last executing test programs:

2m17.054980588s ago: executing program 2 (id=1842):
r0 = socket$inet(0x2, 0x3, 0x7f) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={<r2=>0x0, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x4}}, 0xfff7, 0x2}, &(0x7f0000000000)=0x90)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x3, 0x71}, &(0x7f0000000180)=0x8)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x90, "cff9392558992f3eaf56b3143eb459acbc2da7844c6257779f138b1a601ce254aa4154c313ce87be296f2e5d444a9d67dbdc6fe03cd4f17ce6c65a3df4def48dfbffac4129eca0e4fdf2cb86d204b2f4b8cda93c141f14ba9f1208dcc798032441ccc85329c86f2f95f1f6313d026b90ae2e5d171470320bda463e1c845e5241c7871614fe12aa9962b2d8e358304af8"}, &(0x7f0000000300)=0x98) (async, rerun: 64)
r3 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64)
sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4040012}, 0x8800)

2m16.98925985s ago: executing program 2 (id=1844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r4, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
r5 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x240c4800}, 0x0)
getsockopt(r5, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102386, &(0x7f0000000040)=0x18ff2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f00000199c0)={0x1, {{0xa, 0x4e21, 0x2, @mcast2, 0x1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60120008001c3afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x10, &(0x7f0000000040), 0x4)
syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000180), 0x4)
socket$netlink(0x10, 0x3, 0x4)
r11 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000b00)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2b}], 0x1c)

2m16.903243552s ago: executing program 2 (id=1848):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)

2m15.502454278s ago: executing program 2 (id=1872):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x10, 0x1, 0x7, 0xffffff32, {{0x14, 0x4, 0x1, 0x3, 0x50, 0x68, 0x0, 0xe7, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0x1b, 0x6f, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x9, 0x0}, @empty]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x7, 0xd, "68eaf36d7815959befc221"}, {0x2, 0x6, "fbc4e06a"}, {0x6, 0x7, "aebfdb585d"}]}]}}}}})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="5100000013ec060a2bbd000000000000", @ANYRES32=r1, @ANYBLOB="600900006522020030001a8009000100766c616e00000000200004801c0004800c00010003000000070000000c0001000000000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8014)

2m15.385209469s ago: executing program 2 (id=1874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c47f49541ce800", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', '\x00\x00\x00\x00!\x00'}, 0x6b)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000700)=0x207, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x2, 0x3, 0x8001, 0xf750, r3})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x38, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x6, 0x2, 0x1, 0x0, [@empty, @empty, @mcast2]}]}}}}}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x210401, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
personality(0x5400004)

2m15.288692885s ago: executing program 2 (id=1875):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x60882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}])
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))
fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4000007fffffff})
fcntl$lock(r3, 0x25, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x6})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x49, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x1, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0xffff, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80020000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x1, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x2, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x5, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x24000, 0x10)
write$binfmt_script(r7, &(0x7f0000000100), 0x4)
write$UHID_CREATE2(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000500fcffffff06000000ff03000000100000a2ea20f39e68ece356f1288e1a990abe6ff30bf1dd3b334d63cf80"], 0x133)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}}, 0x2e)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x1, 0x0, 0x8}}, 0x2e)
getsockopt(r10, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

1m59.248009526s ago: executing program 32 (id=1875):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x60882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}])
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))
fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4000007fffffff})
fcntl$lock(r3, 0x25, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x6})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x49, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x1, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0xffff, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80020000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x1, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x2, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x5, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x24000, 0x10)
write$binfmt_script(r7, &(0x7f0000000100), 0x4)
write$UHID_CREATE2(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000500fcffffff06000000ff03000000100000a2ea20f39e68ece356f1288e1a990abe6ff30bf1dd3b334d63cf80"], 0x133)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}}, 0x2e)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x1, 0x0, 0x8}}, 0x2e)
getsockopt(r10, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

1m54.133881176s ago: executing program 0 (id=2095):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x1}, {0x5f32, 0x8}]}})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

1m54.128787956s ago: executing program 0 (id=2098):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000040)=0x15)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
sigaltstack(&(0x7f0000000300)={0x0, 0x3}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

1m53.887385413s ago: executing program 0 (id=2104):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80)
socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newspdinfo={0x54, 0x24, 0x200, 0x70bd29, 0x25dfdbff, 0x19a, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000", @ANYBLOB="0000000000000000b703"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000", @ANYBLOB="0000000000000000b703"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r4, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfc01}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x89}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x2e, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500))
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x43) (async)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x43)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2e09}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008054}, 0x800)

1m53.616703219s ago: executing program 0 (id=2107):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = memfd_secret(0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x100000000000000, 0x50000, 0x80000000, 0xa, 0x4})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x41000, 0x100000, 0xb, 0xb, 0x4})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

1m53.492119782s ago: executing program 0 (id=2110):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x1, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0)
io_uring_enter(r1, 0x1755, 0x4c0, 0x43, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$eventfd(r4, &(0x7f0000000100), 0xfffffd79)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'})
ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f0000000100))
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x0, "55e05cb6680cc32a4bfdca1886c5aded253bc9c89ed279cb8757af722fec30f7", 0x5, 0x100, 0x2, 0x7, 0x8, 0x0, 0x75, 0x5})

1m52.561060393s ago: executing program 0 (id=2127):
r0 = memfd_secret(0x80000)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$RTC_PIE_OFF(r0, 0x7006)
fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '@\x00'}, &(0x7f0000000040)='\x00', 0x1, 0x3)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={<r1=>0x0, 0x9, 0x5, 0xfb, 0x4, 0x9, 0x62, 0x4, {0x0, @in6={{0xa, 0x4e21, 0x7, @empty}}, 0x3d8, 0x5, 0x1, 0x200, 0xfffffff8}}, &(0x7f0000000140)=0xb0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0xffff, 0xffff, 0x4, 0x5, 0x4, 0x5, 0x9, 0x2189, r1}, 0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x7d69, <r2=>r1}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r2, 0x2, 0x0, 0xffff, 0x81}, &(0x7f0000000280)=0x18)
ioctl$RTC_WIE_ON(r0, 0x700f)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r0, 0x0, 0x7, 0x210ef8, 0x49, &(0x7f0000000300)="3a3f9d8ff97e34936fa1008ec8735c454ef9d586d2dd7b4b768312809c22eaae2e4dc6357c524f6127a6d1853babfb15337cb7c1e3fff17956adfa829d179421c2b24bb2304d05465f", 0x4})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r2, 0x6, 0x6}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>r4, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000015c0)={0x58, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x22}, @fda={0x66646185, 0x1, 0x1, 0x7}}, &(0x7f0000000500)={0x0, 0x18, 0x38}}}, @dead_binder_done, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f00000005c0)="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"})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001600)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r6 = syz_open_dev$vcsa(&(0x7f0000001680), 0x9927, 0x80)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000001740)={0x18, 0x0, 0x8, 0x0, &(0x7f00000016c0)=[{0x10000, 0x81}, {0x6, 0x5}, {0x2, 0x1}, {0x7fffffffffffffff, 0x47}, {0x9, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0xfffffffffffffff7}]})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001780)={<r7=>r2, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x5}, &(0x7f0000001840)=0x90)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000001880)={r7, 0x6, 0x3}, 0x8)
lseek(r3, 0x4, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x84, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xd09}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x30009093}, 0x8008011)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001a40)={0x3, 'wlan0\x00', {0x9}, 0x8})
getpeername$llc(r5, &(0x7f0000001a80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001ac0)=0x10)
sendmsg$rds(r0, &(0x7f0000002280)={&(0x7f0000001b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/132, 0x84}, {&(0x7f0000001c00)=""/183, 0xb7}, {&(0x7f0000001cc0)=""/184, 0xb8}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001e40)=""/155, 0x9b}], 0x5, &(0x7f0000002180)=[@mask_cswp={0x58, 0x114, 0x9, {{0x94, 0x2}, &(0x7f0000001f80)=0x1, &(0x7f0000001fc0)=0x1, 0x8e, 0x5, 0x1, 0x8000000000000001, 0x40, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0xc00ee73, 0x40}, {&(0x7f0000002000)=""/59, 0x3b}, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/99, 0x63}], 0x1, 0x0, 0x40}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xb76}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002100)=""/15, 0xf}, &(0x7f0000002140), 0x20}}], 0xe8, 0x20000004}, 0x4)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000022c0)=0x1, 0x4)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000002300)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000002340)={0x28, 0x5, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000})

1m36.512202077s ago: executing program 33 (id=2127):
r0 = memfd_secret(0x80000)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$RTC_PIE_OFF(r0, 0x7006)
fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '@\x00'}, &(0x7f0000000040)='\x00', 0x1, 0x3)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={<r1=>0x0, 0x9, 0x5, 0xfb, 0x4, 0x9, 0x62, 0x4, {0x0, @in6={{0xa, 0x4e21, 0x7, @empty}}, 0x3d8, 0x5, 0x1, 0x200, 0xfffffff8}}, &(0x7f0000000140)=0xb0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0xffff, 0xffff, 0x4, 0x5, 0x4, 0x5, 0x9, 0x2189, r1}, 0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x7d69, <r2=>r1}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r2, 0x2, 0x0, 0xffff, 0x81}, &(0x7f0000000280)=0x18)
ioctl$RTC_WIE_ON(r0, 0x700f)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r0, 0x0, 0x7, 0x210ef8, 0x49, &(0x7f0000000300)="3a3f9d8ff97e34936fa1008ec8735c454ef9d586d2dd7b4b768312809c22eaae2e4dc6357c524f6127a6d1853babfb15337cb7c1e3fff17956adfa829d179421c2b24bb2304d05465f", 0x4})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r2, 0x6, 0x6}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>r4, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000015c0)={0x58, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x22}, @fda={0x66646185, 0x1, 0x1, 0x7}}, &(0x7f0000000500)={0x0, 0x18, 0x38}}}, @dead_binder_done, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f00000005c0)="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"})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001600)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r6 = syz_open_dev$vcsa(&(0x7f0000001680), 0x9927, 0x80)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000001740)={0x18, 0x0, 0x8, 0x0, &(0x7f00000016c0)=[{0x10000, 0x81}, {0x6, 0x5}, {0x2, 0x1}, {0x7fffffffffffffff, 0x47}, {0x9, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0xfffffffffffffff7}]})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001780)={<r7=>r2, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x5}, &(0x7f0000001840)=0x90)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000001880)={r7, 0x6, 0x3}, 0x8)
lseek(r3, 0x4, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x84, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xd09}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x30009093}, 0x8008011)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001a40)={0x3, 'wlan0\x00', {0x9}, 0x8})
getpeername$llc(r5, &(0x7f0000001a80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001ac0)=0x10)
sendmsg$rds(r0, &(0x7f0000002280)={&(0x7f0000001b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/132, 0x84}, {&(0x7f0000001c00)=""/183, 0xb7}, {&(0x7f0000001cc0)=""/184, 0xb8}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001e40)=""/155, 0x9b}], 0x5, &(0x7f0000002180)=[@mask_cswp={0x58, 0x114, 0x9, {{0x94, 0x2}, &(0x7f0000001f80)=0x1, &(0x7f0000001fc0)=0x1, 0x8e, 0x5, 0x1, 0x8000000000000001, 0x40, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0xc00ee73, 0x40}, {&(0x7f0000002000)=""/59, 0x3b}, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/99, 0x63}], 0x1, 0x0, 0x40}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xb76}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002100)=""/15, 0xf}, &(0x7f0000002140), 0x20}}], 0xe8, 0x20000004}, 0x4)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000022c0)=0x1, 0x4)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000002300)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000002340)={0x28, 0x5, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000})

34.08941578s ago: executing program 5 (id=3082):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)

32.659945512s ago: executing program 5 (id=3088):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00')
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7)

