000045c0)=""/193, 0xc1}, {&(0x7f00000046c0)=""/14, 0xe}], 0x7, &(0x7f0000004780)=""/142, 0x8e}, 0x80000001}, {{&(0x7f0000004840)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f00000048c0)=""/69, 0x45}, {&(0x7f0000004940)=""/205, 0xcd}, {&(0x7f0000004a40)=""/118, 0x76}], 0x3, &(0x7f0000004b00)=""/68, 0x44}, 0x8}, {{&(0x7f0000004b80)=@l2tp, 0x80, &(0x7f0000005280)=[{&(0x7f0000004c00)=""/199, 0xc7}, {&(0x7f0000004d00)=""/206, 0xce}, {&(0x7f0000004e00)=""/216, 0xd8}, {&(0x7f0000004f00)=""/238, 0xee}, {&(0x7f0000005000)=""/8, 0x8}, {&(0x7f0000005040)=""/179, 0xb3}, {&(0x7f0000005100)=""/79, 0x4f}, {&(0x7f0000005180)=""/211, 0xd3}], 0x8, &(0x7f0000005300)=""/211, 0xd3}, 0x88bf}, {{&(0x7f0000005400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007640)=[{&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/178, 0xb2}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/29, 0x1d}, {&(0x7f0000007580)=""/79, 0x4f}, {&(0x7f0000007600)=""/14, 0xe}], 0x6, &(0x7f00000076c0)=""/59, 0x3b}, 0x401}, {{&(0x7f0000007700)=@alg, 0x80, &(0x7f0000007880)=[{&(0x7f0000007780)=""/200, 0xc8}], 0x1}, 0xdbd}, {{&(0x7f00000078c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000079c0)=[{&(0x7f0000007940)=""/85, 0x55}], 0x1, &(0x7f0000007a00)=""/24, 0x18}, 0x80000001}], 0x9, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280)="5d5b18f9bf", 0x5, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xc3)
keyctl$set_timeout(0xf, r3, 0x6)
mremap(&(0x7f0000374000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000180))
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b1e2a00090582eddf02000000"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f0006ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x20042894}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x2, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000008c0)=[@wr_crn={0x67, 0x20, {0x3, 0x7}}], 0x20})
r7 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00011000347e0904000003fe031f000200000009050502000000001009ed8a1e2069fd25b2d2bb9552d67c6b6c14813272b811501f225d71efbfdf52d6998b912603afb51487b1227cd636d07cf1b6e0ab8feee58401a3b4073a3d02cbdad0f17d99432cd82e24401ee6f44f5baa062bd88ebfbe810dc8c8490ed037743bc3e127154926fb9457ca1fab46e90eef0ff27ec2b283e8b857cee95be3749072e47a"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)

9.856811937s ago: executing program 6 (id=2028):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

9.501961084s ago: executing program 2 (id=2029):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
ptrace$peeksig(0x4209, r1, &(0x7f0000000200)={0x8, 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4, 0x8, 0x7ff, 0x282, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x4}})

8.582951389s ago: executing program 2 (id=2030):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0xa7, 0x48100)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x3, 0x400, 0xfffffede}, {0xfffffff7, 0x4, 0x8bb4d08f, 0xfdfd}, {0x2, 0x8}})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2)

8.307305505s ago: executing program 3 (id=2031):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0xc7c, 0xe03)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8000)
setregid(0x0, 0xee00)
prlimit64(0x0, 0xc, 0x0, &(0x7f0000000240))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673c35d]}})

7.346279628s ago: executing program 3 (id=2033):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xe0}, {0x0, 0x6, 0x2, 0x1}, {0x200, 0xe, 0xb, 0x9}, {0xfff1, 0x6, 0x0, 0x1}, {0x90, 0x4c, 0x6, 0xd56}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x41040000, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224401, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x3a, 0x0, 0x400006}]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x6}]})

5.937377439s ago: executing program 1 (id=2035):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{0x0, 0xdd12}], 0x1}, 0x20040890)
sendmmsg(r0, &(0x7f0000001c00), 0x0, 0x40840)
r1 = socket(0x11, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x22802)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x7f, 0x0, 0x400, 0x1b6, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)

5.653312027s ago: executing program 1 (id=2036):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000014000010000000007910b80000008e6900000000000000a79babd3ef63bed6aea622b4770a50298bf70d3fbd7664f0051dd5"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000280), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="59d0000000000100000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
socket(0x27, 0x800, 0x0)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r8 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r8, r7, 0x0, 0x3a)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c1)
read$FUSE(r7, &(0x7f0000004740)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
fchdir(r6)
setresgid(r9, r9, 0x0)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)

5.546212404s ago: executing program 2 (id=2037):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500800000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000001000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="0a00bc04b67e0020"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7})
r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f00000003c0)={[{}]})

5.168256466s ago: executing program 3 (id=2038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @local}, 0x86dd}}}]}, 0x38}, 0x1, 0x3f000000, 0x0, 0x22004804}, 0x40080c0)

4.374962866s ago: executing program 1 (id=2039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0xffffffffffffff17, &(0x7f00000000c0)='T\xb8K\x8e\x8d\x852m\xde\xcc\xf3w\x9b\x86\x10\xae\xfc{\xa5\xda\xe5\x06h\xa9\xbfq6^\x9c\xd0\xba\xa2)S\xbc\xf82\xc0\x12jN\xf3\x00\x00\x00\x00\x00\x00\x00') (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) (async)
listen(r5, 0x4000)
close(r5) (async)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) (async)
r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x9, &(0x7f0000000440)=[{0x8, 0x2, 0x80, 0x40}, {0x5, 0x4, 0x3, 0x4}, {0x4, 0x3, 0x1, 0x9ee}, {0x8, 0x3, 0xf8, 0x4}, {0xad, 0xc, 0x7, 0x2}, {0x7ff, 0x9, 0x28, 0x5}, {0x9, 0x6, 0x5, 0x1}, {0x7f, 0x40, 0x0, 0x80000000}, {0x4, 0x8, 0xe, 0x80000000}]})
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010024050000fddbdf25021f8bc8", @ANYRES32, @ANYBLOB="00f132"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)

4.109687119s ago: executing program 5 (id=2040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000445000/0x4000)=nil)
r0 = getpid()
sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x627)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r3, 0x0, 0x24040055)

3.978023064s ago: executing program 1 (id=2041):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_create_resource$binfmt(0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x5000009)
fallocate(r4, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x2010, r4, 0xffff9000)
r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
close(r6)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f00000000c0))

3.501910854s ago: executing program 3 (id=2042):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000)
socket(0x6, 0xa, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0xffffffff, 0x401, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0)
close(r2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000000c0), &(0x7f00000001c0)=[<r3=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x3, 0x5})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x2, r3, 0x8, 0x10, 0x800, 0x4, 0x20d0})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x16, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0xfffd, 0x0, 0x0, 0x1, 0x7}, 0x0)
mq_getsetattr(r4, &(0x7f0000000100)={0x4, 0x5, 0x8, 0xa000000000000000}, &(0x7f0000000140))

3.016470984s ago: executing program 6 (id=2043):
syz_emit_ethernet(0x4a, 0x0, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
mlockall(0x3)
io_setup(0x202, &(0x7f0000000200))
recvfrom(r2, &(0x7f0000000040)=""/78, 0x4e, 0x12000, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000340))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000000a0a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c67127025c1d97bfbf788a83baa88a8", 0x20, 0x24004800, &(0x7f0000000100)={0x11, 0x88a8, r4, 0x1, 0x88, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, &(0x7f0000000380)={0x579147f3, 0xf597, 0x1, 0x7})
r6 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = getpid()
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x4c, 0x0, 0x0)
sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
kcmp(r7, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)

2.997064429s ago: executing program 5 (id=2044):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f00005c1000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000200)=0x8, 0x9, 0x2)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x29, 0x0, &(0x7f0000000180))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
open(&(0x7f00000003c0)='./file1\x00', 0x43c243, 0x1df2a23c5997fa3d)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
connect$ax25(r4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x100, &(0x7f0000000080)=0x9, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})

1.966042084s ago: executing program 5 (id=2045):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.863966646s ago: executing program 2 (id=2046):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0xc7c, 0xe03)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x8000)
setregid(0x0, 0xee00)
prlimit64(0x0, 0xc, 0x0, &(0x7f0000000240))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673c35d]}})

1.408931788s ago: executing program 1 (id=2047):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x8000, 0x5fff, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)
r9 = creat(&(0x7f0000000040)='./file0\x00', 0x21)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000002dc0))
io_uring_enter(r9, 0x625, 0x4c1, 0xc1, 0x0, 0x0)
syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8], 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00'})

621.69261ms ago: executing program 5 (id=2048):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000006dc0)=[{{&(0x7f0000000800)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000d80)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x240488d1)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00')
r5 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r6 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r7, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)=0x7)
bind$inet(r8, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r8, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10)
sendto(r8, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0)

538.25715ms ago: executing program 2 (id=2049):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c6176650000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

0s ago: executing program 1 (id=2050):
syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1760000}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

9] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  586.427681][   T30] audit: type=1400 audit(2000000152.090:1087): avc:  denied  { write } for  pid=12616 comm="syz.3.1636" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  586.496770][   T30] audit: type=1400 audit(2000000152.090:1088): avc:  denied  { open } for  pid=12616 comm="syz.3.1636" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  586.528254][    T9] usb 6-1: Using ep0 maxpacket: 32
[  586.545677][    T9] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  586.566360][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.590536][   T30] audit: type=1400 audit(2000000152.160:1089): avc:  denied  { ioctl } for  pid=12616 comm="syz.3.1636" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  586.620414][    T9] usb 6-1: config 0 has no interface number 0
[  586.636876][    T9] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  586.674393][    T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  586.742977][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.790676][    T9] usb 6-1: Product: syz
[  586.804986][    T9] usb 6-1: Manufacturer: syz
[  586.819060][    T9] usb 6-1: SerialNumber: syz
[  586.880378][    T9] usb 6-1: config 0 descriptor??
[  587.098635][    T9] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  587.108937][    T9] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[  587.121925][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.130500][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.153038][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  587.322280][   T30] audit: type=1400 audit(2000000152.910:1090): avc:  denied  { module_load } for  pid=12624 comm="syz.0.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  587.384413][  T945] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  587.883489][    T9] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  587.990269][    T9] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[  588.040503][T12647] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  588.047038][T12647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  588.193044][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  588.267096][ T5808] usb 6-1: USB disconnect, device number 33
[  588.374685][T12647] vhci_hcd vhci_hcd.0: Device attached
[  588.418309][T12650] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9)
[  588.424862][T12650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  588.473530][T12647] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8)
[  588.480079][T12647] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  588.488983][T12634] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1637'.
[  588.524220][T12647] vhci_hcd vhci_hcd.0: Device attached
[  588.570092][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1641'.
[  588.630144][    T9] usb 35-1: new low-speed USB device number 4 using vhci_hcd
[  588.642448][   T30] audit: type=1400 audit(2000000154.250:1091): avc:  denied  { getopt } for  pid=12655 comm="syz.5.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  588.680590][T12647] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13)
[  588.687215][T12647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  588.756743][T12650] vhci_hcd vhci_hcd.0: Device attached
[  588.765781][T12647] vhci_hcd vhci_hcd.0: Device attached
[  588.787724][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'.
[  588.865260][T12650] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11)
[  588.871910][T12650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  588.919827][T12647] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  588.933201][T12670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20)
[  588.939863][T12670] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  588.981331][T12650] vhci_hcd vhci_hcd.0: Device attached
[  589.098430][T11136] usb usb44-port1: attempt power cycle
[  589.119085][T12670] vhci_hcd vhci_hcd.0: Device attached
[  589.195402][T12675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  589.233047][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  589.344302][T12647] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  589.372245][T12671] vhci_hcd: connection closed
[  589.372610][   T49] vhci_hcd vhci_hcd.1: stop threads
[  589.373449][T12660] vhci_hcd: connection closed
[  589.377429][T12653] vhci_hcd: connection closed
[  589.387326][T12664] vhci_hcd: connection closed
[  589.392210][T12648] vhci_hcd: connection reset by peer
[  589.403261][T12668] vhci_hcd: connection closed
[  589.455771][   T49] vhci_hcd vhci_hcd.1: release socket
[  589.547232][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  589.602705][   T49] vhci_hcd vhci_hcd.1: stop threads
[  589.622982][   T49] vhci_hcd vhci_hcd.1: release socket
[  589.653161][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  589.673084][   T49] vhci_hcd vhci_hcd.1: stop threads
[  589.689990][   T49] vhci_hcd vhci_hcd.1: release socket
[  589.710268][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  589.723637][   T49] vhci_hcd vhci_hcd.1: stop threads
[  589.725558][T11136] usb usb44-port1: unable to enumerate USB device
[  589.745654][   T49] vhci_hcd vhci_hcd.1: release socket
[  589.850019][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  589.873627][   T49] vhci_hcd vhci_hcd.1: stop threads
[  589.893066][   T49] vhci_hcd vhci_hcd.1: release socket
[  589.928621][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  589.959052][   T49] vhci_hcd vhci_hcd.1: stop threads
[  589.984664][   T49] vhci_hcd vhci_hcd.1: release socket
[  590.006359][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  590.273028][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  590.714907][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1645'.
[  591.178683][T12695] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'.
[  591.313050][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  591.679154][T12693] veth1_to_batadv: entered promiscuous mode
[  591.733438][T12693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1648'.
[  591.894285][T12693] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  592.353037][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  592.580278][T12707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  592.727769][T12709] syzkaller0: entered promiscuous mode
[  592.771033][T12709] syzkaller0: entered allmulticast mode
[  593.393021][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  593.543073][  T945] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  594.048763][  T945] usb 6-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  594.079697][  T945] usb 6-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  594.433048][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  594.823807][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  594.846281][ T2575] block nbd0: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 240 seconds
[  594.857213][ T2575] block nbd0: Possible stuck request ffff888027c00200: control (read@1024,1024B). Runtime 240 seconds
[  594.868237][ T2575] block nbd0: Possible stuck request ffff888027c00400: control (read@2048,1024B). Runtime 240 seconds
[  594.873744][  T945] usb 6-1: Product: syz
[  594.879215][ T2575] block nbd0: Possible stuck request ffff888027c00600: control (read@3072,1024B). Runtime 240 seconds
[  594.898307][  T945] usb 6-1: Manufacturer: syz
[  594.913099][  T945] usb 6-1: SerialNumber: syz
[  594.944788][  T945] usb 6-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  595.006596][  T945] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  595.035937][  T945] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  595.053475][T12722] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  595.059991][T12722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  595.077432][  T945] usb 6-1: media controller created
[  595.123651][T12722] vhci_hcd vhci_hcd.0: Device attached
[  595.206759][  T945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  595.227254][T12726] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  595.233772][T12726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  595.255969][  T945] usb 6-1: selecting invalid altsetting 1
[  595.276628][  T945] set interface failed
[  595.276872][  T945] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  595.308884][  T945] error writing reg: 0xff, val: 0x00
[  595.328591][T12722] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11)
[  595.339299][T12726] vhci_hcd vhci_hcd.0: Device attached
[  595.340468][T12722] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  595.347121][  T945] dvb_usb_mxl111sf 6-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  595.375534][T12722] vhci_hcd vhci_hcd.0: Device attached
[  595.413100][    T9] usb 35-1: device descriptor read/64, error -110
[  595.445205][T12736] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10)
[  595.451818][T12736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  595.473042][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  595.484534][T12736] vhci_hcd vhci_hcd.0: Device attached
[  595.504384][T12722] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15)
[  595.510997][T12722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  595.538758][T12722] vhci_hcd vhci_hcd.0: Device attached
[  595.556648][T12722] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18)
[  595.563246][T12722] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  595.597609][T12722] vhci_hcd vhci_hcd.0: Device attached
[  595.633773][T12726] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  595.655166][T12722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  595.663050][   T24] usb 36-1: SetAddress Request (10) to port 0
[  595.669403][   T24] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd
[  595.679372][T12722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  595.714359][T12743] vhci_hcd: connection reset by peer
[  595.714823][T12732] vhci_hcd: connection closed
[  595.719693][T12737] vhci_hcd: connection closed
[  595.721290][T12741] vhci_hcd: connection closed
[  595.729148][   T12] vhci_hcd vhci_hcd.1: stop threads
[  595.739850][T12723] vhci_hcd: connection closed
[  595.740254][T12727] vhci_hcd: connection closed
[  595.753893][   T30] audit: type=1400 audit(2000000161.420:1092): avc:  denied  { create } for  pid=12745 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  595.782108][   T12] vhci_hcd vhci_hcd.1: release socket
[  595.794342][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  595.835875][   T12] vhci_hcd vhci_hcd.1: stop threads
[  595.848553][   T12] vhci_hcd vhci_hcd.1: release socket
[  595.864405][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  595.876855][   T12] vhci_hcd vhci_hcd.1: stop threads
[  595.892835][   T12] vhci_hcd vhci_hcd.1: release socket
[  595.906890][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  595.923386][   T12] vhci_hcd vhci_hcd.1: stop threads
[  595.935744][   T12] vhci_hcd vhci_hcd.1: release socket
[  595.953756][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  595.966107][   T12] vhci_hcd vhci_hcd.1: stop threads
[  595.978947][   T12] vhci_hcd vhci_hcd.1: release socket
[  595.995662][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  596.012578][   T12] vhci_hcd vhci_hcd.1: stop threads
[  596.022831][   T12] vhci_hcd vhci_hcd.1: release socket
[  596.037347][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  596.226576][  T945] usb 6-1: USB disconnect, device number 34
[  596.513077][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  597.553054][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  597.823053][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  598.013972][   T10] usb 4-1: Using ep0 maxpacket: 16
[  598.036168][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  598.057947][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  598.073135][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.081154][   T10] usb 4-1: Product: syz
[  598.593051][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  599.550306][   T10] usb 4-1: Manufacturer: syz
[  599.555001][   T10] usb 4-1: SerialNumber: syz
[  599.572991][   T10] usb 4-1: config 0 descriptor??
[  599.606206][ T5805] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  599.615294][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  599.624954][   T10] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  599.633185][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  599.755546][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1662'.
[  599.770373][   T30] audit: type=1400 audit(2000000165.400:1093): avc:  denied  { read write } for  pid=12775 comm="syz.5.1662" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  599.829500][ T5805] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  599.834827][   T30] audit: type=1400 audit(2000000165.400:1094): avc:  denied  { open } for  pid=12775 comm="syz.5.1662" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  599.842981][ T5805] usb 2-1: config 0 has no interface number 0
[  599.909001][ T5805] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  599.935988][ T5805] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  599.966823][ T5805] usb 2-1: config 0 interface 153 has no altsetting 0
[  599.983202][ T5805] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  599.992531][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.008229][ T5805] usb 2-1: Product: syz
[  600.019010][ T5805] usb 2-1: Manufacturer: syz
[  600.030836][ T5805] usb 2-1: SerialNumber: syz
[  600.053052][ T5805] usb 2-1: config 0 descriptor??
[  600.206095][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  600.273792][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.282420][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.292353][T12771] vcan0: tx address claim with different name
[  600.305580][ T5805] hub 2-1:0.153: bad descriptor, ignoring hub
[  600.311714][ T5805] hub 2-1:0.153: probe with driver hub failed with error -5
[  600.321378][ T5805] sierra 2-1:0.153: Sierra USB modem converter detected
[  600.355040][ T5805] usb 2-1: USB disconnect, device number 57
[  600.361709][ T5805] sierra 2-1:0.153: device disconnected
[  600.673032][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  601.255950][   T24] usb 36-1: device descriptor read/8, error -110
[  601.713041][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  601.793275][   T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  601.801739][   T10] em28xx 4-1:0.0: board has no eeprom
[  602.223256][   T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  602.245825][   T10] em28xx 4-1:0.0: dvb set to bulk mode.
[  602.273219][T12803] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  602.279761][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  602.293454][ T5805] em28xx 4-1:0.0: Binding DVB extension
[  602.318884][   T10] usb 4-1: USB disconnect, device number 31
[  602.333213][T12803] vhci_hcd vhci_hcd.0: Device attached
[  602.365626][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  602.385551][ T5805] em28xx 4-1:0.0: Registering input extension
[  602.394179][   T10] em28xx 4-1:0.0: Closing input extension
[  602.395429][T12803] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  602.406832][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  602.448165][   T24] usb usb36-port1: attempt power cycle
[  602.465944][T12803] vhci_hcd vhci_hcd.0: Device attached
[  602.501655][T12809] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11)
[  602.508286][T12809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  602.524137][T12803] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10)
[  602.530771][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  602.540801][T12803] vhci_hcd vhci_hcd.0: Device attached
[  602.545307][   T10] em28xx 4-1:0.0: Freeing device
[  602.551607][T11675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  602.562572][T11675] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  602.570696][T11675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  602.578379][T12809] vhci_hcd vhci_hcd.0: Device attached
[  602.584225][T11675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  602.613453][T11675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  602.630300][T12803] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15)
[  602.636956][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  602.649431][   T30] audit: type=1400 audit(2000000168.310:1095): avc:  denied  { mounton } for  pid=12810 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  602.713059][T12803] vhci_hcd vhci_hcd.0: Device attached
[  602.717143][T12810] lo speed is unknown, defaulting to 1000