32.659256563s ago: executing program 5 (id=3090):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000a80)={0xc0}) (async)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000300)=0x10) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40045}}, {{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x20048845}}], 0x2, 0x4000000) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c3314, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7, 0xfffffff8, 0xd, 0x10, 0x802, 0x8}, &(0x7f0000000100)=0x9c) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31", 0x54}], 0x2}, 0x4) (async)
r4 = socket$kcm(0x10, 0x2, 0x0) (async)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='c:::\x00B\f\x92D\xb4\x10\xaf\x19s\xb4,hK\r\xbf`\x8b<c\xc9l\x80\xc3L\x90\xe79i\xae\xdf.\xa0\x96\f\x92L\xa4\xca\xe7&Z\xfdP\xc5\x96\x00\x86\xdd\xd2\xd4iSubFN\x0eE\x81\xcb73\xe6\x82H\xbc\x7f\x8f\xff\xe7\xbb\x9bR\xff\xae`\x84,\xc3\xd62\xb3;5\xc2\xc9\x80`\x91\x1f\x1f\xac\x17\xf4\xf2\xa5\xfbcN\xa0\x89\x82\xd1\xc4\x1a\x12\a\x12n\xa4>\x94\xa9\n\xd0\xa1\xb4Rz\xe6\xdd\fh\x15k,\xf2\xca\xe1\xb0b\xbc\xb7\xb4\xff\r\xd2\x1c\x1f\xe6h\"p1\x0f\xd5\x89\xe8\xbd~%\xd3\xd8\xd1o+\xb2\xf8\x9c=\x86\x83P\x84\xa8Q@D\xc4\xdd\xdf\x85\xbf\xc7\v\tb\xf1\xd0 \x9a_y\xf4@P;$\xc1x9p\\%\xa4B\xb2CN\xe5\x7f\xe8\xf6\x00m8\xffK\xf7\xfb\xbe\xb2\x8arf\x17d}\xcd\xbc]^\xe5\xbad;q}\xdb\xfb\xf3?\xce\xb1\x82^\xef\x02\xea^!%\xb33Xhx\x8d\x9a:f\xc3\x80\xc4\xa7\x86 \xc3\xcf\xbd\x7f\b\x13\xa7\xedX\xb3\xfd\xf5\xbb4@\xb7:\xe6\xd5\x9d\x9b=\x03\xed\x06 \"\xdb\xe6\xba(\xa8&d\xb8:\xd6\xf2\x88?Z\x17', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='b:::\x00', 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000)
r7 = fsopen(&(0x7f0000000340)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000003c0)='.+*](*/4\x96\x00', 0x0, r0)

32.656838978s ago: executing program 5 (id=3092):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = getpgid(0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
r3 = geteuid()
mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1418b0, &(0x7f0000000180)={[], [{@flag='nolazytime'}, {@fsname={'fsname', 0x3d, '\xf6+\\.^{&+)N'}}, {@fowner_lt={'fowner<', r3}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, '\'*'}}, {@euid_gt={'euid>', r3}}]})
setns(r2, 0x66020000) (async)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async)
utimes(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

32.552270148s ago: executing program 5 (id=3094):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
close(0x3)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r3, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0)

32.302280332s ago: executing program 5 (id=3100):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48881) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

32.166500796s ago: executing program 34 (id=3100):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48881) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

1.748806199s ago: executing program 1 (id=3675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x5411, &(0x7f0000000100)={'erspan0\x00', 0xfffffffffffffffc, 0x2})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) (async, rerun: 64)
r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0}) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15e2c}]}}]}, 0x44}}, 0x20004094) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11) (async)
socket(0x2, 0x5, 0x0) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (async)
r12 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0)
ioctl$FBIOGET_VSCREENINFO(r12, 0x4600, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x3c, 0x14, 0x2, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x48, 0xfd, r14}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x10000}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x2, 0xfffffff8, 0xce78}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6bea}]}, 0x3c}}, 0x0)

1.689647587s ago: executing program 3 (id=3676):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000080)=0x5, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x80) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x7, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24040094) (async)
syz_emit_vhci(&(0x7f0000000b40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_disconn_rsp={{0x7, 0x2f, 0x4}, {0xfd, 0x5}}, @l2cap_conf_req={{0x4, 0x2, 0xc}, {0x2, 0xfff, [@l2cap_conf_mtu={0x1, 0x2, 0x225b}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}]}}, 0x21) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = syz_io_uring_setup(0x64d6, &(0x7f0000000180)={0x0, 0x47f, 0x20, 0x0, 0xc9}, &(0x7f0000000000), &(0x7f00000002c0)) (async)
r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00')
pread64(r12, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) (async)
io_uring_register$IORING_REGISTER_RING_FDS(r11, 0x14, &(0x7f0000000b00)=[{0x5, 0x1, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f00000007c0)=""/233, 0xe9}], &(0x7f0000000580)=[0x80000001, 0x0, 0x7, 0xcc30, 0xa, 0x2, 0xe39]}, {0x1, 0x1, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/229, 0xe5}], &(0x7f0000000a80)=[0xd7, 0x7fffffff, 0x5, 0x0, 0x2, 0x2, 0xfdb, 0x6, 0x0]}], 0x2) (async)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

1.685326407s ago: executing program 1 (id=3678):
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc)

1.684789132s ago: executing program 1 (id=3679):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x44}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

1.608777692s ago: executing program 1 (id=3682):
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000180)=[{&(0x7f00000005c0)="270502001c0014000600002f86dd", 0xe}, {&(0x7f0000000000)="17f97c641a43180f2c48789448e2df19fa010525f89ce0b42cb77b73a42324db6fcd41e1fdea6329", 0x28}], 0x2}, 0x20000800)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={<r6=>r5, @in6={{0xa, 0x0, 0x6, @empty}}, 0xfffd, 0x80}, &(0x7f0000000500)=0x90)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r6, 0x4)
r7 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$can_j1939(r7, 0x0, 0x2140)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7)

1.608360369s ago: executing program 4 (id=3683):
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080))
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={<r3=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={r3, r3, 0x80000001, 0x6, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[r3], 0x0, 0x1})

1.527708726s ago: executing program 4 (id=3684):
r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x40, 0x80, 0xfff, 0x0, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x65, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@generic={0x89, 0x10, "dbfd2dd087ed8bdcba34bd4f7034"}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x7f}, {@empty, 0x5}, {@loopback, 0x7}, {@multicast1, 0x2}, {@remote, 0x7}]}, @cipso={0x86, 0x1a, 0x2, [{0x2, 0x4, "0364"}, {0x2, 0x5, "6f120d"}, {0x6, 0xb, "634903ec7520eb0ce5"}]}, @generic={0x89, 0x8, "1bcc177c6f5b"}, @rr={0x7, 0x1b, 0xd2, [@remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}]}, @noop, @end, @timestamp={0x44, 0x10, 0xf4, 0x0, 0x8, [0x80, 0x7, 0x9]}, @ssrr={0x89, 0x13, 0x59, [@multicast1, @multicast1, @rand_addr=0x64010100, @multicast1]}]}}}}})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x2000)
msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4)
write$P9_RGETLOCK(r1, &(0x7f00000094c0)=ANY=[], 0x200002e6)
write$FUSE_INIT(r1, &(0x7f0000000200)={0x5d, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x81, 0x20008, 0x4, 0x3, 0x5, 0x800, 0x0, 0x0, 0x10, 0x1}}, 0x50)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)

1.525562821s ago: executing program 3 (id=3685):
r0 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140)
fcntl$setlease(r1, 0x400, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_LSEEK(r4, &(0x7f0000000080)={0x18, 0x0, r5, {0x7}}, 0x18)
chmod(&(0x7f0000000080)='./file0\x00', 0x104)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
fallocate(0xffffffffffffffff, 0x0, 0x800657, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x2a, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x9, 0x8, 0x5, 0x2d, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x564}, @jmp={0x5, 0x0, 0xa237f133de7e7a76, 0x8, 0x1, 0x20, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0xcf, &(0x7f0000000880)=""/207, 0x41100, 0x48, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000780)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x3, 0x2, 0x2, 0xc}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x3, 0x7, 0xc}, {0x2, 0x3, 0x1, 0x3}, {0x3, 0x2, 0x4, 0x1}, {0x4, 0x2, 0xf, 0x8}, {0x1, 0x3, 0x4, 0x4}, {0x0, 0x5, 0x8, 0x4}, {0x5, 0x1, 0x7, 0x6}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x1}, 0x94)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0)
pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000500)="4f9e1f322b858a03bb4caf883f020a87e5d8f0e709efd9a80d8dc6ec8e09c8bc69a7", 0x22}], 0x1, 0x9, 0x4)
ioctl(r3, 0x8b32, &(0x7f0000000040))
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x94}}}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000540)={0x200000000000001, 0x3}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.347210945s ago: executing program 6 (id=3686):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4a282)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x7ff, 0xfffffffe, 0x0, 'queue1\x00', 0x7f})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x2}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030001000000080001400200001108000240000000080900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

662.188585ms ago: executing program 1 (id=3687):
r0 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd700001dcdf250600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060000000a00389de35a8c09edd80000"], 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
ftruncate(r0, 0xffff)
fcntl$addseals(r0, 0x409, 0x7)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="cc4455b8", 0x4}], 0x1, 0x4, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$dsp(r5, &(0x7f0000000100)="e19f", 0x2)
mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r5, 0x0)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000002c0))
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESOCT=r4, @ANYRES16=r4, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES8=r4, @ANYRES8=r4], 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x0)

575.031438ms ago: executing program 4 (id=3688):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = userfaultfd(0x1)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00003c6000/0x2000)=nil, 0x2000}, 0x1}) (async)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) (async)
r2 = gettid()
syz_pidfd_open(r2, 0x0) (async, rerun: 32)
r3 = userfaultfd(0x80801) (rerun: 32)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_timeval(r4, 0x1, 0x2b, 0x0, &(0x7f0000000040))
sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="be8c8ed469f7ec240d88d41dcd10882f0b3e5170257711990ca458778702cc60859381fcaafb1844777ab2fb2a1ad82b9bb5e704edaff60dccd1c5fa7b85f0e80f7ff82a99bc4e961267359755955feab3a162254461dd43457ae73eef2e2a121ac7668eeba55ff8c67c80fc8f8ab5533f1a1289f601bec09c60280328e6d4925ccf5b573a7a521352f187994fccfc385e8fe862e6150415dcd37f5c7642fe2e1a68b03e6cb276ef97a5ef9b05093e3c62d6d66c41ca0778bb2f71d8af7e55d388af2e25721b9513adb883776697", 0xce}, {&(0x7f0000000400)="e1849e548b55d2e14c9865f3178aa4338cac4f9fce98207403e11b23e3bbdc7c0f64db53c17bf45282136accdfd57da602e27d91425ca9d786c63aa74843724cf35ec9b807fee5c32820b2c5cd0f4b212e85540efc102bfc9515ae767ed3dd73cd0ef3567349f1010c1ae01f7f262fe91933031df6fdb99846bac392d13caa05b25e7dd6fbde88417d0e7fad9d8ad5334d92a71c92e53acc357b2562cfb8dd33f63576459cc5e7847a", 0xa9}, {&(0x7f00000004c0)="75870d9132e5ccaf859ff730d82883d5309cfc18a81b02de2356fbbca66d2e95141601cea56525ea0ff56e937857109095dcaeaf947ebf040d11d5d1aad133d9e86b587f36f5e05f78fece80a88255180d71cc081586c01560cd87763857e6c4d47223a2999605dcd2af2f39d5f62e8af233306ac37205f27566ec1ddeea22e52f98db07b3053aa3e10399c5b1d25600f1c0a0c104d3c14df0a3a656c53ab6abe5a61955cb15359a304f37dad42eaf890e8bc610bf932269aea8edf3d10a0e1074d51e5bc8f8c8b2f0eeb657f34e70aa1f15b4", 0xd3}, {&(0x7f00000005c0)="875fdaa8548bc99b468db7a0fb369386c775c31feb10159adc8f36cc951485beb71e2d2cf2de24ad03272f303e71b4f2e0725de03c623675f202aba122c27836d27ba5936cc8f6d2a409c518ac7b11d2b4be2db96862f23dc3c4f4ffcaa230caa987c8533ae87bb6473fbba7f675152369646306d85252a660be8f3bab7292c0ebe11d399b2ea9abaa3b", 0x8a}], 0x4}, 0x40408c4) (async)
ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00003f8000/0x2000)=nil, 0x2000}}) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$FUSE_ATTR(r5, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x4db, 0x19, 0x0, {0x3, 0x2a, 0x3, 0x200, 0x5, 0x4, 0x8, 0xac, 0x5, 0x0, 0x1, 0xee00, 0x0, 0xb3, 0x1}}}, 0x78) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x404400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000005000/0x2000)=nil}) (async, rerun: 32)
r9 = dup(r8) (rerun: 32)
ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000002c0)=0x10000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)