[  602.736043][T12803] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18)
[  602.742682][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  602.753043][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  602.772302][T12803] vhci_hcd vhci_hcd.0: Device attached
[  602.779438][T12803] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  602.783615][    T9] usb 35-1: new low-speed USB device number 5 using vhci_hcd
[  602.788774][T12803] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  603.628434][T12809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  603.734923][T12822] vhci_hcd: connection closed
[  603.735452][T12804] vhci_hcd: connection reset by peer
[  603.735767][T12818] vhci_hcd: connection closed
[  603.754096][T12815] vhci_hcd: connection closed
[  603.760687][T12807] vhci_hcd: connection closed
[  603.763207][T12813] vhci_hcd: connection closed
[  603.770031][   T12] vhci_hcd vhci_hcd.1: stop threads
[  603.799918][   T12] vhci_hcd vhci_hcd.1: release socket
[  603.803042][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  603.836061][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  603.894109][T12810] chnl_net:caif_netlink_parms(): no params data found
[  603.900975][   T12] vhci_hcd vhci_hcd.1: stop threads
[  603.907058][   T12] vhci_hcd vhci_hcd.1: release socket
[  603.935939][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  603.953033][   T12] vhci_hcd vhci_hcd.1: stop threads
[  603.958267][   T12] vhci_hcd vhci_hcd.1: release socket
[  604.653188][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  604.684605][T11675] Bluetooth: hci5: command tx timeout
[  604.691697][   T12] vhci_hcd vhci_hcd.1: stop threads
[  604.703022][   T12] vhci_hcd vhci_hcd.1: release socket
[  604.708503][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  604.736672][   T12] vhci_hcd vhci_hcd.1: stop threads
[  604.741918][   T12] vhci_hcd vhci_hcd.1: release socket
[  604.781754][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  604.803492][   T12] vhci_hcd vhci_hcd.1: stop threads
[  604.808747][   T12] vhci_hcd vhci_hcd.1: release socket
[  604.823297][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  604.833044][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  604.853981][T12810] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.861125][T12810] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.931670][T12810] bridge_slave_0: entered allmulticast mode
[  604.963829][T12810] bridge_slave_0: entered promiscuous mode
[  604.994184][T12810] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.001267][T12810] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.023171][T12810] bridge_slave_1: entered allmulticast mode
[  605.094558][T12810] bridge_slave_1: entered promiscuous mode
[  605.181762][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.229572][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.325527][T12810] team0: Port device team_slave_0 added
[  605.344739][T12810] team0: Port device team_slave_1 added
[  605.470488][ T5808] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  605.500072][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.513371][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.541245][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.873037][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  606.496165][   T30] audit: type=1400 audit(2000000171.270:1096): avc:  denied  { execute_no_trans } for  pid=12851 comm="syz.2.1683" path="/331/file1" dev="tmpfs" ino=1778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  606.913034][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  607.453467][T11675] Bluetooth: hci5: command tx timeout
[  607.456206][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.466220][ T5808] usb 2-1: Using ep0 maxpacket: 8
[  607.475230][ T5808] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  607.483180][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.533106][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.726557][ T5808] usb 2-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c
[  607.735688][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.746054][ T5808] usb 2-1: Product: syz
[  607.750341][ T5808] usb 2-1: Manufacturer: syz
[  607.756135][ T5808] usb 2-1: SerialNumber: syz
[  607.783891][ T5808] usb 2-1: config 0 descriptor??
[  607.800748][ T5808] usb 2-1: bad CDC descriptors
[  607.943086][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  607.953113][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  608.026659][T12810] hsr_slave_0: entered promiscuous mode
[  608.036871][ T5808] usb 2-1: USB disconnect, device number 58
[  608.188720][T12810] hsr_slave_1: entered promiscuous mode
[  608.194674][   T30] audit: type=1400 audit(2000000173.760:1097): avc:  denied  { create } for  pid=12864 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  608.438412][   T30] audit: type=1400 audit(2000000173.770:1098): avc:  denied  { write } for  pid=12864 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  608.830721][   T30] audit: type=1400 audit(2000000174.260:1099): avc:  denied  { associate } for  pid=12870 comm="syz.1.1682" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  609.003027][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  609.039029][   T30] audit: type=1400 audit(2000000174.670:1100): avc:  denied  { write } for  pid=12849 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  609.473079][T11675] Bluetooth: hci5: command tx timeout
[  609.746918][T12877] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  609.753463][T12877] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  609.791299][T12877] vhci_hcd vhci_hcd.0: Device attached
[  609.808759][T12880] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11)
[  609.815394][T12880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  609.856046][T12880] vhci_hcd vhci_hcd.0: Device attached
[  609.863212][T12877] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10)
[  609.869835][T12877] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  609.929309][T12810] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  609.936760][T12880] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(13)
[  609.943380][T12880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  609.953524][T12880] vhci_hcd vhci_hcd.0: Device attached
[  609.961518][   T30] audit: type=1400 audit(2000000175.620:1101): avc:  denied  { write } for  pid=12883 comm="syz.2.1690" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  609.975410][T12810] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  610.003134][T12877] vhci_hcd vhci_hcd.0: Device attached
[  610.006502][T12880] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17)
[  610.015211][T12880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  610.024227][T12880] vhci_hcd vhci_hcd.0: Device attached
[  610.029962][T12810] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  610.043062][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  610.052687][T12810] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  610.062646][T12877] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15)
[  610.069278][T12877] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  610.078121][  T945] usb 43-1: new low-speed USB device number 8 using vhci_hcd
[  610.090310][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'.
[  610.113900][   T30] audit: type=1400 audit(2000000175.780:1102): avc:  denied  { bind } for  pid=12883 comm="syz.2.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  610.162565][T12877] vhci_hcd vhci_hcd.0: Device attached
[  610.173477][T12880] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  610.182409][T12877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  610.195420][T12877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  610.224839][T12894] vhci_hcd: connection closed
[  610.225131][T12890] vhci_hcd: connection closed
[  610.226065][   T13] vhci_hcd vhci_hcd.5: stop threads
[  610.240038][   T13] vhci_hcd vhci_hcd.5: release socket
[  610.273788][T12884] vhci_hcd: connection closed
[  610.273793][T12888] vhci_hcd: connection closed
[  610.275664][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  610.278924][T12881] vhci_hcd: connection closed
[  610.345758][T12878] vhci_hcd: connection reset by peer
[  610.364011][   T24] usb usb36-port1: unable to enumerate USB device
[  610.371564][   T13] vhci_hcd vhci_hcd.5: stop threads
[  610.388771][   T13] vhci_hcd vhci_hcd.5: release socket
[  610.426159][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  610.449069][   T13] vhci_hcd vhci_hcd.5: stop threads
[  610.464566][   T13] vhci_hcd vhci_hcd.5: release socket
[  610.484882][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  610.506282][   T13] vhci_hcd vhci_hcd.5: stop threads
[  610.525729][   T13] vhci_hcd vhci_hcd.5: release socket
[  610.540710][T12810] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.552951][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  610.590668][   T13] vhci_hcd vhci_hcd.5: stop threads
[  610.607218][   T13] vhci_hcd vhci_hcd.5: release socket
[  610.616866][T12810] 8021q: adding VLAN 0 to HW filter on device team0
[  610.633239][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  610.667025][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.674147][ T7462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.681575][   T13] vhci_hcd vhci_hcd.5: stop threads
[  610.687187][   T13] vhci_hcd vhci_hcd.5: release socket
[  610.692610][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  610.722846][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.729983][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.794344][T12810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  610.837615][   T30] audit: type=1400 audit(2000000176.480:1103): avc:  denied  { create } for  pid=12907 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  610.959551][T12810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  611.073290][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  611.553235][T11675] Bluetooth: hci5: command tx timeout
[  612.113088][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  612.439759][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.103611][T12810] veth0_vlan: entered promiscuous mode
[  613.153036][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  613.155999][T12810] veth1_vlan: entered promiscuous mode
[  613.228921][T12810] veth0_macvtap: entered promiscuous mode
[  613.863082][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1700'.
[  614.193061][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  614.928544][T12810] veth1_macvtap: entered promiscuous mode
[  615.028227][T12810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.233026][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  616.273051][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  616.692899][  T945] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  616.731356][T12810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.947816][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.313075][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  617.611807][T12966] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1707'.
[  617.685748][   T30] audit: type=1400 audit(2000000004.820:1104): avc:  denied  { read } for  pid=12961 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  618.353028][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  618.416199][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.634994][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'.
[  618.747408][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.234067][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.393195][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  619.444130][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1711'.
[  619.914616][ T7462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.926981][ T7462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.019241][ T7462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.035726][ T7462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.060116][   T30] audit: type=1400 audit(2000000007.190:1105): avc:  denied  { mounton } for  pid=12810 comm="syz-executor" path="/root/syzkaller.8Iv8jQ/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  620.121835][   T30] audit: type=1400 audit(2000000007.190:1106): avc:  denied  { mount } for  pid=12810 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  620.233016][   T30] audit: type=1400 audit(2000000007.190:1107): avc:  denied  { mounton } for  pid=12810 comm="syz-executor" path="/root/syzkaller.8Iv8jQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  620.325045][   T30] audit: type=1400 audit(2000000007.230:1108): avc:  denied  { mounton } for  pid=12810 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  620.387352][T12985] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[  620.387352][T12985]    program syz.5.1713 not setting count and/or reply_len properly
[  620.403086][   T30] audit: type=1400 audit(2000000007.250:1109): avc:  denied  { mounton } for  pid=12810 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  620.433047][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  620.547041][   T30] audit: type=1400 audit(2000000007.680:1110): avc:  denied  { setopt } for  pid=12988 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  620.567036][   T30] audit: type=1400 audit(2000000007.680:1111): avc:  denied  { name_connect } for  pid=12988 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  620.886545][   T24] IPVS: starting estimator thread 0...
[  621.153488][T12994] IPVS: using max 51 ests per chain, 122400 per kthread
[  621.473016][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  621.480776][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  621.590898][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'.
[  621.633055][T13012] vlan0: entered allmulticast mode
[  621.654705][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  621.858011][T13012] veth0_vlan: entered allmulticast mode
[  621.868076][    T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  621.883270][T13014] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  621.893219][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.925439][    T9] usb 3-1: config 0 descriptor??
[  621.967743][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  622.513018][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  623.393065][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  623.405386][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  623.436815][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  623.553040][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  623.659876][    T9] pwc: recv_control_msg error -71 req 04 val 1300
[  623.666852][    T9] pwc: recv_control_msg error -71 req 04 val 1400
[  623.767887][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  623.795747][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  624.231578][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.239114][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  624.270575][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  624.283999][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  624.298121][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  624.324782][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  624.340013][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  624.352340][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  624.387202][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  624.452090][   T30] audit: type=1400 audit(2000000011.580:1112): avc:  denied  { open } for  pid=13025 comm="syz.5.1722" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  624.493542][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  624.496245][   T30] audit: type=1400 audit(2000000011.620:1113): avc:  denied  { ioctl } for  pid=13025 comm="syz.5.1722" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  624.593025][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  624.602509][T13033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1723'.
[  625.080443][    T9] pwc: Registered as video103.
[  625.140232][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28
[  625.237442][ T2575] block nbd0: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 270 seconds
[  625.248780][ T2575] block nbd0: Possible stuck request ffff888027c00200: control (read@1024,1024B). Runtime 270 seconds
[  625.260243][ T2575] block nbd0: Possible stuck request ffff888027c00400: control (read@2048,1024B). Runtime 270 seconds
[  625.271332][ T2575] block nbd0: Possible stuck request ffff888027c00600: control (read@3072,1024B). Runtime 270 seconds