574.251041ms ago: executing program 1 (id=3689):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2})
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000002c0)={'team0\x00', {0x2, 0x0, @empty}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x20, 0x20, 0x100, 0x8001, {{0x18, 0x4, 0x1, 0x1b, 0x60, 0x66, 0x0, 0x78, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, {[@rr={0x7, 0x23, 0x46, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @local, @remote, @broadcast]}, @lsrr={0x83, 0x13, 0xac, [@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast1]}, @rr={0x7, 0x13, 0x2c, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}]}}}}})

573.784966ms ago: executing program 3 (id=3690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000040)={@empty, <r1=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getnexthop={0x2c, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80)

570.615451ms ago: executing program 4 (id=3691):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001)
ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0x8a4, 0xa, 0x4, 0xe000, 0x3, {0x0, 0x2710}, {0x2, 0x19, 0x3, 0x7, 0x0, 0x7, "d0589f06"}, 0x0, 0x3, {&(0x7f00000000c0)=[{0x4, 0x1000, {0xfffffff9}, 0x9}, {0x8, 0x5, {0x9}, 0x10}]}, 0x1ff, 0x0, r1})
r2 = socket(0x1, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20)
close(0x3)
r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c, 0x80000)
getsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

471.712996ms ago: executing program 3 (id=3692):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xea8) (async)
ioctl$RTC_WIE_ON(r0, 0x700f) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
ioctl$RTC_AIE_OFF(r0, 0x7002) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000040)
r3 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r3, &(0x7f0000000700)={&(0x7f00000001c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/68, 0x44}], 0x6}, 0x12100) (async, rerun: 32)
r4 = timerfd_create(0x9, 0x80800) (async, rerun: 32)
syz_genetlink_get_family_id$fou(&(0x7f0000000740), r1) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780)={<r5=>0x0}, &(0x7f00000007c0)=0xc)
fcntl$setownex(r4, 0xf, &(0x7f0000000800)={0x1, r5}) (async)
ioctl$RTC_VL_CLR(r0, 0x7014) (async, rerun: 32)
syz_emit_ethernet(0x15c, &(0x7f0000000840)={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x8}, {}], @ipv6=@udp={0x3, 0x6, "e148e3", 0x11e, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@fragment={0x33, 0x0, 0x4, 0x1, 0x0, 0x3, 0x67}, @srh={0x0, 0x6, 0x4, 0x3, 0xe, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x6c, 0x6, 0x0, 0xa5, 0x0, [@mcast1, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @fragment={0x4f, 0x0, 0x30, 0x1, 0x0, 0x1, 0x67}, @dstopts={0x16, 0x0, '\x00', [@pad1]}, @srh={0x29, 0x8, 0x4, 0x4, 0xbb, 0x8, 0x1000, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1]}, @dstopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}], {0x4e22, 0x4e22, 0x26, 0x0, @opaque="9821208b4d60d63a8becb7e34284b5958b1b430076bcf03b021d01506256"}}}}}}}, &(0x7f00000009c0)={0x0, 0x4, [0x5c4, 0x117, 0x2b2, 0x52]}) (async, rerun: 32)
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a00), 0x24000, 0x0)
recvmsg$inet_nvme(r6, &(0x7f0000001f00)={&(0x7f0000000a40)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000ac0)=""/6, 0x6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/219, 0xdb}, {&(0x7f0000001c00)=""/27, 0x1b}, {&(0x7f0000001c40)=""/202, 0xca}, {&(0x7f0000001d40)=""/49, 0x31}, {&(0x7f0000001d80)=""/237, 0xed}], 0x7}, 0x2102) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000001f40)={'TPROXY\x00'}, &(0x7f0000001f80)=0x1e) (async)
r8 = socket$kcm(0x29, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002000), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0xf48d06a7062bb2f5}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x60, r9, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2e}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020805}, 0x0) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), r1)
sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000022c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002280)={<r12=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000002300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xec, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, r12}}, 0x30)
setxattr$trusted_overlay_opaque(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380), &(0x7f00000023c0), 0x2, 0x0) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000002400), &(0x7f0000002440)=0xc)

469.711541ms ago: executing program 4 (id=3693):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2635bff0080c200000008e94400001c00000000001190780800f11be00002017d201ee91934658d"], 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}}, 0x0)
getrandom(&(0x7f0000000180)=""/130, 0x82, 0x0)

469.00696ms ago: executing program 6 (id=3694):
syz_emit_ethernet(0x1017, &(0x7f0000000000)={@random="e33110495bfd", @empty, @void, {@llc_tr={0x11, {@snap={0xab, 0x0, 'oM', "c078d8", 0x4, "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"}}}}}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0)
syz_io_uring_setup(0x25ac, &(0x7f0000001040)={0x0, 0xa33c, 0x8, 0x2, 0x1b3, 0x0, r0}, &(0x7f00000010c0), &(0x7f0000001100))

468.640102ms ago: executing program 6 (id=3695):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x29, 0xb, 0x70bd26, 0x4000, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0/file0/file0\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1)

403.622154ms ago: executing program 3 (id=3696):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', <r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc00000019000100000000e7ffecffff1f01000007000000000000000031aaf2a55e8d2cb1000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000003000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000100000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000004400050064010101000000000000000000000000000004d36c0000000a00000000000000000000000000ffffac1414aa033500000200000009000000470200000f000000"], 0xfc}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0xe, 0x1ff, 0x8000, 0x4, 0x1, 0x80, 0x6, 0x1, r7}, &(0x7f0000000080)=0x20)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305888854c9cd7c0f91eaf560fe9c15ac07058f9412c577477b7f496e92ad53ca80f35253ad0adf6643c12927dd17124ba81642bfe5c7b69fe0f74f392684ecd04f0b88eaf28f154f5426c9d4b50bc5c915b978e011c7a80b6f946d0135b16c8d091b59dd001e035af8ac5b8fd9ac30a8c4be33051c86c22bf81adafb95b876ef50ee842062a8dd6ed0733528dc3e8f5c96fece", @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRESOCT=r2], 0x48}}, 0x40c4)

403.352149ms ago: executing program 6 (id=3697):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'gre0\x00', <r1=>0x0})
r2 = fsmount(0xffffffffffffffff, 0x0, 0x4)
getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0x4)
sendmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="f482b16b8ea9af1c17c5576bfdaa4c3b86b93fe4ce47f47ccb6f81a0073d7db23efa22a4b0decfcbd65cbfe2066f3c3c095b4f9366063280cc99aa85c8ab7c9802598d2229ed439d57599778e8cd43d98cc3a65c02ac433e25f86651cac5e0e29b378a64eb8dcae4540fdcc1119f57d959a57f94c923f6608bd5c71a85059c6f954fc7d58dce0b2c811127526946221c197dbf764c2e05edb42933e5dbc8cf1672c35a3cd2c78af8e6c80b82f03fdd37c9f7c7705b8b6a1de7f767fa1a9187b997c7eeabe5ef5b913e759a7b12", 0xcd}, {&(0x7f0000000040)="539ff4a4849095634d52d12ce9b55bd1ca84cef33100800e8766a404dd795a13e02b70e3b5", 0x25}, {&(0x7f00000002c0)="60b5460581fad0782ac4541c33a24fe6245c7be3a92a52eaec3046af9aed3c219bec35cbd847811d880945f2fd0a00c442ffb3e90487ca85823c032f6dad44f1e092be59c84e59bb177fb559ac4b32fe13e8caa477e25e558f87884d", 0x5c}, {&(0x7f0000000340)="56dc3f41d4d3f335cc869d7bce14ede321fa9fb2b3fb8c3e391c166405f6573d69df9b8e1d8ff5861ecb99c33f049db9c8838fc4463817bcb6c3382149c106619c618309e707cd4f4ef444595b1500335c53252857de69f12a4c74526181de7817ea5e532a89b46be16f4d6ed269711d97705192bbde50e0a6eea0d7130e6e3e51b5a8e299caab82d3bf1c0b6e7c9208792d90b1ea9a489082028923a260264c03904efa19ff6e08a1a00061845d83c647fff8", 0xb3}, {&(0x7f0000000400)="5b8568bbbc0e39358f19869ac842a0a09313a1f79d46d2af258efe3c558a2661b47a7128414f63748df85b4f217b2c4d3fc4fd5ce0d0589a8b0c7014c73bc4b5a0bbddc738e2598e0f09208c8225c40a55af53d841f316f71661ca1b34aa3f7e1f2fbc86c58149160969ae907c3fbaf0783f7c333fba14e4c52314c59e7d948dcb31907a1a2c2945361e86612e148cf1b4afbf0f505a4b3605a4b9f6f8fcf1b44aa7db119aa05c07593e5855ba77f31dbf4c8d61d6d83eee4cc3cd26c71f65c9e18dc486eee238f560d2a86d386b18c17bc076f6b67564e1199abf63dcfb4ce0ecc79c507f92589c8280bda360768cb3", 0xf0}, {&(0x7f0000000080)='F\\', 0x2}, {&(0x7f0000000580)="eb1e33cc9cd0ea58dca6d2996770bc10c7a0ad3f66f230c377141d30a967f328912157fc354354cb45b86741eb41cb624489dc510e8174dbbc8544f6f7348164f59c80c2f32559a6a853a428ccc3860632e86c265accbcbf8518e6a11c5415fbdef52e7d0765cfee5d40", 0x6a}, {&(0x7f0000000140)="f08d033438fdb651ff8286ff3db8c6cbb77f5416cdacad44654441bbfec1b9", 0x1f}, {&(0x7f0000000500)="c128b703a684f746e2e68749102f74d9747835316e2bd38c6e4f0a3f46979dc290ea5b81f838cdcf", 0x28}], 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1130}, 0x1)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

402.637279ms ago: executing program 3 (id=3698):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x1a1880)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, &(0x7f00000003c0))
open_by_handle_at(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], 0x30202)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x1000000075f, 0xa382)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
syz_emit_ethernet(0x7d, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @private0, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x41880016})
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x48005}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_TSC_KHZ_vm(r7, 0xaea3)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x5, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]})
r8 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r9=>0x0, &(0x7f0000000340)=<r10=>0x0)
r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r11)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r11, 0xc0085504, &(0x7f0000000140)=0x10)
syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}})
io_uring_enter(r8, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1)
r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r12, 0xc02c564a, &(0x7f00000001c0)={0x2, 0x6469620a, 0x3, @discrete={0xfffffff8, 0x20000001}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7)

278.089987ms ago: executing program 6 (id=3699):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4010)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xfff3}}}, 0x24}}, 0x0)

63.746212ms ago: executing program 6 (id=3700):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0)
r1 = gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {r2, r3+10000000}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005980)=ANY=[@ANYBLOB="20000000400007012bbd700000000000017c00dc18fbc3a68a90eb000c00c280"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) (async)
gettid() (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
clock_gettime(0x0, &(0x7f0000000040)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {r2, r3+10000000}}, 0x0) (async)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005980)=ANY=[@ANYBLOB="20000000400007012bbd700000000000017c00dc18fbc3a68a90eb000c00c280"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)

0s ago: executing program 4 (id=3701):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141200, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x9, 0x6, 0x80000001, 0x48ce, 0xfffffffffffffffd, 0x800000db})
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x39, 0x1a, r0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1})
utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2, 0x9})
fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0)
fanotify_mark(r2, 0x40, 0x48000001, r0, &(0x7f0000000080)='./file0\x00')
chdir(&(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000280)='.\x00', 0xc0, 0x0)

kernel console output (not intermixed with test programs):

=10
[  242.419566][   T10] usb 2-1: Product: QEMU USB Tablet
[  242.421293][   T10] usb 2-1: Manufacturer: QEMU
[  242.422832][   T10] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  242.444246][   T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0018/input/input43
[  242.453868][   T10] hid-generic 0003:0627:0001.0018: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  242.823056][T16079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'.
[  242.921019][T16091] gfs2: not a GFS2 filesystem
[  242.975891][T16093] bond1 (unregistering): Released all slaves
[  243.125279][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout
[  243.125308][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout
[  243.129223][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[  243.389456][T16208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.431522][T16207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  243.867341][T16132] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  244.229885][T16261] pimreg3: entered allmulticast mode
[  244.288899][T16267] syz.5.2627 (16267): drop_caches: 2
[  244.292244][T16268] syz.5.2627 (16268): drop_caches: 2
[  244.355187][   T47] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  244.525953][   T47] usb 9-1: Using ep0 maxpacket: 32
[  244.531239][   T47] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7
[  244.537744][   T47] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  244.541289][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.544385][   T47] usb 9-1: Product: И
[  244.545999][   T47] usb 9-1: Manufacturer: 뇕➧㵣〓턷覛漊㙾캋궗촥垯䴚엾頗県ਟᡤ螝錬࣊海檰䡷긡꼠漻榹嚡ꚱሣ෗訔麕쏒쎹뼽ꧧ遪焁ᇟГ酲຋ӏ岓뒇楥鴂␮䏭
[  244.557340][   T47] usb 9-1: SerialNumber: 枞壆貃䂸棱쇯荝오儖笲ﭢຯ冷ꕚဤ쎓腤ྻỳⱠ盄ಆ韗歋梜崲㌆뷾菛麒⎖賞긑짥±匓⯊ꬨ뮹凄彾ᵦ鉇㲉凱镇ℎꄚ敋脤괖虁땲둓곛塾턩ᷨ뛥鯝斲巀㙐㺧鉪攕峧ꠢ磗랃⃹Ꞙ㌴妯磮瑎敜ꏻ䁯뢎龠茏ꆱ산俫笛䞎赿醵ᢽⷯ᝗樶풄Ძ
[  244.679484][T16280] binder: 16279:16280 unknown command 0
[  244.681812][T16280] binder: 16279:16280 ioctl c0306201 200000000080 returned -22
[  244.817556][   T47] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  244.838918][   T47] usb 9-1: USB disconnect, device number 9
[  245.079573][T16326] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  245.083914][T16324] IPVS: stopping master sync thread 16326 ...
[  245.091685][T16324] vcan0: tx drop: invalid da for name 0x0000000000000002
[  245.095107][T16328] vcan0: tx drop: invalid da for name 0x0000000000000002
[  245.118401][T16330] netlink: 'syz.5.2638': attribute type 3 has an invalid length.
[  245.152686][T16330] __nla_validate_parse: 5 callbacks suppressed
[  245.152698][T16330] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2638'.
[  245.178237][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  245.302403][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'.
[  245.305904][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'.
[  245.349447][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[  245.351291][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout
[  245.390868][   T47] hid-generic 0362:07FF:7FFFFFFF.0019: item fetching failed at offset 0/2
[  245.395069][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'.
[  245.400789][   T47] hid-generic 0362:07FF:7FFFFFFF.0019: probe with driver hid-generic failed with error -22
[  245.528098][T16370] 9pnet_virtio: no channels available for device 127.0.0.1
[  245.579553][T16404] can0: slcan on ttyprintk.
[  245.650440][T16402] can0 (unregistered): slcan off ttyprintk.
[  245.837946][T16435] PKCS7: Unknown OID: [4] 5.25.43204.122
[  245.840553][T16435] PKCS7: Only support pkcs7_signedData type
[  245.848311][T16435] PKCS7: Unknown OID: [4] 5.25.43204.122
[  245.852524][T16435] PKCS7: Only support pkcs7_signedData type
[  245.989746][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'.
[  245.995183][T16447] hsr_slave_0: left promiscuous mode
[  245.997749][T16447] hsr_slave_1: left promiscuous mode
[  246.201341][T16469] sp0: Synchronizing with TNC
[  246.220717][T16468] [U] �`
[  246.399153][T16478] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2667'.
[  246.402250][T16478] nbd: socks must be embedded in a SOCK_ITEM attr
[  246.537714][T16484] netlink: 'syz.3.2669': attribute type 12 has an invalid length.
[  246.540214][T16484] netlink: 'syz.3.2669': attribute type 29 has an invalid length.
[  246.542756][T16484] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2669'.
[  246.574275][T16490] fuse: Bad value for 'fd'
[  246.576662][T16490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2671'.
[  247.081672][   T40] kauditd_printk_skb: 415 callbacks suppressed
[  247.081683][   T40] audit: type=1326 audit(236.440:61869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.090783][   T40] audit: type=1326 audit(236.440:61870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.098337][   T40] audit: type=1326 audit(236.440:61871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.105693][   T40] audit: type=1326 audit(236.440:61872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.113057][   T40] audit: type=1326 audit(236.440:61873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.120476][   T40] audit: type=1326 audit(236.440:61874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.127499][   T40] audit: type=1326 audit(236.440:61875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.135403][   T40] audit: type=1326 audit(236.440:61876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.142468][   T40] audit: type=1326 audit(236.440:61877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.150219][   T40] audit: type=1326 audit(236.458:61878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16495 comm="syz.4.2672" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0eae3c2085 code=0x7ffc0000
[  247.457553][T16489] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  247.462239][T16489] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  247.464969][T16489] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  247.468193][T16489] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  247.566092][T16534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.584333][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2689'.
[  247.657691][T16590] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2691'.
[  247.660098][T16538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16538 comm=syz.1.2689
[  247.868454][T16631] kAFS: Can only specify source 'none' with -o dyn
[  248.099156][T16677] nftables ruleset with unbound set
[  248.152837][T16677] program syz.5.2707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  248.157878][T16684] netlink: 'syz.1.2709': attribute type 4 has an invalid length.
[  248.169071][T16684] netlink: 'syz.1.2709': attribute type 4 has an invalid length.
[  248.617548][T16740] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  248.619668][T16740] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  248.626862][T16740] vhci_hcd vhci_hcd.0: Device attached
[  248.629666][T16741] vhci_hcd vhci_hcd.0: port 0 already used
[  248.632096][T16742] vhci_hcd: connection closed
[  248.632498][ T9980] vhci_hcd: stop threads
[  248.638077][ T9980] vhci_hcd: release socket
[  248.639656][ T9980] vhci_hcd: disconnect device
[  248.740583][T16758] delete_channel: no stack
[  248.775334][T16762] veth0_to_bond: entered allmulticast mode
[  248.856397][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  249.279264][T16783] bond1: invalid ARP target 0.0.0.0 specified for addition
[  249.281805][T16783] bond1: option arp_ip_target: invalid value (0)
[  249.285307][T16783] bond1 (unregistering): Released all slaves
[  249.636981][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout
[  249.637026][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[  249.638960][ T5936] Bluetooth: hci4: command 0x0c1a tx timeout
[  249.752873][T16897] binder: 16896:16897 ioctl c0306201 0 returned -14
[  249.790145][T16908] xt_hashlimit: overflow, rate too high: 0
[  249.806041][T16916] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  249.947373][T16931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.022370][T16931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=16931 comm=syz.1.2754
[  250.559390][T16973] overlayfs: failed to clone upperpath
[  250.720826][T16978] __nla_validate_parse: 5 callbacks suppressed
[  250.720840][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'.
[  250.846627][T16983] No buffer was provided with the request
[  250.885716][T16987] tipc: Started in network mode
[  250.887368][T16987] tipc: Node identity 522ee2b7ac0b, cluster identity 4711
[  250.891851][T16987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.903889][T16986] tipc: Disabling bearer <eth:syzkaller0>
[  251.016750][T16998] kAFS: unable to lookup cell 'syz0'
[  251.019482][T16998] tmpfs: Unknown parameter 'mode\���Q\n�'
[  251.236466][T17006] team0: Device gtp0 is up. Set it down before adding it as a team port
[  251.438184][T17013] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2777'.
[  251.930022][T17019] netlink: 'syz.3.2779': attribute type 29 has an invalid length.
[  251.934159][T17019] netlink: 'syz.3.2779': attribute type 29 has an invalid length.
[  251.965177][T17019] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2779'.
[  252.043000][T17035] cgroup: Need name or subsystem set
[  252.172572][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'.
[  252.181143][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.184869][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.186445][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2786'.
[  252.195718][T17047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.200024][T17047] binder: BC_ACQUIRE_RESULT not supported
[  252.201960][T17047] binder: 17045:17047 ioctl c0306201 200000000300 returned -22
[  252.205863][T17047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.425071][T17061] program syz.3.2791 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  252.431276][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'.
[  252.440796][   T40] kauditd_printk_skb: 503 callbacks suppressed
[  252.440808][   T40] audit: type=1400 audit(241.453:62382): avc:  denied  { setopt } for  pid=17060 comm="syz.3.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  252.451802][T17061] netlink: 'syz.3.2791': attribute type 11 has an invalid length.
[  252.455590][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'.
[  252.469684][   T40] audit: type=1400 audit(241.471:62383): avc:  denied  { execute } for  pid=17064 comm="syz.1.2793" path="/225/hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  252.492392][   T40] audit: type=1400 audit(241.509:62384): avc:  denied  { ioctl } for  pid=17064 comm="syz.1.2793" path="socket:[68751]" dev="sockfs" ino=68751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  252.562645][   T40] audit: type=1400 audit(241.565:62385): avc:  denied  { name_bind } for  pid=17064 comm="syz.1.2793" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  252.590838][   T40] audit: type=1400 audit(241.593:62386): avc:  denied  { recv } for  pid=5921 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46314 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  252.660075][   T40] audit: type=1400 audit(241.658:62387): avc:  denied  { kexec_image_load } for  pid=17082 comm="syz.3.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  252.700359][   T40] audit: type=1400 audit(241.696:62388): avc:  denied  { read write } for  pid=17085 comm="syz.3.2796" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  252.708351][   T40] audit: type=1400 audit(241.696:62389): avc:  denied  { open } for  pid=17085 comm="syz.3.2796" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  252.715787][   T40] audit: type=1400 audit(241.696:62390): avc:  denied  { ioctl } for  pid=17085 comm="syz.3.2796" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  252.778972][   T40] audit: type=1400 audit(241.761:62391): avc:  denied  { setopt } for  pid=17090 comm="syz.5.2797" lport=254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  252.973152][   T47] usb 8-1: new full-speed USB device number 48 using dummy_hcd
[  253.063770][T17122] tmpfs: Unknown parameter 'n�̗��o��'
[  253.145812][   T47] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  253.149741][   T47] usb 8-1: config 0 interface 0 has no altsetting 0
[  253.154596][   T47] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  253.159195][   T47] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  253.162446][   T47] usb 8-1: Product: syz
[  253.164177][   T47] usb 8-1: Manufacturer: syz
[  253.166254][   T47] usb 8-1: SerialNumber: syz
[  253.173732][   T47] usb 8-1: config 0 descriptor??
[  253.187167][   T47] usb 8-1: selecting invalid altsetting 0
[  253.415419][   T29] usb 8-1: USB disconnect, device number 48
[  253.525099][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.527096][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.531753][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.548012][T17182] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  253.557902][T17182] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  253.577655][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.580814][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.583649][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.587589][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.592368][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.595317][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.598251][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.600936][T17182] xfrm0 speed is unknown, defaulting to 1000