[  625.633028][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  625.794199][    T9] usb 3-1: USB disconnect, device number 41
[  626.003273][   T30] audit: type=1400 audit(2000000013.110:1114): avc:  denied  { mount } for  pid=13042 comm="syz.5.1726" name="/" dev="autofs" ino=35439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  626.129545][  T791] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  626.196902][   T30] audit: type=1400 audit(2000000013.260:1115): avc:  denied  { unmount } for  pid=6752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  626.683002][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  627.113070][  T791] usb 4-1: Using ep0 maxpacket: 16
[  627.128806][  T791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  627.140075][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  627.189104][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  627.483318][  T791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  627.503136][  T791] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  627.573533][  T791] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  627.602005][  T791] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  627.633013][  T791] usb 4-1: Manufacturer: syz
[  627.643863][  T791] usb 4-1: config 0 descriptor??
[  627.713038][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  628.353097][  T791] rc_core: IR keymap rc-hauppauge not found
[  628.366254][  T791] Registered IR keymap rc-empty
[  628.380649][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  628.413378][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  628.443995][  T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  628.471651][  T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29
[  628.553342][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  628.615984][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  628.753112][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  629.767227][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  629.793029][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  629.793052][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  629.865523][T13073] batman_adv: batadv0: Adding interface: dummy0
[  629.874825][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  629.888347][T13073] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.955582][T13073] batman_adv: batadv0: Interface activated: dummy0
[  630.003103][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.023051][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.048976][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.122942][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1737'.
[  630.588095][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.613602][  T791] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  630.637252][  T791] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  630.654129][   T30] audit: type=1400 audit(2000000017.790:1116): avc:  denied  { ioctl } for  pid=13076 comm="syz.3.1738" path="socket:[35507]" dev="sockfs" ino=35507 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  630.682362][  T791] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  630.684141][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'.
[  630.719967][  T791] usb 4-1: USB disconnect, device number 32
[  630.833349][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  631.873287][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  631.897359][ T5883] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  631.898239][T13093] FAULT_INJECTION: forcing a failure.
[  631.898239][T13093] name failslab, interval 1, probability 0, space 0, times 0
[  631.918644][T13093] CPU: 0 UID: 0 PID: 13093 Comm: syz.3.1742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  631.918672][T13093] Tainted: [L]=SOFTLOCKUP
[  631.918677][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  631.918687][T13093] Call Trace:
[  631.918692][T13093]  <TASK>
[  631.918698][T13093]  dump_stack_lvl+0x100/0x190
[  631.918728][T13093]  should_fail_ex.cold+0x5/0xa
[  631.918749][T13093]  should_failslab+0xc2/0x120
[  631.918775][T13093]  __kmalloc_cache_noprof+0x7a/0x6f0
[  631.918799][T13093]  ? call_usermodehelper_setup+0xaf/0x360
[  631.918816][T13093]  ? trace_kmalloc+0x83/0xb0
[  631.918837][T13093]  ? __pfx_free_modprobe_argv+0x10/0x10
[  631.918865][T13093]  call_usermodehelper_setup+0xaf/0x360
[  631.918886][T13093]  __request_module+0x3c7/0x650
[  631.918910][T13093]  ? __pfx___request_module+0x10/0x10
[  631.918941][T13093]  ? __lock_acquire+0x4a5/0x2630
[  631.918965][T13093]  ? __pfx_avc_has_perm+0x10/0x10
[  631.918992][T13093]  sock_load_diag_module+0x110/0x150
[  631.919017][T13093]  sock_diag_rcv_msg+0x5ed/0x7a0
[  631.919038][T13093]  netlink_rcv_skb+0x159/0x420
[  631.919062][T13093]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  631.919082][T13093]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  631.919114][T13093]  ? netlink_deliver_tap+0x1ae/0xcc0
[  631.919140][T13093]  netlink_unicast+0x5aa/0x870
[  631.919167][T13093]  ? __pfx_netlink_unicast+0x10/0x10
[  631.919199][T13093]  netlink_sendmsg+0x8b0/0xda0
[  631.919225][T13093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  631.919257][T13093]  sock_write_iter+0x566/0x610
[  631.919282][T13093]  ? __pfx_sock_write_iter+0x10/0x10
[  631.919317][T13093]  ? __pfx_file_has_perm+0x10/0x10
[  631.919344][T13093]  do_iter_readv_writev+0x6ee/0x920
[  631.919364][T13093]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  631.919380][T13093]  ? selinux_file_permission+0x8f/0x6d0
[  631.919401][T13093]  ? bpf_lsm_file_permission+0x9/0x10
[  631.919425][T13093]  ? security_file_permission+0x76/0x210
[  631.919445][T13093]  ? rw_verify_area+0xce/0x6d0
[  631.919463][T13093]  vfs_writev+0x360/0xe10
[  631.919487][T13093]  ? __pfx_vfs_writev+0x10/0x10
[  631.919506][T13093]  ? find_held_lock+0x2b/0x80
[  631.919536][T13093]  ? __fget_files+0x21f/0x3d0
[  631.919563][T13093]  ? do_writev+0x28a/0x340
[  631.919579][T13093]  do_writev+0x28a/0x340
[  631.919597][T13093]  ? __pfx_do_writev+0x10/0x10
[  631.919621][T13093]  do_syscall_64+0x106/0xf80
[  631.919642][T13093]  ? clear_bhb_loop+0x40/0x90
[  631.919661][T13093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.919677][T13093] RIP: 0033:0x7fef12b9bf79
[  631.919691][T13093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.919705][T13093] RSP: 002b:00007fef13aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  631.919721][T13093] RAX: ffffffffffffffda RBX: 00007fef12e16090 RCX: 00007fef12b9bf79
[  631.919732][T13093] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[  631.919741][T13093] RBP: 00007fef13aaf090 R08: 0000000000000000 R09: 0000000000000000
[  631.919751][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.919760][T13093] R13: 00007fef12e16128 R14: 00007fef12e16090 R15: 00007ffd3f830658
[  631.919781][T13093]  </TASK>
[  632.413199][ T5883] usb 3-1: device descriptor read/64, error -71
[  632.835146][ T5883] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  632.914008][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  632.994168][ T5883] usb 3-1: device descriptor read/64, error -71
[  633.114266][ T5883] usb usb3-port1: attempt power cycle
[  633.953439][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  634.628063][T13122] Invalid argument reading file caps for ./file0
[  634.693992][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  634.993249][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  635.903129][    T9] usb 4-1: Using ep0 maxpacket: 16
[  635.912638][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  636.033018][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  636.071417][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  636.173112][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  636.196658][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  636.225105][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  636.300219][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  636.459952][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  636.902968][    T9] usb 4-1: Manufacturer: syz
[  636.923414][    T9] usb 4-1: config 0 descriptor??
[  637.040894][    T9] usb 4-1: can't set config #0, error -71
[  637.048676][    T9] usb 4-1: USB disconnect, device number 33
[  637.073011][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  637.113011][   T30] audit: type=1400 audit(2000000024.240:1117): avc:  denied  { ioctl } for  pid=13143 comm="syz.3.1756" path="socket:[36120]" dev="sockfs" ino=36120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  637.499929][   T30] audit: type=1400 audit(2000000024.600:1118): avc:  denied  { map } for  pid=13151 comm="syz.1.1757" path="/dev/video2" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  638.112999][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  638.522992][  T791] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  638.744697][  T791] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  638.756047][  T791] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  638.841441][T13172] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  639.153032][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  639.167454][  T791] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  639.176570][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.563141][  T791] usb 4-1: usb_control_msg returned -32
[  639.838653][  T791] usbtmc 4-1:16.0: can't read capabilities
[  640.193019][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  641.123023][   T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  641.209068][T13195] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1769'.
[  641.233325][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  641.353052][   T24] usb 3-1: Using ep0 maxpacket: 16
[  641.373537][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.384010][   T30] audit: type=1400 audit(2000000028.460:1119): avc:  denied  { connect } for  pid=13190 comm="syz.5.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  641.393141][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  641.616671][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  641.661785][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  641.704767][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  641.721572][T13196] bond1: (slave ip6gretap1): making interface the new active one
[  641.766293][T13196] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  641.783738][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  641.816095][   T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  641.846964][   T24] usb 3-1: Manufacturer: syz
[  641.868354][   T24] usb 3-1: config 0 descriptor??
[  642.168665][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'.
[  642.190938][   T24] rc_core: IR keymap rc-hauppauge not found
[  642.202629][   T24] Registered IR keymap rc-empty
[  642.216356][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.253006][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.273019][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  642.284278][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  642.338465][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30
[  642.396667][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.454354][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.464462][  T945] usb 4-1: USB disconnect, device number 34
[  642.479112][   T30] audit: type=1400 audit(2000000029.610:1120): avc:  denied  { unmount } for  pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  642.542140][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.593210][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.824397][T13219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1774'.
[  642.876797][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.935906][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.963248][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.983028][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  642.987078][T13212] lo speed is unknown, defaulting to 1000
[  643.044016][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  643.073926][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  643.115195][   T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  643.130761][   T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  643.313024][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  644.075925][   T30] audit: type=1326 audit(2000000031.210:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13224 comm="syz.6.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397b79bf79 code=0x0
[  644.099350][   T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  644.160198][    T9] usb 3-1: USB disconnect, device number 45
[  644.281434][   T24] usb 4-1: Using ep0 maxpacket: 32
[  644.338122][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  644.347506][   T24] usb 4-1: config 0 has an invalid interface number: 11 but max is 0
[  644.355829][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  644.383094][   T24] usb 4-1: config 0 has no interface number 0
[  644.389234][   T24] usb 4-1: config 0 interface 11 has no altsetting 0
[  644.446784][   T24] usb 4-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=13.a1
[  644.463011][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.471025][   T24] usb 4-1: Product: syz
[  644.502969][   T24] usb 4-1: Manufacturer: syz
[  644.533052][   T24] usb 4-1: SerialNumber: syz
[  644.554127][   T24] usb 4-1: config 0 descriptor??
[  645.122807][T13233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1776'.
[  645.393018][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  645.985936][   T24] HFC-S_USB 4-1:0.11: probe with driver HFC-S_USB failed with error -5
[  646.036447][   T24] usb 4-1: USB disconnect, device number 35
[  646.356452][   T30] audit: type=1400 audit(2000000033.490:1122): avc:  denied  { bind } for  pid=13234 comm="syz.6.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  646.423180][   T30] audit: type=1400 audit(2000000033.490:1123): avc:  denied  { connect } for  pid=13234 comm="syz.6.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  646.433039][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  646.482963][   T30] audit: type=1400 audit(2000000033.550:1124): avc:  denied  { setopt } for  pid=13237 comm="syz.1.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  647.283230][T13256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1786'.
[  647.466102][  T791] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  647.473021][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  648.068559][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  648.079624][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  648.099597][  T791] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  648.122770][  T791] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  648.152983][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.513040][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  648.663917][T11136] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  648.683871][  T791] usb 7-1: config 0 descriptor??
[  648.840229][T11136] usb 4-1: Using ep0 maxpacket: 16
[  648.856118][T11136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  648.886668][T11136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  648.920409][T11136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  648.991193][T11136] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  649.042230][T11136] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  649.086942][T11136] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  649.126595][T11136] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  649.127848][  T791] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd
[  649.553694][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  649.662991][T11136] usb 4-1: Manufacturer: syz
[  649.675777][T11136] usb 4-1: config 0 descriptor??
[  649.691083][  T791] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  649.934049][ T5883] usb 7-1: USB disconnect, device number 2
[  650.053588][T11136] rc_core: IR keymap rc-hauppauge not found
[  650.059519][T11136] Registered IR keymap rc-empty
[  650.115451][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.130026][T13276] xt_socket: unknown flags 0x4
[  650.183763][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.204017][T11136] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  650.232016][T11136] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33
[  650.300211][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.323053][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.343068][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.363211][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.403064][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.432278][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.463774][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.513188][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.540972][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.582170][T11136] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  650.593020][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  650.629870][T11136] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  650.680382][T11136] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  651.134903][T13283] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  651.580112][    T9] usb 4-1: USB disconnect, device number 36
[  651.633018][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  652.320987][T13290] syz_tun: entered promiscuous mode
[  652.672997][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  653.179865][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1800'.
[  653.224168][   T30] audit: type=1400 audit(2000000040.360:1125): avc:  denied  { unmount } for  pid=13306 comm="syz.1.1802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  653.713028][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  654.053273][T13313] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  654.059797][T13313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  654.109635][T13319] binder: 13316:13319 ioctl c0306201 200000000480 returned -14
[  654.139823][T13313] vhci_hcd vhci_hcd.0: Device attached
[  654.168541][T13320] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11)
[  654.175180][T13320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  654.256828][T13320] vhci_hcd vhci_hcd.0: Device attached
[  654.283976][T13313] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10)
[  654.290617][T13313] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  654.309366][T13313] vhci_hcd vhci_hcd.0: Device attached
[  654.324780][T13313] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14)
[  654.331414][T13313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  654.357574][T13313] vhci_hcd vhci_hcd.0: Device attached
[  654.363104][  T945] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  654.383152][   T24] usb 43-1: new low-speed USB device number 9 using vhci_hcd
[  654.431068][T13313] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(16)
[  654.437687][T13313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  654.493387][T13313] vhci_hcd vhci_hcd.0: Device attached
[  654.615982][T13320] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(21)
[  654.622630][T13320] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  654.655659][  T945] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  654.668323][T13320] vhci_hcd vhci_hcd.0: Device attached
[  654.675432][  T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  654.689177][T13313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  654.697594][  T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  654.710733][T13313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  654.721150][  T945] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  654.734200][  T945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.734679][T13313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  654.743301][  T945] usb 3-1: Product: syz
[  654.754766][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  654.762519][  T945] usb 3-1: Manufacturer: syz
[  654.805921][T13329] vhci_hcd: connection closed
[  654.806285][   T49] vhci_hcd vhci_hcd.5: stop threads
[  654.816616][T13331] vhci_hcd: connection closed
[  654.816812][T13317] vhci_hcd: connection reset by peer
[  654.826946][T13321] vhci_hcd: connection closed
[  654.827170][T13336] vhci_hcd: connection closed
[  654.832334][T13325] vhci_hcd: connection closed
[  655.001603][   T49] vhci_hcd vhci_hcd.5: release socket
[  655.030998][  T945] usb 3-1: SerialNumber: syz
[  655.065791][  T945] usb 3-1: config 0 descriptor??
[  655.070907][   T49] vhci_hcd vhci_hcd.5: disconnect device
[  655.091177][   T49] vhci_hcd vhci_hcd.5: stop threads
[  655.122956][   T49] vhci_hcd vhci_hcd.5: release socket
[  655.139971][   T49] vhci_hcd vhci_hcd.5: disconnect device
[  655.157978][   T49] vhci_hcd vhci_hcd.5: stop threads
[  655.179272][   T49] vhci_hcd vhci_hcd.5: release socket
[  655.257205][   T49] vhci_hcd vhci_hcd.5: disconnect device
[  655.291513][  T945] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  655.313538][ T2575] block nbd0: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 300 seconds
[  655.314308][   T49] vhci_hcd vhci_hcd.5: stop threads
[  655.324302][ T2575] block nbd0: Possible stuck request ffff888027c00200: control (read@1024,1024B). Runtime 300 seconds
[  655.324327][ T2575] block nbd0: Possible stuck request ffff888027c00400: control (read@2048,1024B). Runtime 300 seconds
[  655.324350][ T2575] block nbd0: Possible stuck request ffff888027c00600: control (read@3072,1024B). Runtime 300 seconds
[  655.386099][  T945] powermate 3-1:0.0: probe with driver powermate failed with error -5
[  655.417814][  T945] usb 3-1: USB disconnect, device number 46
[  655.481895][   T49] vhci_hcd vhci_hcd.5: release socket
[  655.793037][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  656.833007][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  656.913160][   T49] vhci_hcd vhci_hcd.5: disconnect device
[  656.938725][   T49] vhci_hcd vhci_hcd.5: stop threads
[  656.972965][   T49] vhci_hcd vhci_hcd.5: release socket
[  657.003408][   T49] vhci_hcd vhci_hcd.5: disconnect device
[  657.028411][   T49] vhci_hcd vhci_hcd.5: stop threads
[  657.041656][   T49] vhci_hcd vhci_hcd.5: release socket
[  657.145673][   T49] vhci_hcd vhci_hcd.5: disconnect device
[  657.533121][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  657.873069][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  657.938595][T13369] blktrace: Concurrent blktraces are not allowed on loop10
[  657.952773][T13369] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  658.292974][   T10] usb 7-1: Using ep0 maxpacket: 16
[  658.792545][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.817397][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  658.903233][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  658.913031][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  658.923217][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  658.932852][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  658.964174][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  658.998604][   T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  659.023033][   T10] usb 7-1: Manufacturer: syz
[  659.048074][   T10] usb 7-1: config 0 descriptor??
[  659.188506][   T49] Bluetooth: hci6: Frame reassembly failed (-84)
[  659.221067][T13373] sctp: [Deprecated]: syz.5.1818 (pid 13373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  659.221067][T13373] Use struct sctp_sack_info instead
[  659.457244][T13379] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1818'.
[  659.953021][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  660.105349][T13383] netlink: 'syz.1.1813': attribute type 32 has an invalid length.
[  660.156647][   T24] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  660.163182][   T10] rc_core: IR keymap rc-hauppauge not found
[  660.182684][   T10] Registered IR keymap rc-empty
[  660.190944][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'.
[  660.214719][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  660.573005][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  660.656896][T13383] bond2: Setting coupled_control to off (0)
[  660.666114][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  660.703231][  T945] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  660.727965][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input35
[  660.778207][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  660.893712][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1822'.
[  660.983428][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1821'.
[  660.993026][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  662.033005][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  662.481919][T11675] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  662.482183][   T51] Bluetooth: hci6: command 0x1003 tx timeout
[  662.578561][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  662.623016][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  662.643043][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  662.654541][  T945] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  662.695942][  T945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.724791][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  662.763008][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  662.843080][  T945] usb 4-1: Product: syz
[  662.849264][  T945] usb 4-1: Manufacturer: syz
[  662.862986][  T945] usb 4-1: SerialNumber: syz
[  662.893214][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  662.898517][  T945] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  662.929574][   T30] audit: type=1400 audit(2000000050.050:1126): avc:  denied  { firmware_load } for  pid=11136 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  663.045206][T11136] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  663.073027][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  663.116808][ T5808] usb usb44-port1: attempt power cycle
[  663.433200][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.927135][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.944703][T13412] syzkaller0: entered promiscuous mode
[  663.950220][T13412] syzkaller0: entered allmulticast mode
[  663.966285][   T29] usb 4-1: USB disconnect, device number 37
[  663.993851][ T5808] usb usb44-port1: unable to enumerate USB device
[  664.004373][   T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  664.020745][T11136] usb 4-1: ath9k_htc: Unable to allocate URBs
[  664.051690][   T29] usb 4-1: ath9k_htc: USB layer deinitialized
[  664.084750][   T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  664.102949][   T30] audit: type=1400 audit(2000000051.230:1127): avc:  denied  { getopt } for  pid=13413 comm="syz.6.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  664.113015][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  664.163026][   T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  664.226368][   T10] usb 7-1: USB disconnect, device number 3
[  664.522653][   T30] audit: type=1400 audit(2000000051.650:1128): avc:  denied  { recv } for  pid=5174 comm="udevd" saddr=10.128.0.169 src=39554 daddr=10.128.1.46 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  665.153016][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  665.253063][   T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  665.617117][   T10] usb 6-1: Using ep0 maxpacket: 16
[  665.653897][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  665.673566][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  665.703082][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  665.733022][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  665.743312][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  665.785694][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  665.834332][   T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  665.854105][   T10] usb 6-1: Manufacturer: syz
[  665.891052][   T10] usb 6-1: config 0 descriptor??
[  666.026453][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1834'.
[  666.193435][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  666.583066][   T10] rc_core: IR keymap rc-hauppauge not found
[  666.593183][   T10] Registered IR keymap rc-empty
[  666.612196][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  666.656572][T13444] sctp: [Deprecated]: syz.2.1835 (pid 13444) Use of struct sctp_assoc_value in delayed_ack socket option.
[  666.656572][T13444] Use struct sctp_sack_info instead
[  666.688516][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  666.774368][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  666.813455][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36
[  666.961005][T13450] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1835'.
[  667.114448][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.173220][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.232998][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  667.334169][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.363118][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.415827][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.474602][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.525056][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.563008][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.660727][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.715215][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  667.749408][   T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  667.810224][   T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  667.826010][   T10] usb 6-1: USB disconnect, device number 35
[  667.933121][   T30] audit: type=1326 audit(2000000055.060:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13461 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1459bf79 code=0x7ffc0000
[  668.047339][   T30] audit: type=1326 audit(2000000055.060:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13461 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1459bf79 code=0x7ffc0000
[  668.273038][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  668.720754][   T30] audit: type=1326 audit(2000000055.070:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13461 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f3d1459bf79 code=0x7ffc0000
[  669.312500][   T30] audit: type=1326 audit(2000000056.440:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.5.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6619bf79 code=0x7ffc0000
[  669.336096][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  669.343743][T13473] syzkaller0: entered promiscuous mode
[  669.349216][T13473] syzkaller0: entered allmulticast mode
[  669.374126][   T30] audit: type=1326 audit(2000000056.440:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.5.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6619bf79 code=0x7ffc0000
[  669.374173][   T30] audit: type=1326 audit(2000000056.500:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.5.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f8c6619bf79 code=0x7ffc0000
[  669.374226][   T30] audit: type=1326 audit(2000000056.500:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.5.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6619bf79 code=0x7ffc0000
[  669.374264][   T30] audit: type=1326 audit(2000000056.500:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.5.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6619bf79 code=0x7ffc0000
[  669.790874][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1846'.
[  669.790940][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1846'.
[  670.200702][  T791] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  670.353112][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  670.364866][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.364899][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  670.364921][  T791] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  670.364956][  T791] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  670.364977][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.376879][  T791] usb 7-1: config 0 descriptor??
[  670.796862][  T791] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  670.925368][T13498] loop2: detected capacity change from 0 to 7
[  671.072461][T13498] Dev loop2: unable to read RDB block 7
[  671.078617][T13498]  loop2: unable to read partition table
[  671.178699][T13498] loop2: partition table beyond EOD, truncated
[  671.186792][T13498] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  671.392990][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  671.602557][   T30] audit: type=1400 audit(2000000058.730:1137): avc:  denied  { bind } for  pid=13506 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  671.622995][  T791] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  671.829608][T13509] lo speed is unknown, defaulting to 1000
[  671.836479][T13509] lo speed is unknown, defaulting to 1000
[  671.849996][T13509] lo speed is unknown, defaulting to 1000
[  671.902552][T13509] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  672.117997][T13509] lo speed is unknown, defaulting to 1000
[  672.133277][T13509] lo speed is unknown, defaulting to 1000