[  253.671138][T17200] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  253.731380][T17225] ALSA: mixer_oss: invalid OSS volume 'IGAgN'
[  253.733930][T17225] ALSA: mixer_oss: invalid OSS volume 'IM'
[  253.736820][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'.
[  253.739596][T17225] openvswitch: netlink: nsh attr 2568 is out of range max 3
[  253.742366][T17225] 9pnet_virtio: no channels available for device 127.0.0.1
[  254.008964][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'.
[  254.075503][T17242] overlayfs: failed to clone upperpath
[  254.090732][T17249] SELinux:  Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped).
[  254.133849][T17248] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  254.194732][T17247] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  254.274657][T17275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2832'.
[  254.626426][T17260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.638018][T17260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.965996][T17275] veth0_to_bond: left allmulticast mode
[  254.982328][   T29] xfrm0 speed is unknown, defaulting to 1000
[  254.982377][ T9977] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.985014][ T9977] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.986686][   T29] syz1: Port: 1 Link DOWN
[  254.993443][ T9977] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.996967][ T9977] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.030049][T17294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17294 comm=syz.1.2840
[  255.058764][T17294] xfrm0 speed is unknown, defaulting to 1000
[  255.426826][T17346] macvlan2: entered allmulticast mode
[  255.428740][T17346] veth1_to_hsr: entered allmulticast mode
[  255.580755][T17363] Bluetooth: MGMT ver 1.23
[  255.657872][T17291] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  255.795809][   T47] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  255.902874][   T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  255.978780][   T47] usb 9-1: config 0 has no interfaces?
[  255.980621][   T47] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  255.984041][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.990229][   T47] usb 9-1: config 0 descriptor??
[  256.063906][   T29] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  256.068282][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.071719][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.075553][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.079101][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.082077][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.085951][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.089673][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.093220][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.097531][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.101241][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.104667][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.109962][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.113640][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.117090][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.121259][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.124892][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.131841][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.136753][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.143260][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.146742][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.151146][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.154610][   T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.155975][T17402] overlayfs: failed to clone upperpath
[  256.158208][   T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  256.171044][   T29] usb 10-1: config 0 interface 0 has no altsetting 0
[  256.175177][   T29] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  256.178573][   T29] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  256.181888][   T29] usb 10-1: Product: syz
[  256.183157][   T29] usb 10-1: Manufacturer: syz
[  256.184893][   T29] usb 10-1: SerialNumber: syz
[  256.188972][   T29] usb 10-1: config 0 descriptor??
[  256.195760][   T29] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  256.229592][   T47] usb 9-1: USB disconnect, device number 10
[  256.256216][T17421] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  256.350403][T17423] __nla_validate_parse: 3 callbacks suppressed
[  256.350415][T17423] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2858'.
[  257.320899][T17465] syzkaller1: entered promiscuous mode
[  257.322909][T17465] syzkaller1: entered allmulticast mode
[  257.496606][T17485] ptrace attach of "/syz-executor exec"[14625] was attempted by ""[17485]
[  257.538833][T17489] netlink: 'syz.3.2878': attribute type 10 has an invalid length.
[  257.541992][T17489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2878'.
[  257.545135][T17489] dummy0: entered promiscuous mode
[  257.548192][T17489] bridge0: port 3(dummy0) entered blocking state
[  257.550511][T17489] bridge0: port 3(dummy0) entered disabled state
[  257.552756][T17489] dummy0: entered allmulticast mode
[  257.599046][T17506] tmpfs: Cannot change global quota limit on remount
[  257.746308][T17531] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=17531 comm=syz.1.2887
[  258.556605][   T40] kauditd_printk_skb: 356 callbacks suppressed
[  258.556616][   T40] audit: type=1400 audit(247.176:62748): avc:  denied  { unmount } for  pid=14625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  258.847911][   T29] usb 10-1: USB disconnect, device number 4
[  258.852204][   T29] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  273.943326][   T40] audit: type=1400 audit(261.560:62749): avc:  denied  { execute } for  pid=17587 comm="syz.3.2891" dev="hugetlbfs" ino=68025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  273.948175][T17593] SELinux:  Context � is not valid (left unmapped).
[  273.959720][   T40] audit: type=1400 audit(261.560:62750): avc:  denied  { execute_no_trans } for  pid=17587 comm="syz.3.2891" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=68025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  273.982871][   T40] audit: type=1400 audit(261.560:62751): avc:  denied  { create } for  pid=17589 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  273.989451][   T40] audit: type=1400 audit(261.560:62752): avc:  denied  { setopt } for  pid=17589 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  273.997413][   T40] audit: type=1400 audit(261.560:62753): avc:  denied  { write } for  pid=17589 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  274.003457][   T40] audit: type=1400 audit(261.560:62754): avc:  denied  { read append } for  pid=17591 comm="syz.4.2890" name="cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  274.013767][   T40] audit: type=1400 audit(261.560:62755): avc:  denied  { open } for  pid=17591 comm="syz.4.2890" path="/dev/cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  274.021790][   T40] audit: type=1400 audit(261.560:62756): avc:  denied  { ioctl } for  pid=17591 comm="syz.4.2890" path="/dev/cec4" dev="devtmpfs" ino=999 ioctlcmd=0x6107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  274.029752][   T40] audit: type=1400 audit(261.560:62757): avc:  denied  { mac_admin } for  pid=17591 comm="syz.4.2890" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  274.036197][   T40] audit: type=1400 audit(261.560:62758): avc:  denied  { node_bind } for  pid=17589 comm="syz.5.2888" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  274.295615][T17624] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  274.333856][T17627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17627 comm=syz.1.2900
[  274.387304][T17631] netlink: 'syz.1.2901': attribute type 1 has an invalid length.
[  274.406246][T17631] 8021q: adding VLAN 0 to HW filter on device bond3
[  274.411546][T17631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17631 comm=syz.1.2901
[  274.416626][T17631] bond3: entered allmulticast mode
[  274.439872][T17666] netlink: 'syz.4.2902': attribute type 2 has an invalid length.
[  274.696728][T17689] vivid-007: =================  START STATUS  =================
[  274.701232][T17689] vivid-007: Generate PTS: true
[  274.704976][T17689] vivid-007: Generate SCR: true
[  274.707164][T17689] tpg source WxH: 320x240 (Y'CbCr)
[  274.709431][T17689] tpg field: 1
[  274.711214][T17689] tpg crop: (0,0)/320x240
[  274.713120][T17689] tpg compose: (0,0)/320x240
[  274.715188][T17689] tpg colorspace: 8
[  274.716942][T17689] tpg transfer function: 0/0
[  274.719036][T17689] tpg Y'CbCr encoding: 0/0
[  274.721109][T17689] tpg quantization: 0/0
[  274.723433][T17689] tpg RGB range: 0/2
[  274.724992][T17689] vivid-007: ==================  END STATUS  ==================
[  274.761282][T17691] fuse: Bad value for 'group_id'
[  274.766379][T17691] fuse: Bad value for 'group_id'
[  274.853906][T17699] CIFS mount error: No usable UNC path provided in device string!
[  274.853906][T17699] 
[  274.858032][T17699] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  275.609845][T17757] overlayfs: failed to resolve './file0': -2
[  275.909703][T17767] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  276.032582][T17787] bond0: entered promiscuous mode
[  276.034564][T17787] bond_slave_0: entered promiscuous mode
[  276.036904][T17787] bond_slave_1: entered promiscuous mode
[  276.235895][T17801] netlink: 'syz.1.2939': attribute type 1 has an invalid length.
[  276.249166][T17801] 8021q: adding VLAN 0 to HW filter on device bond4
[  276.265547][T17838] misc userio: The device must be registered before sending interrupts
[  276.268698][T17841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.313121][T17801] bond4: (slave veth5): Enslaving as an active interface with a down link
[  276.330471][T17801] 8021q: adding VLAN 0 to HW filter on device batadv1
[  276.332892][T17801] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  276.458762][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2947'.
[  276.493122][T17930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17930 comm=syz.3.2947
[  276.493149][T17931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17931 comm=syz.3.2947
[  276.527037][ T5947] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  276.529110][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'.
[  276.588772][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'.
[  276.708143][T18019] bridge3: the hash_elasticity option has been deprecated and is always 16
[  276.839902][   T69] usb 8-1: new full-speed USB device number 49 using dummy_hcd
[  276.941038][T18026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  277.021749][   T69] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  277.025333][   T69] usb 8-1: config 0 interface 0 has no altsetting 0
[  277.029208][   T69] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  277.034482][   T69] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  277.037109][   T69] usb 8-1: Product: syz
[  277.038566][   T69] usb 8-1: Manufacturer: syz
[  277.040061][   T69] usb 8-1: SerialNumber: syz
[  277.043462][   T69] usb 8-1: config 0 descriptor??
[  277.049162][   T69] usb 8-1: selecting invalid altsetting 0
[  277.441795][   T59] usb 8-1: USB disconnect, device number 49
[  277.806368][T18072] CIFS mount error: No usable UNC path provided in device string!
[  277.806368][T18072] 
[  277.809566][T18072] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  277.829388][T18074] program syz.5.2964 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  277.873241][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2965'.
[  277.907451][T18080] netlink: 'syz.5.2966': attribute type 10 has an invalid length.
[  277.915383][T18080] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.919325][T18080] bridge_slave_1: left allmulticast mode
[  277.921307][T18080] bridge_slave_1: left promiscuous mode
[  277.923608][T18080] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.932352][T18080] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  278.085376][T18094] netlink: 'syz.3.2973': attribute type 7 has an invalid length.
[  278.533365][ T1193] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c
[  278.537833][T18152] CIFS mount error: No usable UNC path provided in device string!
[  278.537833][T18152] 
[  278.542176][T18152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  278.549464][   T10] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  278.720375][   T10] usb 8-1: Using ep0 maxpacket: 8
[  278.724825][   T10] usb 8-1: config 0 has no interfaces?
[  278.727039][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.730626][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.736557][   T10] usb 8-1: config 0 descriptor??
[  278.955584][   T69] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  279.004077][   T59] usb 8-1: USB disconnect, device number 50
[  279.005894][T18186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.140050][   T69] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.143603][   T69] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.146625][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'.
[  279.146777][   T69] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  279.155269][   T69] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  279.158986][   T69] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.163614][   T69] usb 10-1: config 0 descriptor??
[  279.290147][T18223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=18223 comm=syz.1.2998
[  279.294533][T18223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=18223 comm=syz.1.2998
[  279.299946][T18223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=18223 comm=syz.1.2998
[  279.304895][T18223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=18223 comm=syz.1.2998
[  279.385876][   T40] kauditd_printk_skb: 206 callbacks suppressed