[  672.147698][T13509] lo speed is unknown, defaulting to 1000
[  672.161115][T13509] lo speed is unknown, defaulting to 1000
[  672.168568][T13509] lo speed is unknown, defaulting to 1000
[  672.175127][T13509] lo speed is unknown, defaulting to 1000
[  672.244970][  T791] usb 3-1: Using ep0 maxpacket: 16
[  672.275287][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  672.318282][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  672.366274][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  672.401642][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  672.433014][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  672.452040][  T791] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  672.501448][  T791] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  672.576918][   T10] usb 7-1: USB disconnect, device number 4
[  672.626462][  T791] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  672.651265][  T791] usb 3-1: Manufacturer: syz
[  672.760527][  T791] usb 3-1: config 0 descriptor??
[  673.153056][  T791] rc_core: IR keymap rc-hauppauge not found
[  673.162949][  T791] Registered IR keymap rc-empty
[  673.170117][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.203019][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.253919][  T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  673.376336][  T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38
[  673.408110][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.473066][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  673.630270][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.673380][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.724286][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.763245][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.803089][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.843071][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  673.985729][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  674.023071][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  674.084534][  T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  674.157380][  T791] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  674.198724][  T791] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  674.312016][  T791] usb 3-1: USB disconnect, device number 47
[  674.513289][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  675.553092][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  675.707996][T13555] netlink: 'syz.6.1864': attribute type 10 has an invalid length.
[  675.937894][T13555] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  676.593041][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  677.633040][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  678.673040][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  679.713016][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  679.753200][   T29] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  679.811807][T13582] sctp: [Deprecated]: syz.6.1873 (pid 13582) Use of struct sctp_assoc_value in delayed_ack socket option.
[  679.811807][T13582] Use struct sctp_sack_info instead
[  679.898427][T13586] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1873'.
[  679.938965][   T29] usb 3-1: Using ep0 maxpacket: 16
[  680.121004][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  680.152242][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  680.193433][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  680.228180][   T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  680.258812][   T29] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  680.339229][   T29] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  680.380818][   T29] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  680.406614][   T29] usb 3-1: Manufacturer: syz
[  680.507737][T13594] omfs: Invalid superblock (0)
[  680.703494][   T29] usb 3-1: config 0 descriptor??
[  680.753013][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  680.901719][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1877'.
[  681.793010][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  681.897103][T11675] Bluetooth: hci6: command 0x1003 tx timeout
[  681.909958][   T51] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  682.092058][   T29] rc_core: IR keymap rc-hauppauge not found
[  682.393842][   T29] Registered IR keymap rc-empty
[  682.414869][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  682.453158][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  682.485025][   T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  682.514689][   T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39
[  682.545555][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  682.613047][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  682.733003][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  682.759354][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  682.833123][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  683.197919][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  683.223788][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  683.243011][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  683.263017][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  683.283071][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  683.303024][   T29] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  683.872995][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  684.664597][   T29] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  684.913038][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  685.425823][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  685.432237][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  685.439607][ T2575] block nbd0: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 330 seconds
[  685.450845][ T2575] block nbd0: Possible stuck request ffff888027c00200: control (read@1024,1024B). Runtime 330 seconds
[  685.461845][ T2575] block nbd0: Possible stuck request ffff888027c00400: control (read@2048,1024B). Runtime 330 seconds
[  685.473139][ T2575] block nbd0: Possible stuck request ffff888027c00600: control (read@3072,1024B). Runtime 330 seconds
[  685.533761][   T29] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  685.540062][T13624] FAULT_INJECTION: forcing a failure.
[  685.540062][T13624] name failslab, interval 1, probability 0, space 0, times 0
[  685.554974][T13624] CPU: 0 UID: 0 PID: 13624 Comm: syz.2.1884 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  685.555003][T13624] Tainted: [L]=SOFTLOCKUP
[  685.555009][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  685.555020][T13624] Call Trace:
[  685.555026][T13624]  <TASK>
[  685.555033][T13624]  dump_stack_lvl+0x100/0x190
[  685.555066][T13624]  should_fail_ex.cold+0x5/0xa
[  685.555089][T13624]  should_failslab+0xc2/0x120
[  685.555113][T13624]  __kmalloc_cache_noprof+0x7a/0x6f0
[  685.555139][T13624]  ? v9fs_get_tree+0x9c/0xb50
[  685.555162][T13624]  v9fs_get_tree+0x9c/0xb50
[  685.555178][T13624]  ? rcu_is_watching+0x12/0xc0
[  685.555195][T13624]  ? __pfx_v9fs_get_tree+0x10/0x10
[  685.555215][T13624]  ? bpf_lsm_capable+0x9/0x10
[  685.555238][T13624]  ? security_capable+0x80/0x260
[  685.555266][T13624]  vfs_get_tree+0x92/0x320
[  685.555285][T13624]  path_mount+0x7d0/0x23d0
[  685.555322][T13624]  ? __pfx_path_mount+0x10/0x10
[  685.555347][T13624]  ? lockdep_hardirqs_on+0x78/0x100
[  685.555374][T13624]  ? putname+0xb1/0x110
[  685.555397][T13624]  ? kmem_cache_free+0x124/0x670
[  685.555422][T13624]  ? __x64_sys_mount+0x293/0x310
[  685.555447][T13624]  __x64_sys_mount+0x293/0x310
[  685.555475][T13624]  ? __pfx___x64_sys_mount+0x10/0x10
[  685.555509][T13624]  do_syscall_64+0x106/0xf80
[  685.555532][T13624]  ? clear_bhb_loop+0x40/0x90
[  685.555554][T13624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.555571][T13624] RIP: 0033:0x7fd46199bf79
[  685.555587][T13624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.555604][T13624] RSP: 002b:00007fd4628a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  685.555622][T13624] RAX: ffffffffffffffda RBX: 00007fd461c15fa0 RCX: 00007fd46199bf79
[  685.555633][T13624] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[  685.555644][T13624] RBP: 00007fd4628a2090 R08: 0000200000000340 R09: 0000000000000000
[  685.555654][T13624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  685.555664][T13624] R13: 00007fd461c16038 R14: 00007fd461c15fa0 R15: 00007ffc27873b38
[  685.555688][T13624]  </TASK>
[  685.583055][   T30] audit: type=1400 audit(2000000072.670:1138): avc:  denied  { mounton } for  pid=13623 comm="syz.2.1884" path="/366/file0" dev="tmpfs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  685.920503][   T29] usb 3-1: USB disconnect, device number 48
[  685.952993][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  686.218155][   T30] audit: type=1400 audit(2000000073.350:1139): avc:  denied  { ioctl } for  pid=13625 comm="syz.2.1885" path="socket:[37594]" dev="sockfs" ino=37594 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  686.993027][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  687.007724][T13653] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32
[  687.018177][T13653] loop2: detected capacity change from 0 to 7
[  687.025262][T13653] Dev loop2: unable to read RDB block 7
[  687.058112][T13653]  loop2: unable to read partition table
[  687.076607][T13653] loop2: partition table beyond EOD, truncated
[  687.094236][T13653] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  687.250205][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'.
[  688.033036][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  688.636713][   T30] audit: type=1400 audit(2000000075.770:1140): avc:  denied  { create } for  pid=13670 comm="syz.1.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  688.982983][   T30] audit: type=1400 audit(2000000076.030:1141): avc:  denied  { ioctl } for  pid=13680 comm="syz.5.1899" path="socket:[38095]" dev="sockfs" ino=38095 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  689.072997][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  689.188923][T13302] Bluetooth: hci6: Frame reassembly failed (-84)
[  689.198153][T13679] sctp: [Deprecated]: syz.3.1898 (pid 13679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  689.198153][T13679] Use struct sctp_sack_info instead
[  689.661372][T13686] bond3: (slave ip6gretap1): making interface the new active one
[  689.669593][T13686] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  690.113046][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  691.153208][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  691.272869][   T51] Bluetooth: hci6: command 0x1003 tx timeout
[  691.295858][ T5811] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  691.426287][T13704] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1898'.
[  692.193010][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  692.893672][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1907'.
[  693.100781][T13718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1908'.
[  693.233012][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  694.128272][T13732] bond3: option mode: unable to set because the bond device has slaves
[  694.273007][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  694.638691][   T30] audit: type=1400 audit(2000000081.770:1142): avc:  denied  { write } for  pid=13750 comm="syz.6.1918" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  694.925261][T13757] lo speed is unknown, defaulting to 1000
[  694.941712][T13757] lo speed is unknown, defaulting to 1000
[  695.313008][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  695.634843][   T12] Bluetooth: hci6: Frame reassembly failed (-84)
[  695.674656][T13774] sctp: [Deprecated]: syz.2.1923 (pid 13774) Use of struct sctp_assoc_value in delayed_ack socket option.
[  695.674656][T13774] Use struct sctp_sack_info instead
[  696.040012][T13779] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1923'.
[  696.329410][   T30] audit: type=1400 audit(2000000083.460:1143): avc:  denied  { append } for  pid=13771 comm="syz.3.1922" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  696.363040][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  696.585579][T13783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1924'.
[  697.218453][T13793] FAULT_INJECTION: forcing a failure.
[  697.218453][T13793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  697.231575][T13793] CPU: 0 UID: 0 PID: 13793 Comm: syz.6.1928 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  697.231593][T13793] Tainted: [L]=SOFTLOCKUP
[  697.231597][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  697.231604][T13793] Call Trace:
[  697.231609][T13793]  <TASK>
[  697.231613][T13793]  dump_stack_lvl+0x100/0x190
[  697.231635][T13793]  should_fail_ex.cold+0x5/0xa
[  697.231650][T13793]  _copy_from_user+0x2e/0xd0
[  697.231667][T13793]  copy_msghdr_from_user+0x9f/0x4f0
[  697.231681][T13793]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  697.231699][T13793]  ___sys_sendmsg+0x106/0x1e0
[  697.231711][T13793]  ? __pfx____sys_sendmsg+0x10/0x10
[  697.231734][T13793]  ? __pfx_vfs_write+0x10/0x10
[  697.231748][T13793]  ? do_sys_openat2+0x157/0x1e0
[  697.231768][T13793]  __sys_sendmsg+0x170/0x220
[  697.231783][T13793]  ? __pfx___sys_sendmsg+0x10/0x10
[  697.231806][T13793]  do_syscall_64+0x106/0xf80
[  697.231822][T13793]  ? clear_bhb_loop+0x40/0x90
[  697.231836][T13793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.231848][T13793] RIP: 0033:0x7f397b79bf79
[  697.231858][T13793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.231869][T13793] RSP: 002b:00007f397c5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  697.231881][T13793] RAX: ffffffffffffffda RBX: 00007f397ba15fa0 RCX: 00007f397b79bf79
[  697.231888][T13793] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  697.231895][T13793] RBP: 00007f397c5c2090 R08: 0000000000000000 R09: 0000000000000000
[  697.231901][T13793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  697.231908][T13793] R13: 00007f397ba16038 R14: 00007f397ba15fa0 R15: 00007fff09dc67e8
[  697.231922][T13793]  </TASK>
[  697.412992][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  697.633107][ T5811] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  697.723069][   T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  697.873255][   T24] usb 6-1: Using ep0 maxpacket: 16
[  697.881504][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.893421][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  697.910923][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  697.935641][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  697.955705][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  697.975109][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  698.068407][   T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  698.077003][   T24] usb 6-1: Manufacturer: syz
[  698.098914][   T24] usb 6-1: config 0 descriptor??
[  698.433053][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  699.333525][   T24] rc_core: IR keymap rc-hauppauge not found
[  699.353111][   T24] Registered IR keymap rc-empty
[  699.372811][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  699.434097][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  699.473161][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  699.495716][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  699.709186][T13811] loop2: detected capacity change from 0 to 7
[  699.825159][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40
[  699.877343][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  699.993022][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.023186][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.030499][T13811] Dev loop2: unable to read RDB block 7
[  700.455740][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.513093][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  700.546758][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.573863][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.595204][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.598762][T13811]  loop2: unable to read partition table
[  700.624975][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.754753][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  700.974418][T13811] loop2: partition table beyond EOD, truncated
[  701.033167][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  701.054640][   T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  701.073094][T13811] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  701.084175][   T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  701.105350][   T24] usb 6-1: USB disconnect, device number 36
[  701.174124][ T5174] Dev loop2: unable to read RDB block 7
[  701.179745][ T5174]  loop2: unable to read partition table
[  701.227727][ T5174] loop2: partition table beyond EOD, truncated
[  701.275130][ T5174] Dev loop2: unable to read RDB block 7
[  701.295343][ T5174]  loop2: unable to read partition table
[  701.323141][ T5174] loop2: partition table beyond EOD, truncated
[  701.356296][T13825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  701.553075][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  702.171726][   T30] audit: type=1400 audit(2000000089.300:1144): avc:  denied  { mount } for  pid=13839 comm="syz.5.1941" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  702.193418][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  702.593072][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  702.673085][   T24] usb 7-1: Using ep0 maxpacket: 16
[  702.716050][T13849] blktrace: Concurrent blktraces are not allowed on loop10
[  702.724232][T13849] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  702.769901][   T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30
[  702.804513][   T24] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63
[  702.843464][T13845] bond1: (slave ip6gretap1): making interface the new active one
[  702.853450][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  702.867684][T13845] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  702.879047][   T24] usb 7-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  702.955111][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1942'.
[  703.012934][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.089581][   T24] usb 7-1: config 0 descriptor??
[  703.633085][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  703.655494][   T24] cypress 0003:04B4:07B1.000F: hidraw0: USB HID v0.09 Device [HID 04b4:07b1] on usb-dummy_hcd.6-1/input0
[  703.850594][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.373437][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.683130][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  704.753047][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.061004][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.137290][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  705.338147][    T9] usb 3-1: Using ep0 maxpacket: 16
[  705.393153][ T5808] usb 7-1: USB disconnect, device number 5
[  705.528065][T13869] loop2: detected capacity change from 0 to 7
[  705.547683][T13869] Dev loop2: unable to read RDB block 7
[  705.553458][T13869]  loop2: unable to read partition table
[  705.560086][T13869] loop2: partition table beyond EOD, truncated
[  705.566414][T13869] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  705.664454][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  705.682166][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  705.693142][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  705.712821][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  705.723154][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  705.742065][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  705.916405][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  705.935957][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  705.952512][    T9] usb 3-1: Manufacturer: syz
[  705.973447][    T9] usb 3-1: config 0 descriptor??
[  706.562978][    T9] rc_core: IR keymap rc-hauppauge not found
[  706.569437][    T9] Registered IR keymap rc-empty
[  706.577767][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  706.654159][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  706.691407][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  706.749380][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41
[  706.763034][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  706.811179][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  706.863939][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  706.926337][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  706.988978][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  707.073204][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  707.093572][   T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  707.162479][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  707.193886][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  707.236559][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  707.271218][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  707.793058][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  708.008720][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  708.020158][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  708.027360][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  708.043126][   T10] usb 4-1: config 1 has no interface number 1
[  708.050373][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  708.065725][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  708.109399][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  708.124853][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  708.143156][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  708.151662][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.176181][   T10] usb 4-1: Product: syz
[  708.180362][   T10] usb 4-1: Manufacturer: syz
[  708.195182][   T10] usb 4-1: SerialNumber: syz
[  708.268729][    T9] usb 3-1: USB disconnect, device number 49
[  708.341543][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1952'.
[  708.588934][   T10] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc
[  708.832999][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  708.943240][   T10] usb 4-1: USB disconnect, device number 38
[  709.029782][ T6565] udevd[6565]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  709.553956][   T30] audit: type=1400 audit(2000000096.620:1145): avc:  denied  { bind } for  pid=13906 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  709.873009][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  709.964105][T13913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'.
[  710.913023][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  711.864411][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  711.876037][   T30] audit: type=1400 audit(2000000099.000:1146): avc:  denied  { append } for  pid=13921 comm="syz.6.1953" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  711.903270][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  711.912732][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  711.927736][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  711.937957][   T30] audit: type=1400 audit(2000000099.010:1147): avc:  denied  { read } for  pid=13921 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  711.938025][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  711.957736][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  712.015665][T13929] lo speed is unknown, defaulting to 1000
[  712.022767][T13929] lo speed is unknown, defaulting to 1000
[  712.498733][T13929] chnl_net:caif_netlink_parms(): no params data found
[  712.993002][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  713.223334][T13929] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.239534][T13929] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.257138][T13929] bridge_slave_0: entered allmulticast mode
[  713.273407][T13929] bridge_slave_0: entered promiscuous mode
[  713.284698][T13929] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.305958][T13929] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.338772][T13929] bridge_slave_1: entered allmulticast mode
[  713.592540][T13929] bridge_slave_1: entered promiscuous mode
[  713.658836][T13929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.703749][T13929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  713.772353][T13929] team0: Port device team_slave_0 added
[  713.793902][T13929] team0: Port device team_slave_1 added
[  713.858796][T13929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.873247][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.957114][T13929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.994703][T13929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  714.016897][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  714.043029][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  714.050902][   T51] Bluetooth: hci0: command tx timeout
[  714.063143][T13929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.080218][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'.
[  714.106243][T13929] hsr_slave_0: entered promiscuous mode
[  714.112651][T13929] hsr_slave_1: entered promiscuous mode
[  714.119472][T13929] debugfs: 'hsr0' already exists in 'hsr'
[  714.125381][T13929] Cannot create hsr debugfs directory
[  714.319504][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1970'.
[  714.380724][   T30] audit: type=1400 audit(2000000101.480:1148): avc:  denied  { mounton } for  pid=13969 comm="syz.2.1972" path=2F3338382FE91F7189591E9233614B dev="tmpfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  714.594911][T13978] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1974'.
[  715.072976][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  715.553137][ T2575] block nbd0: Possible stuck request ffff888027c00000: control (read@0,1024B). Runtime 360 seconds
[  715.563901][ T2575] block nbd0: Possible stuck request ffff888027c00200: control (read@1024,1024B). Runtime 360 seconds
[  715.574866][ T2575] block nbd0: Possible stuck request ffff888027c00400: control (read@2048,1024B). Runtime 360 seconds
[  715.585944][ T2575] block nbd0: Possible stuck request ffff888027c00600: control (read@3072,1024B). Runtime 360 seconds
[  716.019191][T13929] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  716.055721][T13929] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  716.085021][T13929] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  716.113567][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  716.114380][   T51] Bluetooth: hci0: command tx timeout
[  716.127759][T13929] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  716.471858][T13929] 8021q: adding VLAN 0 to HW filter on device bond0
[  716.485625][T13929] 8021q: adding VLAN 0 to HW filter on device team0
[  716.500203][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.507366][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  716.551997][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.559182][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  716.582532][T13993] bond1: option mode: unable to set because the bond device has slaves
[  717.153044][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  717.332942][    T9] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  717.385403][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.453885][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1981'.
[  717.500740][T13929] veth0_vlan: entered promiscuous mode
[  717.508571][    T9] usb 6-1: no configurations
[  717.522083][    T9] usb 6-1: can't read configurations, error -22
[  717.571416][T13929] veth1_vlan: entered promiscuous mode
[  717.698407][T13929] veth0_macvtap: entered promiscuous mode
[  717.704646][    T9] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  717.748775][T13929] veth1_macvtap: entered promiscuous mode
[  717.847266][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.974307][    T9] usb 6-1: no configurations
[  717.989492][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  718.002926][    T9] usb 6-1: can't read configurations, error -22
[  718.033816][    T9] usb usb6-port1: attempt power cycle
[  718.055041][ T3546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  718.193019][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  718.492305][   T51] Bluetooth: hci0: command tx timeout
[  718.518455][ T3546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  718.590333][ T3546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  718.653900][ T3546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.763109][    T9] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  718.814779][    T9] usb 6-1: no configurations
[  718.819452][    T9] usb 6-1: can't read configurations, error -22
[  718.908014][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.943271][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.965167][    T9] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  719.026047][    T9] usb 6-1: no configurations
[  719.033457][    T9] usb 6-1: can't read configurations, error -22
[  719.050025][    T9] usb usb6-port1: unable to enumerate USB device
[  719.076131][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.103045][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.232993][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  719.326001][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1959'.
[  719.570150][   T30] audit: type=1400 audit(2000000106.610:1149): avc:  denied  { ioctl } for  pid=14040 comm="syz.2.1987" path="socket:[40322]" dev="sockfs" ino=40322 ioctlcmd=0x54cd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  720.272995][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  720.528508][   T51] Bluetooth: hci0: command tx timeout
[  721.313017][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  722.353037][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  723.334376][T14068] fuse: Unknown parameter 'group_i00000000000000000000'
[  723.343194][  T791] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  723.393001][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  723.643008][  T791] usb 6-1: Using ep0 maxpacket: 16
[  723.660191][  T791] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  723.783551][  T791] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  724.016188][   T30] audit: type=1400 audit(2000000111.080:1150): avc:  denied  { getopt } for  pid=14070 comm="syz.2.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  724.053466][   T30] audit: type=1400 audit(2000000111.080:1151): avc:  denied  { setattr } for  pid=14070 comm="syz.2.1997" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  724.097422][  T791] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  724.154353][  T791] usb 6-1: config 1 has no interface number 1
[  724.186483][  T791] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  724.233069][  T791] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  724.266962][  T791] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  724.433087][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  724.440350][  T791] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  724.465514][   T30] audit: type=1400 audit(2000000111.080:1152): avc:  denied  { mounton } for  pid=14070 comm="syz.2.1997" path="/396/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  724.506652][   T30] audit: type=1400 audit(2000000111.080:1153): avc:  denied  { getattr } for  pid=14070 comm="syz.2.1997" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  724.510953][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.694628][T13302] Bluetooth: hci6: Frame reassembly failed (-84)
[  724.712425][T14082] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1993'.
[  724.795434][  T791] usb 6-1: Product: syz
[  724.799645][  T791] usb 6-1: Manufacturer: syz
[  724.914465][  T791] usb 6-1: SerialNumber: syz
[  725.000272][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'.
[  725.221448][  T791] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  725.229400][  T791] usb 6-1: found format II with max.bitrate = 0, frame size=0
[  725.237440][  T791] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  725.307792][  T791] usb 6-1: USB disconnect, device number 41
[  725.473021][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  725.487294][T14074] bond1: (slave ip6gretap1): making interface the new active one
[  725.504721][T14074] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  725.733576][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.740391][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.746950][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.753480][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.759969][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.766553][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.773080][    C0] IPv4: Oversized IP packet from 172.20.20.10
[  725.791998][T14101] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma?
[  726.554446][T14122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2007'.
[  726.674051][   T51] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  728.201353][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2009'.
[  728.481949][T11675] Bluetooth: hci5: command 0x0406 tx timeout