[  279.385886][   T40] audit: type=1400 audit(266.657:62965): avc:  denied  { name_bind } for  pid=18224 comm="syz.1.2999" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  279.396198][   T40] audit: type=1400 audit(266.657:62966): avc:  denied  { create } for  pid=18224 comm="syz.1.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  279.397088][   T69] usbhid 10-1:0.0: can't add hid device: -71
[  279.415176][   T69] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  279.421382][   T69] usb 10-1: USB disconnect, device number 5
[  279.432404][   T40] audit: type=1400 audit(266.695:62967): avc:  denied  { mount } for  pid=18233 comm="syz.5.3000" name="/" dev="9p" ino=71827843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  279.445634][   T40] audit: type=1400 audit(266.695:62968): avc:  denied  { connect } for  pid=18239 comm="syz.1.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  279.454865][   T40] audit: type=1400 audit(266.695:62969): avc:  denied  { write } for  pid=18239 comm="syz.1.3001" path="socket:[68453]" dev="sockfs" ino=68453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  279.464581][   T40] audit: type=1400 audit(266.695:62970): avc:  denied  { add_name } for  pid=18233 comm="syz.5.3000" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  279.474227][   T40] audit: type=1400 audit(266.695:62971): avc:  denied  { create } for  pid=18233 comm="syz.5.3000" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  279.484225][   T40] audit: type=1400 audit(266.695:62972): avc:  denied  { associate } for  pid=18233 comm="syz.5.3000" name="blkio.bfq.io_serviced_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  279.494686][   T40] audit: type=1400 audit(266.723:62973): avc:  denied  { read append } for  pid=18233 comm="syz.5.3000" name="blkio.bfq.io_serviced_recursive" dev="9p" ino=71827943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  279.504493][   T40] audit: type=1400 audit(266.723:62974): avc:  denied  { open } for  pid=18233 comm="syz.5.3000" path="/131/file0/blkio.bfq.io_serviced_recursive" dev="9p" ino=71827943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  279.512056][T18250] netlink: 'syz.1.3003': attribute type 1 has an invalid length.
[  279.538045][T18250] bond5: entered promiscuous mode
[  279.539801][T18250] 8021q: adding VLAN 0 to HW filter on device bond5
[  279.581241][T18250] 8021q: adding VLAN 0 to HW filter on device bond6
[  279.585951][T18250] bond5: (slave bond6): making interface the new active one
[  279.589197][T18250] bond6: entered promiscuous mode
[  279.592221][T18250] bond5: (slave bond6): Enslaving as an active interface with an up link
[  280.045148][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'.
[  280.111874][T18344] CIFS mount error: No usable UNC path provided in device string!
[  280.111874][T18344] 
[  280.115402][T18344] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  280.129253][T18346] QAT: failed to copy from user.
[  280.151672][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'.
[  280.155005][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'.
[  280.158092][T18350] netlink: 'syz.4.3013': attribute type 19 has an invalid length.
[  280.610573][ T5947] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  280.832066][T18402] overlayfs: failed to clone upperpath
[  280.863125][T18404] netlink: 328 bytes leftover after parsing attributes in process `syz.1.3025'.
[  280.869983][   T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  280.895763][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3025'.
[  281.042390][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.045831][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.048834][   T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  281.055511][   T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  281.058830][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.062740][   T29] usb 9-1: config 0 descriptor??
[  281.078851][T18412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  281.083209][T18412] block device autoloading is deprecated and will be removed.
[  281.198589][T18428] ip6gre1: entered promiscuous mode
[  281.200462][T18428] ip6gre1: entered allmulticast mode
[  281.204807][ T9961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.205807][T18428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=18428 comm=syz.3.3032
[  281.207745][ T9961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.233868][   T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.315884][ T5947] Bluetooth: hci2: unexpected event for opcode 0x0406
[  281.361683][  T840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.505216][T18385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.508545][T18385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.513525][T18385] netlink: 'syz.4.3019': attribute type 1 has an invalid length.
[  281.516116][T18385] netlink: 'syz.4.3019': attribute type 4 has an invalid length.
[  281.521512][   T29] usbhid 9-1:0.0: can't add hid device: -71
[  281.523875][   T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  281.527498][   T29] usb 9-1: USB disconnect, device number 11
[  281.695574][T18461] Can't find a SQUASHFS superblock on nullb0
[  281.972354][T18481] __nla_validate_parse: 135 callbacks suppressed
[  281.972370][T18481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3050'.
[  281.972626][   T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.976552][T18481] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3050'.
[  281.987615][T18481] netlink: 'syz.3.3050': attribute type 5 has an invalid length.
[  281.990446][T18481] netlink: 'syz.3.3050': attribute type 6 has an invalid length.
[  281.993455][T18481] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3050'.
[  282.019856][ T5947] Bluetooth: hci3: unexpected event for opcode 0x0406
[  282.033736][T18485] netlink: 1360 bytes leftover after parsing attributes in process `syz.3.3045'.
[  282.037641][T18485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3045'.
[  282.090510][T18487] Invalid logical block size (-3)
[  282.154849][   T29] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  282.158115][   T29] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  282.161350][   T29] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  282.177230][   T29] hid-generic 0006:0004:0009.001A: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0
[  282.250441][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'.
[  282.253037][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'.
[  282.255672][T18516] netlink: 'syz.1.3055': attribute type 20 has an invalid length.
[  282.264957][ T9961] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  282.268282][ T9961] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.268939][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'.
[  282.273156][ T9961] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.275820][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3055'.
[  282.277887][ T9961] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.291103][T18516] netlink: 'syz.1.3055': attribute type 20 has an invalid length.
[  282.292489][T18521] fuse: Bad value for 'fd'
[  282.344613][T18530] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  282.410497][T18544] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  282.412832][T18544] overlayfs: failed to set xattr on upper
[  282.414757][T18544] overlayfs: ...falling back to redirect_dir=nofollow.
[  282.417013][T18544] overlayfs: ...falling back to index=off.
[  282.420246][T18544] overlayfs: ...falling back to uuid=null.
[  282.527590][ T5947] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  282.561236][T18533] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3059'.
[  282.636853][T18565] netlink: 'syz.4.3068': attribute type 10 has an invalid length.
[  282.642042][T18565] 8021q: adding VLAN 0 to HW filter on device team0
[  282.647144][T18565] bond0: (slave team0): Enslaving as an active interface with an up link
[  282.659350][T18565] xfrm1: entered promiscuous mode
[  282.661515][T18565] xfrm1: entered allmulticast mode
[  282.777316][ T5947] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  282.822045][T18584] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  282.826608][T18588] netlink: 'syz.5.3074': attribute type 29 has an invalid length.
[  282.951092][T18598] xfrm0 speed is unknown, defaulting to 1000
[  282.957986][T18606] overlayfs: failed to resolve './file0': -2
[  282.974179][T18604] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  283.019619][T18631] xfrm0 speed is unknown, defaulting to 1000
[  283.061934][T18598] sd 0:0:0:0: PR command failed: 1026
[  283.064248][T18598] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  283.066918][T18598] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  283.116851][T18598] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  283.138311][T18598] 9pnet_virtio: no channels available for device 127.0.0.1
[  284.597251][T18705] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  284.682592][T18721] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  284.686019][T18721] overlayfs: failed to set xattr on upper
[  284.688864][T18721] overlayfs: ...falling back to redirect_dir=nofollow.
[  284.691114][T18721] overlayfs: ...falling back to index=off.
[  284.692974][T18721] overlayfs: ...falling back to uuid=null.
[  284.694867][T18721] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  284.750778][   T40] kauditd_printk_skb: 252 callbacks suppressed
[  284.756521][   T40] audit: type=1400 audit(271.661:63227): avc:  denied  { create } for  pid=18727 comm="syz.3.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  284.763193][   T40] audit: type=1400 audit(271.680:63228): avc:  denied  { accept } for  pid=18727 comm="syz.3.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  284.770208][   T40] audit: type=1400 audit(271.680:63229): avc:  denied  { write } for  pid=18727 comm="syz.3.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  284.777389][   T40] audit: type=1400 audit(271.680:63230): avc:  denied  { read } for  pid=18727 comm="syz.3.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  284.787862][T18730] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  284.790658][ T9978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  284.794598][ T9978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  284.806221][T18730] bond1 (unregistering): (slave geneve3): Releasing backup interface
[  284.868543][ T6033] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  284.890697][T18730] bond1 (unregistering): Released all slaves
[  284.932835][ T9978] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  284.937351][ T9978] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  284.958618][   T40] audit: type=1400 audit(271.867:63231): avc:  denied  { create } for  pid=18808 comm="syz.1.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  284.974060][   T40] audit: type=1400 audit(271.867:63232): avc:  denied  { getopt } for  pid=18808 comm="syz.1.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  284.984420][   T40] audit: type=1400 audit(271.867:63233): avc:  denied  { setopt } for  pid=18808 comm="syz.1.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  284.992933][   T40] audit: type=1400 audit(271.867:63234): avc:  denied  { watch watch_reads } for  pid=18808 comm="syz.1.3099" path="/320" dev="tmpfs" ino=1705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  285.028939][ T6033] usb 9-1: Using ep0 maxpacket: 16
[  285.040532][ T6033] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  285.045674][ T6033] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.048598][ T6033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.061054][ T6033] usb 9-1: Product: 윕Ի펦⇾좳꟦뒅র⩾ᣨ喒ⳣ䛛䂧﹯몂㥖朘왥穁뢯煙ᦛ」뛘⌍䄰뫫컬䲎睕ⶉ諱柜伇వ궰슍࿭벸ᘜ၄욊׉ῶ﹠∲ፖ§葮웱쭲᱄藶뤜⅛壗鏱㬢髩휬ᦇ䵷똘ꇪ燽⑈苀䤵쌀䲃덵鄏難綇阧ᡨ⥟堄潓ﮊ锬가ⁿ⩵䄽阪몦㜕堋낥
[  285.070611][ T6033] usb 9-1: Manufacturer: 䴖㉫ꢂᯭ濚꟣퀛髂⨆魪尿⚪戳鍊ꅦ끎뮲뗘囯繇೹鍑彁歭덍֜食䑥穜鬒费䛠탍ಫ痽곊㫤빵㔰嚎半ꖦⵋ췟㣖Ũㄞ童둏轄߷䀽뮴凨ᣥ㮫費៙隲ᩫ찋⚹幙謣㯽쭇㺘퉐⬝㿗馹⑳㥫꘨꣖㢕닁䙸뀀鶗︞具ᔢ즹쥀헍瘾垄䊀퐬ት箊쾾瑐䎅﹎怟㻵嶀﫰峵
[  285.083736][ T6033] usb 9-1: SerialNumber: ﯶ鹠㚄ό䐯꿘셭烙蜪䏱ᒺ팖⚆ꀒ㌢䒜륬툳픨悾ꇢ㬟갆맡ӕ턛침順淓讉﫨戲谇駉䧷꤁ଷ⥰뒘㮫ꓱ␿ࡂ꭮﵉룻藭で볁佊距ꁦ준◶죏봳☨㥖䥀謓
[  285.106890][   T40] audit: type=1400 audit(272.007:63235): avc:  denied  { execute } for  pid=18815 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  285.135784][   T40] audit: type=1400 audit(272.007:63236): avc:  denied  { execute_no_trans } for  pid=18815 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  285.272540][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  285.277091][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  285.280260][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  285.285112][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  285.291240][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  285.381814][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  285.398146][ T6033] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  285.427891][ T6033] usb 9-1: USB disconnect, device number 12
[  285.441725][T18829] xfrm0 speed is unknown, defaulting to 1000
[  285.531323][T18910] pim6reg9: entered allmulticast mode
[  285.591515][T18829] chnl_net:caif_netlink_parms(): no params data found
[  285.640347][ T5947] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  285.644336][ T5947] Bluetooth: hci2: Injecting HCI hardware error event
[  285.653441][ T5936] Bluetooth: hci2: hardware error 0x00
[  285.718370][T18829] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.721849][T18829] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.726050][T18829] bridge_slave_0: entered allmulticast mode
[  285.730641][T18829] bridge_slave_0: entered promiscuous mode
[  285.736815][T18829] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.739982][T18829] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.743617][T18829] bridge_slave_1: entered allmulticast mode
[  285.748375][T18829] bridge_slave_1: entered promiscuous mode
[  285.768277][T18829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.772940][T18829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.791424][T18829] team0: Port device team_slave_0 added
[  285.795259][T18829] team0: Port device team_slave_1 added