[  728.592991][    C1] net_ratelimit: 27 callbacks suppressed
[  728.593010][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  728.779731][T14139] bond1: option mode: unable to set because the bond device has slaves
[  729.313743][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2012'.
[  729.331676][   T30] audit: type=1400 audit(2000000116.460:1154): avc:  denied  { connect } for  pid=14140 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  729.633089][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  730.449648][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'.
[  730.650340][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2018'.
[  730.682998][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  730.887436][T14164] trusted_key: encrypted_key: master key parameter 'us' is invalid
[  730.963545][   T30] audit: type=1400 audit(2000000118.100:1155): avc:  denied  { connect } for  pid=14162 comm="syz.6.2020" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  731.712996][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  732.288214][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2021'.
[  732.454286][T14175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2019'.
[  732.753702][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  733.647739][   T30] audit: type=1400 audit(2000000120.780:1156): avc:  denied  { create } for  pid=14186 comm="syz.1.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  733.793015][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  733.930871][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  733.943874][   T30] audit: type=1400 audit(2000000121.080:1157): avc:  denied  { listen } for  pid=14184 comm="syz.2.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  734.275820][ T6130] libceph: connect (1)[c::]:6789 error -101
[  734.281892][ T6130] libceph: mon0 (1)[c::]:6789 connect error
[  734.522997][ T5808] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  734.553218][    T9] libceph: connect (1)[c::]:6789 error -101
[  734.570361][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  734.683349][ T5808] usb 6-1: Using ep0 maxpacket: 32
[  734.699035][ T5808] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  734.725867][ T5808] usb 6-1: config 0 has no interface number 0
[  734.747222][ T5808] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  734.843007][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  734.918669][T14198] ceph: No mds server is up or the cluster is laggy
[  735.673242][ T6130] libceph: connect (1)[c::]:6789 error -101
[  735.679379][ T6130] libceph: mon0 (1)[c::]:6789 connect error
[  735.690012][ T5808] usb 6-1: config 0 interface 89 has no altsetting 0
[  735.700186][ T5808] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  735.711666][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.826712][ T5808] usb 6-1: Product: syz
[  735.830886][ T5808] usb 6-1: Manufacturer: syz
[  735.835519][ T5808] usb 6-1: SerialNumber: syz
[  735.842232][ T5808] usb 6-1: config 0 descriptor??
[  735.851726][ T5808] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  735.861526][ T5808] em28xx 6-1:0.89: Video interface 89 found: isoc
[  735.879073][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  736.379077][T14215] loop2: detected capacity change from 0 to 7
[  736.492930][T14215] Dev loop2: unable to read RDB block 7
[  736.498964][T14215]  loop2: unable to read partition table
[  736.505891][T14215] loop2: partition table beyond EOD, truncated
[  736.512302][T14215] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  736.912997][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  737.071994][ T5808] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  737.953113][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  738.365011][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.404224][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'.
[  738.404769][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.415688][T14233] 9p: Bad value for 'rfdno'
[  738.554012][ T5808] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  738.562151][ T5808] em28xx 6-1:0.89: board has no eeprom
[  738.738122][ T5808] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  738.756718][ T5808] em28xx 6-1:0.89: analog set to isoc mode.
[  738.764638][ T5862] em28xx 6-1:0.89: Registering V4L2 extension
[  738.855059][T14242] bridge0: port 3(vlan2) entered blocking state
[  738.861999][T14242] bridge0: port 3(vlan2) entered disabled state
[  738.870084][T14242] vlan2: entered allmulticast mode
[  738.875594][T14242] bridge0: entered allmulticast mode
[  738.993018][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  739.101690][ T5862] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  739.114335][T14242] vlan2: left allmulticast mode
[  739.146068][ T5862] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  739.154314][T14242] bridge0: left allmulticast mode
[  739.283802][ T5862] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  739.289778][ T6130] usb 6-1: USB disconnect, device number 42
[  739.313851][ T6130] em28xx 6-1:0.89: Disconnecting em28xx
[  739.885875][ T5862] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  739.919117][ T5862] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  739.941863][ T5862] em28xx 6-1:0.89: No AC97 audio processor
[  739.962652][ T5862] usb 6-1: Decoder not found
[  740.033064][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  740.060087][ T5862] em28xx 6-1:0.89: failed to create media graph
[  740.068258][ T5862] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  740.075535][   T30] audit: type=1400 audit(2000000127.210:1158): avc:  denied  { listen } for  pid=14248 comm="syz.1.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  740.076493][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'.
[  740.118157][ T5862] em28xx 6-1:0.89: Registering snapshot button...
[  740.159188][ T5862] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input42
[  740.177309][ T5862] em28xx 6-1:0.89: Remote control support is not available for this card.
[  740.197629][T14030] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  740.205471][ T6130] em28xx 6-1:0.89: Closing input extension
[  740.212322][ T6130] em28xx 6-1:0.89: Deregistering snapshot button
[  740.491924][T14261] bond1: option mode: unable to set because the bond device has slaves
[  740.670150][T14030] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  740.712973][   T30] audit: type=1400 audit(2000000127.810:1159): avc:  denied  { watch watch_reads } for  pid=14256 comm="syz.1.2041" path="/422" dev="tmpfs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  740.804072][T14030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.812102][T14030] usb 3-1: Product: syz
[  740.838195][T14030] usb 3-1: Manufacturer: syz
[  740.843217][T14030] usb 3-1: SerialNumber: syz
[  740.853782][T14030] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  740.869293][ T6130] em28xx 6-1:0.89: Freeing device
[  740.877207][  T791] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  741.073108][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  741.496169][T14274] openvswitch: netlink: Message has 8 unknown bytes.
[  741.803403][ T5808] usb 3-1: USB disconnect, device number 50
[  741.967973][  T791] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  741.987152][  T791] ath9k_htc: Failed to initialize the device
[  742.017679][ T5808] usb 3-1: ath9k_htc: USB layer deinitialized
[  742.112987][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  743.153003][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  744.040733][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'.
[  744.203008][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  744.287169][   T31] INFO: task syz.0.1637:12625 blocked for more than 144 seconds.
[  744.298274][T14294] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.322899][   T31]       Tainted: G             L      syzkaller #0
[  744.347403][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  744.398504][   T31] task:syz.0.1637      state:D stack:28488 pid:12625 tgid:12624 ppid:5801   task_flags:0x400140 flags:0x00080002
[  744.448524][   T31] Call Trace:
[  744.461715][   T31]  <TASK>
[  744.478903][   T31]  __schedule+0xfee/0x6020
[  744.499927][   T31]  ? __lock_acquire+0x4a5/0x2630
[  744.544993][   T31]  ? rcu_is_watching+0x12/0xc0
[  744.560600][   T31]  ? __pfx___schedule+0x10/0x10
[  744.575737][   T31]  ? find_held_lock+0x2b/0x80
[  744.610454][   T31]  ? schedule+0x2bf/0x390
[  744.653391][   T31]  schedule+0xdd/0x390
[  744.657614][   T31]  schedule_preempt_disabled+0x13/0x30
[  744.723404][   T31]  __mutex_lock+0xc9a/0x1b90
[  744.728064][   T31]  ? bdev_open+0xa2/0xe40
[  744.732408][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  744.762647][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  744.781193][   T31]  ? bdev_open+0xa2/0xe40
[  744.789897][   T31]  bdev_open+0xa2/0xe40
[  744.800768][   T31]  ? iput+0x3a/0x40
[  744.807313][   T31]  blkdev_open+0x34e/0x4f0
[  744.813847][   T31]  do_dentry_open+0x6d8/0x1660
[  744.844299][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  744.855185][   T31]  vfs_open+0x82/0x3f0
[  744.863238][   T31]  path_openat+0x208c/0x31a0
[  744.867886][   T31]  ? __pfx_path_openat+0x10/0x10
[  744.872834][   T31]  do_file_open+0x20e/0x430
[  744.909583][   T31]  ? __pfx_do_file_open+0x10/0x10
[  744.931445][   T31]  ? alloc_fd+0x476/0x790
[  744.947843][   T31]  ? do_getname+0x191/0x390
[  744.962057][   T31]  do_sys_openat2+0x10d/0x1e0
[  744.983883][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  744.999740][   T31]  __x64_sys_openat+0x12d/0x210
[  745.011765][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[  745.024956][   T31]  ? do_user_addr_fault+0x8d6/0x12f0
[  745.030298][   T31]  do_syscall_64+0x106/0xf80
[  745.057504][   T31]  ? clear_bhb_loop+0x40/0x90
[  745.070907][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.086248][   T31] RIP: 0033:0x7f7681d5c84e
[  745.097188][   T31] RSP: 002b:00007f7682cd6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  745.121096][   T31] RAX: ffffffffffffffda RBX: 00007f7682cd76c0 RCX: 00007f7681d5c84e
[  745.146106][   T31] RDX: 0000000000000080 RSI: 00007f7682cd6c00 RDI: ffffffffffffff9c
[  745.169560][   T31] RBP: 00007f7682cd6c00 R08: 0000000000000000 R09: 0000000000000000
[  745.191656][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  745.214646][   T31] R13: 00007f7682016038 R14: 00007f7682015fa0 R15: 00007ffc7fd05898
[  745.233151][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  745.248560][   T31]  </TASK>
[  745.255504][   T31] 
[  745.255504][   T31] Showing all locks held in the system:
[  745.282935][   T31] 1 lock held by khungtaskd/31:
[  745.292488][   T31]  #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  745.323898][   T31] 2 locks held by getty/5561:
[  745.340164][   T31]  #0: ffff8880391820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  745.365324][   T31]  #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  745.391870][   T31] 1 lock held by udevd/5791:
[  745.411129][   T31]  #0: ffff8880276b4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  745.433421][   T31] 3 locks held by syz-executor/5810:
[  745.446388][   T31] 1 lock held by syz.0.1637/12625:
[  745.460485][   T31]  #0: ffff8880276b4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  745.483126][   T31] 1 lock held by syz.5.2040/14258:
[  745.488264][   T31] 2 locks held by syz.3.2042/14271:
[  745.503893][   T31] 2 locks held by dhcpcd/14297:
[  745.525283][   T31]  #0: ffff888057c99908 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  745.568833][   T31]  #1: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  745.606154][   T31] 
[  745.608531][   T31] =============================================
[  745.608531][   T31] 
[  745.641885][   T31] NMI backtrace for cpu 1
[  745.641905][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  745.641929][   T31] Tainted: [L]=SOFTLOCKUP
[  745.641935][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  745.641944][   T31] Call Trace:
[  745.641950][   T31]  <TASK>
[  745.641957][   T31]  dump_stack_lvl+0x100/0x190
[  745.641989][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  745.642019][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  745.642046][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  745.642068][   T31]  sys_info+0x141/0x190
[  745.642093][   T31]  watchdog+0xcc3/0xfe0
[  745.642120][   T31]  ? __pfx_watchdog+0x10/0x10
[  745.642141][   T31]  ? __kthread_parkme+0x18c/0x230
[  745.642165][   T31]  ? kthread+0x13a/0x450
[  745.642187][   T31]  ? __pfx_watchdog+0x10/0x10
[  745.642205][   T31]  kthread+0x370/0x450
[  745.642228][   T31]  ? __pfx_kthread+0x10/0x10
[  745.642254][   T31]  ret_from_fork+0x754/0xd80
[  745.642281][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  745.642309][   T31]  ? __switch_to+0x7b4/0x10c0
[  745.642328][   T31]  ? __pfx_kthread+0x10/0x10
[  745.642354][   T31]  ret_from_fork_asm+0x1a/0x30
[  745.642386][   T31]  </TASK>
[  745.642393][   T31] Sending NMI from CPU 1 to CPUs 0:
[  745.771071][    C0] NMI backtrace for cpu 0
[  745.771087][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  745.771106][    C0] Tainted: [L]=SOFTLOCKUP
[  745.771111][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  745.771120][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  745.771142][    C0] Code: 0e 91 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ed 2a 00 fb f4 <e9> 3c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  745.771155][    C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242
[  745.771168][    C0] RAX: 00000000036358c1 RBX: ffffffff8e4975c0 RCX: ffffffff8b80ac75
[  745.771177][    C0] RDX: 0000000000000000 RSI: ffffffff8de6b9c0 RDI: ffffffff8c1adaa0
[  745.771186][    C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086755
[  745.771194][    C0] R10: ffff8880b8433aab R11: 0000000000000000 R12: fffffbfff1c92eb8
[  745.771203][    C0] R13: 0000000000000000 R14: ffffffff90d8d0d0 R15: 0000000000000000
[  745.771211][    C0] FS:  0000000000000000(0000) GS:ffff88812438b000(0000) knlGS:0000000000000000
[  745.771225][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  745.771234][    C0] CR2: 00007fc3cb9e9358 CR3: 000000007521a000 CR4: 00000000003526f0
[  745.771244][    C0] Call Trace:
[  745.771249][    C0]  <TASK>
[  745.771254][    C0]  default_idle+0x9/0x10
[  745.771274][    C0]  default_idle_call+0x6c/0xb0
[  745.771295][    C0]  do_idle+0x35b/0x4b0
[  745.771314][    C0]  ? __pfx_do_idle+0x10/0x10
[  745.771333][    C0]  cpu_startup_entry+0x4f/0x60
[  745.771349][    C0]  rest_init+0x251/0x260
[  745.771363][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  745.771384][    C0]  start_kernel+0x47f/0x480
[  745.771403][    C0]  x86_64_start_reservations+0x24/0x30
[  745.771427][    C0]  x86_64_start_kernel+0x12b/0x130
[  745.771446][    C0]  common_startup_64+0x13e/0x148
[  745.771470][    C0]  </TASK>
[  746.102959][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  746.109836][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  746.120488][   T31] Tainted: [L]=SOFTLOCKUP
[  746.124788][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  746.134814][   T31] Call Trace:
[  746.138075][   T31]  <TASK>
[  746.140995][   T31]  dump_stack_lvl+0x100/0x190
[  746.145654][   T31]  vpanic+0x552/0x970
[  746.149616][   T31]  ? __pfx_vpanic+0x10/0x10
[  746.154088][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[  746.159269][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  746.165406][   T31]  panic+0xd1/0xe0
[  746.169101][   T31]  ? __pfx_panic+0x10/0x10
[  746.173489][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  746.179615][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  746.185747][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  746.191878][   T31]  ? watchdog.cold+0x198/0x1ca
[  746.196630][   T31]  ? watchdog+0xcd3/0xfe0
[  746.200950][   T31]  watchdog.cold+0x1a9/0x1ca
[  746.205516][   T31]  ? __pfx_watchdog+0x10/0x10
[  746.210166][   T31]  ? __kthread_parkme+0x18c/0x230
[  746.215174][   T31]  ? kthread+0x13a/0x450
[  746.219390][   T31]  ? __pfx_watchdog+0x10/0x10
[  746.224042][   T31]  kthread+0x370/0x450
[  746.228103][   T31]  ? __pfx_kthread+0x10/0x10
[  746.232670][   T31]  ret_from_fork+0x754/0xd80
[  746.237237][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  746.242353][   T31]  ? __switch_to+0x7b4/0x10c0
[  746.247002][   T31]  ? __pfx_kthread+0x10/0x10
[  746.251595][   T31]  ret_from_fork_asm+0x1a/0x30
[  746.256368][   T31]  </TASK>
[  746.259674][   T31] Kernel Offset: disabled
[  746.263977][   T31] Rebooting in 86400 seconds..