[  285.842633][T18829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.845467][T18829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.857435][T18829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.891361][T18829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.894373][T18829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.910846][T18829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.930705][   T13] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.961359][T18829] hsr_slave_0: entered promiscuous mode
[  285.963747][T18829] hsr_slave_1: entered promiscuous mode
[  285.965924][T18829] debugfs: 'hsr0' already exists in 'hsr'
[  285.967784][T18829] Cannot create hsr debugfs directory
[  286.031390][   T13] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.080722][T19196] openvswitch: netlink: Message has 592 unknown bytes.
[  286.083034][T19196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.098544][T18829] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  286.103347][T18829] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  286.108342][T18829] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  286.118769][   T13] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.126840][T18829] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  286.149252][T18829] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.151719][T18829] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.154138][T18829] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.156378][T18829] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.188190][   T13] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.208578][T18829] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.222115][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.225337][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.236136][T18829] 8021q: adding VLAN 0 to HW filter on device team0
[  286.242827][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.245867][ T9978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.255317][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.257671][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.400089][   T13] bridge_slave_0: left allmulticast mode
[  286.402197][   T13] bridge_slave_0: left promiscuous mode
[  286.405969][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.266005][   T13] smc: removing net device bond0 with user defined pnetid SYZ2
[  287.270574][   T13] .` (unregistering): (slave dummy0): Releasing backup interface
[  287.308391][   T13] .` (unregistering): Released all slaves
[  287.314288][   T13] bond1 (unregistering): Released all slaves
[  287.407839][   T13] bond0 (unregistering): Released all slaves
[  287.424108][  T840] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  287.491577][   T13] bond2 (unregistering): Released all slaves
[  287.535010][ T5947] Bluetooth: hci1: command tx timeout
[  287.596871][  T840] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[  287.600287][  T840] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  287.604399][  T840] usb 8-1: config 0 interface 0 has no altsetting 0
[  287.609409][  T840] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  287.613874][  T840] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  287.617536][  T840] usb 8-1: Product: syz
[  287.619295][  T840] usb 8-1: Manufacturer: syz
[  287.621294][  T840] usb 8-1: SerialNumber: syz
[  287.626211][  T840] usb 8-1: config 0 descriptor??
[  287.630275][  T840] hub 8-1:0.0: bad descriptor, ignoring hub
[  287.632938][  T840] hub 8-1:0.0: probe with driver hub failed with error -5
[  287.638577][  T840] usb 8-1: selecting invalid altsetting 0
[  287.862573][ T5936] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  287.872569][T19242] Falling back ldisc for ttyS3.
[  287.993407][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.036763][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.079333][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  288.100277][   T13] bond0 (unregistering): Released all slaves
[  288.107842][   T13] bond1 (unregistering): Released all slaves
[  288.145834][T18829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.244922][   T13] !: left promiscuous mode
[  288.328629][T18829] veth0_vlan: entered promiscuous mode
[  288.334251][T18829] veth1_vlan: entered promiscuous mode
[  288.349216][T18829] veth0_macvtap: entered promiscuous mode
[  288.353060][T18829] veth1_macvtap: entered promiscuous mode
[  288.362331][T18829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.390595][T18829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.401535][   T13] tipc: Left network mode
[  288.401828][ T9968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.406718][ T9968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.409628][T19294] __nla_validate_parse: 11 callbacks suppressed
[  288.409638][T19294] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3137'.
[  288.429262][ T9968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.432166][ T9968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.435036][   T13] tipc: Left network mode
[  288.493436][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.497503][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.509939][ T9968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.512958][ T9968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.611128][T19248] usb 8-1: reset high-speed USB device number 51 using dummy_hcd
[  288.616378][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3101'.
[  288.784167][T19248] usb 8-1: device firmware changed
[  288.786600][ T6033] usb 8-1: USB disconnect, device number 51
[  288.932624][ T6033] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  289.094422][ T6033] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[  289.097151][ T6033] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  289.100457][ T6033] usb 8-1: config 0 interface 0 has no altsetting 0
[  289.105058][ T6033] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  289.108073][ T6033] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  289.110545][ T6033] usb 8-1: Product: syz
[  289.112041][ T6033] usb 8-1: Manufacturer: 㯇䤗뼢뒸敉臹⋙ֻꔴ㟐〶蚝
[  289.115340][ T6033] usb 8-1: SerialNumber: ࠔ
[  289.119912][ T6033] usb 8-1: config 0 descriptor??
[  289.123158][ T6033] hub 8-1:0.0: bad descriptor, ignoring hub
[  289.125815][ T6033] hub 8-1:0.0: probe with driver hub failed with error -5
[  289.130877][ T6033] usb 8-1: selecting invalid altsetting 0
[  289.344781][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.347880][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.467365][   T59] usb 8-1: USB disconnect, device number 52
[  289.493389][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3146'.
[  289.545412][T19395] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280
[  289.637526][ T6033] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  289.750868][ T5936] Bluetooth: hci1: command tx timeout
[  289.809895][ T6033] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  289.812703][ T6033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.821100][ T6033] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  289.824893][ T6033] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  289.828252][ T6033] usb 9-1: Manufacturer: syz
[  289.842248][ T6033] usb 9-1: config 0 descriptor??
[  289.919269][ T6033] rc_core: IR keymap rc-hauppauge not found
[  289.921866][ T6033] Registered IR keymap rc-empty
[  289.930040][   T13] hsr_slave_0: left promiscuous mode
[  289.933620][ T6033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0
[  289.938234][   T13] hsr_slave_1: left promiscuous mode
[  289.946329][ T6033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input46
[  289.956938][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.959500][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.962553][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.964891][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.986559][   T13] veth1_macvtap: left promiscuous mode
[  289.988733][   T13] veth0_macvtap: left promiscuous mode
[  289.990673][   T13] veth1_vlan: left promiscuous mode
[  289.993140][   T13] veth0_vlan: left promiscuous mode
[  290.109598][  T840] usb 9-1: USB disconnect, device number 13
[  290.737213][   T40] kauditd_printk_skb: 215 callbacks suppressed
[  290.737236][   T40] audit: type=1400 audit(277.263:63452): avc:  denied  { create } for  pid=19440 comm="syz.4.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  290.738942][T19442] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3154'.
[  290.744032][   T40] audit: type=1400 audit(277.272:63453): avc:  denied  { ioctl } for  pid=19440 comm="syz.4.3154" path="socket:[75821]" dev="sockfs" ino=75821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  290.800558][   T13] pimreg3 (unregistering): left allmulticast mode
[  290.802850][   T40] audit: type=1400 audit(277.328:63454): avc:  denied  { read } for  pid=19440 comm="syz.4.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  290.813110][   T13] pimreg (unregistering): left allmulticast mode
[  290.903319][   T40] audit: type=1400 audit(277.422:63455): avc:  denied  { mounton } for  pid=19444 comm="syz.3.3155" path="/183/file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  290.903337][T19445] nfs4: Unknown parameter '
'
[  290.905500][T19445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=19445 comm=syz.3.3155
[  290.921011][T19445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19445 comm=syz.3.3155
[  290.926323][T19445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19445 comm=syz.3.3155
[  291.082880][   T40] audit: type=1400 audit(277.581:63456): avc:  denied  { write } for  pid=19446 comm="syz.3.3156" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  291.199279][   T13] team0 (unregistering): Port device team_slave_1 removed
[  291.229492][   T13] team0 (unregistering): Port device team_slave_0 removed
[  291.556599][   T40] audit: type=1400 audit(278.030:63457): avc:  denied  { unmount } for  pid=18829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  291.557288][T19441] bond4 (unregistering): Released all slaves
[  291.594260][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3154'.
[  291.821406][   T40] audit: type=1400 audit(278.282:63458): avc:  denied  { create } for  pid=19530 comm="syz.3.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  291.828811][   T40] audit: type=1400 audit(278.282:63459): avc:  denied  { write } for  pid=19530 comm="syz.3.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  291.868000][T19532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'.
[  291.946261][   T40] audit: type=1400 audit(278.395:63460): avc:  denied  { create } for  pid=19544 comm="syz.3.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  291.953733][   T40] audit: type=1400 audit(278.413:63461): avc:  denied  { setopt } for  pid=19544 comm="syz.3.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  291.968316][ T5936] Bluetooth: hci1: command tx timeout
[  292.092499][T19563] dvmrp6: entered allmulticast mode
[  292.120479][T19568] xfrm0 speed is unknown, defaulting to 1000
[  292.122748][T19573] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3168'.
[  292.126341][T19573] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3168'.
[  292.191236][T19600] fuse: Unknown parameter 'f�20x0000000000000005'
[  292.330652][T19568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3169'.
[  292.550981][T19647] openvswitch: netlink: IP tunnel dst address not specified
[  292.551450][T19648] openvswitch: netlink: IP tunnel dst address not specified
[  292.565497][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3186'.
[  292.617187][   T13] IPVS: stop unused estimator thread 0...
[  292.698905][T19661] team0: Device xfrm1 is of different type
[  292.706070][   T59] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  292.866492][   T59] usb 9-1: Using ep0 maxpacket: 8
[  292.869541][   T59] usb 9-1: config 2 interface 0 has no altsetting 0
[  292.873481][   T59] usb 9-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  292.876350][   T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.879179][   T59] usb 9-1: Product: syz
[  292.880527][   T59] usb 9-1: Manufacturer: syz
[  292.882018][   T59] usb 9-1: SerialNumber: syz
[  292.992158][T19678] netlink: 'syz.6.3194': attribute type 10 has an invalid length.
[  293.078092][T19678] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  293.102343][T19634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.105364][T19634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.113381][   T59] usb 9-1: USB disconnect, device number 14
[  293.233747][T19700] Option '�'M�O��' to dns_resolver key: bad/missing value
[  293.407372][T19725] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  293.589755][T19743] netlink: 'syz.3.3211': attribute type 32 has an invalid length.
[  293.850432][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  293.855734][T19768] devtmpfs: Cannot change global quota limit on remount
[  293.911860][T19774] netlink: 'syz.6.3219': attribute type 1 has an invalid length.
[  294.192595][ T5936] Bluetooth: hci1: command tx timeout
[  294.255832][T19825] __nla_validate_parse: 6 callbacks suppressed
[  294.255849][T19825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3230'.
[  294.370381][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'.
[  294.374416][T19842] netlink: 'syz.3.3239': attribute type 30 has an invalid length.
[  294.411411][T19847] netlink: 'syz.3.3241': attribute type 9 has an invalid length.
[  294.414199][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'.
[  294.420368][  T840] IPVS: starting estimator thread 0...
[  294.513419][T19849] IPVS: using max 46 ests per chain, 110400 per kthread
[  294.652886][T19872] geneve2: entered promiscuous mode
[  294.817583][T19869] binder: BC_ACQUIRE_RESULT not supported
[  294.819439][T19869] binder: 19868:19869 ioctl c0306201 200000000300 returned -22
[  294.997958][T19898] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3253'.
[  295.001247][T19898] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  295.041892][T19901] syzkaller1: entered promiscuous mode
[  295.043722][T19901] syzkaller1: entered allmulticast mode
[  295.121370][T19905] netlink: 'syz.3.3255': attribute type 1 has an invalid length.
[  295.125729][T19905] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  295.222389][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'.
[  295.229601][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3258'.
[  295.234277][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3258'.
[  295.474232][T19933] overlayfs: failed to resolve './file2': -2
[  295.474832][T19931] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  295.478256][T19931] 
@0�: renamed from bond_slave_1
[  295.525707][T19931] lo: entered promiscuous mode
[  295.542594][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3263'.
[  295.547028][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3263'.
[  295.552842][T19935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3263'.
[  295.768318][T20016] overlayfs: failed to clone upperpath
[  295.978513][   T69] usb 8-1: new full-speed USB device number 53 using dummy_hcd
[  296.151383][   T69] usb 8-1: not running at top speed; connect to a high speed hub
[  296.155534][   T69] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  296.160969][   T69] usb 8-1: config 1 interface 0 has no altsetting 0
[  296.165387][   T69] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  296.169117][   T69] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.172652][   T69] usb 8-1: Product: syz
[  296.174811][   T69] usb 8-1: Manufacturer: syz
[  296.176917][   T69] usb 8-1: SerialNumber: syz
[  296.183351][T20010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  296.416633][   T69] usblp0: Disabling reads from problematic bidirectional printer
[  296.422040][   T69] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 8 proto 1 vid 0x03F0 pid 0x0004
[  296.429713][   T69] usb 8-1: USB disconnect, device number 53
[  296.436508][   T69] usblp0: removed
[  296.476062][T20043] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  296.521611][   T40] kauditd_printk_skb: 276 callbacks suppressed
[  296.521625][   T40] audit: type=1400 audit(282.671:63738): avc:  denied  { create } for  pid=20046 comm="syz.4.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  296.533483][   T40] audit: type=1400 audit(282.680:63739): avc:  denied  { create } for  pid=20052 comm="syz.3.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.542097][   T40] audit: type=1400 audit(282.680:63740): avc:  denied  { write } for  pid=20052 comm="syz.3.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.550748][   T40] audit: type=1400 audit(282.699:63741): avc:  denied  { open } for  pid=20052 comm="syz.3.3274" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  296.561376][   T40] audit: type=1400 audit(282.699:63742): avc:  denied  { ioctl } for  pid=20052 comm="syz.3.3274" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  296.573116][   T40] audit: type=1400 audit(282.727:63743): avc:  denied  { create } for  pid=20052 comm="syz.3.3274" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  296.582367][   T40] audit: type=1400 audit(282.727:63744): avc:  denied  { map } for  pid=20052 comm="syz.3.3274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  296.601117][   T40] audit: type=1400 audit(282.727:63745): avc:  denied  { read write } for  pid=20052 comm="syz.3.3274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  296.614578][   T40] audit: type=1400 audit(282.755:63746): avc:  denied  { create } for  pid=20060 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  296.655327][   T40] audit: type=1400 audit(282.802:63747): avc:  denied  { watch watch_reads } for  pid=20062 comm="syz.6.3276" path="/43" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  296.816771][T20053] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  297.446812][T20079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.260489][T20092] xfrm0 speed is unknown, defaulting to 1000
[  298.296989][T20112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=20112 comm=syz.4.3288
[  298.302055][T20104] /dev/nullb0: Can't lookup blockdev
[  298.362625][T20092] netlink: 'syz.6.3283': attribute type 1 has an invalid length.
[  298.466225][T20145] overlayfs: empty lowerdir
[  298.470929][T20119] xfrm0 speed is unknown, defaulting to 1000
[  298.472357][T20145] netlink: 'syz.3.3293': attribute type 1 has an invalid length.
[  298.540116][T20178] gretap1: entered promiscuous mode
[  298.747674][T20216] netlink: 'syz.3.3299': attribute type 25 has an invalid length.
[  299.040649][T20234] efs: device does not support 512 byte blocks
[  299.043073][T20234] device does not support 512 byte blocks
[  299.043073][T20234] 
[  299.123720][T20234] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  299.151274][T20234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20234 comm=syz.3.3303
[  299.183439][T20244] syzkaller1: entered promiscuous mode
[  299.185825][T20244] syzkaller1: entered allmulticast mode
[  299.281236][T20256] bridge1: port 1(gretap0) entered blocking state
[  299.283913][T20256] bridge1: port 1(gretap0) entered disabled state
[  299.286039][T20256] gretap0: entered allmulticast mode
[  299.289350][T20256] gretap0: entered promiscuous mode
[  299.346258][T20264] trusted_key: encrypted_key: master key parameter 'U�ڨ�17jX����5A�eB����5�
��' is invalid
[  299.352894][T20267] erspan2: entered promiscuous mode
[  299.390033][T20264] netlink: 'syz.6.3312': attribute type 10 has an invalid length.
[  299.448145][T20278] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  299.452797][T20278] netlink: zone id is out of range
[  299.456097][T20278] netlink: zone id is out of range
[  299.458300][T20278] netlink: zone id is out of range
[  299.460461][T20278] netlink: zone id is out of range
[  299.462636][T20278] netlink: zone id is out of range
[  299.464950][T20278] netlink: zone id is out of range
[  299.467177][T20278] netlink: zone id is out of range
[  299.469409][T20278] netlink: zone id is out of range
[  300.025071][T20350] qnx4: no qnx4 filesystem (no root dir).
[  300.073186][T20368] sp0: Synchronizing with TNC
[  300.106425][T20366] [U] �
[  300.410931][T20399] comedi comedi0: dt2815: a I/O base address must be specified
[  300.694089][T20423] cgroup: Name too long
[  300.733915][T20429] __nla_validate_parse: 15 callbacks suppressed
[  300.733931][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'.
[  300.821997][T20437] sp0: Synchronizing with TNC
[  300.850827][T20437] [U] �
[  300.993136][T20461] xt_HMARK: proto mask must be zero with L3 mode
[  301.187149][   T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  301.358203][   T10] usb 9-1: Using ep0 maxpacket: 16
[  301.362599][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.366324][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.370632][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  301.374683][   T10] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  301.377463][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.382904][   T10] usb 9-1: config 0 descriptor??
[  301.467784][T20490] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3348'.
[  301.717613][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3351'.
[  301.721675][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3351'.
[  301.725537][T20507] netlink: 'syz.3.3351': attribute type 18 has an invalid length.
[  301.728455][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3351'.
[  301.741173][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3351'.
[  301.745344][T20507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'.
[  301.823211][   T10] shield 0003:0955:7214.001B: unknown main item tag 0x0
[  301.826472][   T10] shield 0003:0955:7214.001B: unknown main item tag 0x0
[  301.829598][   T10] shield 0003:0955:7214.001B: unknown main item tag 0x0
[  301.832548][   T10] shield 0003:0955:7214.001B: unknown main item tag 0x0
[  301.835444][   T10] shield 0003:0955:7214.001B: unknown main item tag 0x0
[  301.841426][   T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input48
[  301.855353][   T10] shield 0003:0955:7214.001B: Registered Thunderstrike controller
[  301.858967][   T10] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  301.874880][T20506] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  301.936286][   T40] kauditd_printk_skb: 194 callbacks suppressed
[  301.936299][   T40] audit: type=1400 audit(287.748:63942): avc:  denied  { map_read map_write } for  pid=20528 comm="syz.6.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  301.953337][   T40] audit: type=1400 audit(287.757:63943): avc:  denied  { read } for  pid=20532 comm="syz.3.3355" dev="nsfs" ino=4026534543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  301.960679][   T40] audit: type=1400 audit(287.757:63944): avc:  denied  { open } for  pid=20532 comm="syz.3.3355" path="net:[4026534543]" dev="nsfs" ino=4026534543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  301.972522][   T40] audit: type=1400 audit(287.757:63945): avc:  denied  { create } for  pid=20532 comm="syz.3.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  301.982890][   T40] audit: type=1400 audit(287.757:63946): avc:  denied  { shutdown } for  pid=20532 comm="syz.3.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  301.989388][   T40] audit: type=1400 audit(287.757:63947): avc:  denied  { read } for  pid=20532 comm="syz.3.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  301.997358][   T40] audit: type=1400 audit(287.757:63948): avc:  denied  { write } for  pid=20532 comm="syz.3.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  302.008972][   T40] audit: type=1400 audit(287.776:63949): avc:  denied  { relabelfrom } for  pid=20536 comm="syz.6.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  302.020137][   T40] audit: type=1400 audit(287.776:63950): avc:  denied  { relabelto } for  pid=20536 comm="syz.6.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  302.028390][   T40] audit: type=1400 audit(287.813:63951): avc:  denied  { ioctl } for  pid=20540 comm="syz.3.3358" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=77635 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  302.053679][ T6022] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  302.054594][   T59] usb 9-1: USB disconnect, device number 15
[  302.057143][ T6022] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  302.062855][ T6022] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  302.066715][ T6022] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  302.083303][T20558] netlink: 'syz.3.3358': attribute type 4 has an invalid length.
[  302.086097][T20558] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3358'.
[  302.269402][T20571] xfrm0 speed is unknown, defaulting to 1000
[  302.558572][T20611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3365'.
[  302.598518][T20616] rtc_cmos 00:05: Alarms can be up to one day in the future
[  302.738994][T20646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3373'.
[  302.864022][ T5936] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  303.061085][T20675] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  303.241600][T20671] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  303.273692][T20681] GUP no longer grows the stack in syz.4.3383 (20681): 200000007000-20000000a000 (200000004000)
[  303.278967][T20681] CPU: 2 UID: 0 PID: 20681 Comm: syz.4.3383 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.278999][T20681] Tainted: [L]=SOFTLOCKUP
[  303.279006][T20681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  303.279017][T20681] Call Trace:
[  303.279034][T20681]  <TASK>
[  303.279042][T20681]  dump_stack_lvl+0x16c/0x1f0
[  303.279092][T20681]  gup_vma_lookup+0x1d2/0x220
[  303.279120][T20681]  __get_user_pages+0x241/0x33c0
[  303.279156][T20681]  ? __sys_setsockopt+0x1a0/0x230
[  303.279183][T20681]  ? __x64_sys_setsockopt+0xbd/0x160
[  303.279209][T20681]  ? do_syscall_64+0xcd/0xf80
[  303.279234][T20681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.279254][T20681]  ? __pfx___get_user_pages+0x10/0x10
[  303.279288][T20681]  __gup_longterm_locked+0x2dd/0x17e0
[  303.279323][T20681]  ? __pfx___gup_longterm_locked+0x10/0x10
[  303.279363][T20681]  pin_user_pages+0x13c/0x160
[  303.279391][T20681]  ? __pfx_pin_user_pages+0x10/0x10
[  303.279428][T20681]  xdp_umem_create+0x741/0x1270
[  303.279456][T20681]  xsk_setsockopt+0x9cf/0xc00
[  303.279477][T20681]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.279530][T20681]  ? selinux_socket_setsockopt+0x6a/0x80
[  303.279560][T20681]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.279582][T20681]  do_sock_setsockopt+0xf3/0x1d0
[  303.279606][T20681]  __sys_setsockopt+0x1a0/0x230
[  303.279637][T20681]  __x64_sys_setsockopt+0xbd/0x160
[  303.279662][T20681]  ? do_syscall_64+0x91/0xf80
[  303.279686][T20681]  ? lockdep_hardirqs_on+0x7c/0x110
[  303.279719][T20681]  do_syscall_64+0xcd/0xf80
[  303.279746][T20681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.279762][T20681] RIP: 0033:0x7f0eae38f7c9
[  303.279779][T20681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.279796][T20681] RSP: 002b:00007f0eac5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  303.279814][T20681] RAX: ffffffffffffffda RBX: 00007f0eae5e5fa0 RCX: 00007f0eae38f7c9
[  303.279825][T20681] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004
[  303.279835][T20681] RBP: 00007f0eae413f91 R08: 0000000000000020 R09: 0000000000000000
[  303.279845][T20681] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  303.279856][T20681] R13: 00007f0eae5e6038 R14: 00007f0eae5e5fa0 R15: 00007ffe6f6bbc28
[  303.279881][T20681]  </TASK>
[  303.303634][   T59] libceph: connect (1)[c::]:6789 error -101
[  303.370015][   T59] libceph: mon0 (1)[c::]:6789 connect error
[  303.415264][T20684] ceph: No mds server is up or the cluster is laggy
[  303.553324][T20706] 8021q: adding VLAN 0 to HW filter on device bond4
[  303.572868][T20706] macsec1: entered allmulticast mode
[  303.575197][T20706] bond4: entered allmulticast mode
[  303.579250][T20706] bond4: left allmulticast mode
[  303.788480][T20755] 9pnet_virtio: no channels available for device syz
[  303.851074][T20772] net_ratelimit: 16 callbacks suppressed
[  303.851093][T20772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.858836][T20772] tmpfs: Unknown parameter 'trans'
[  304.198560][T20822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20822 comm=syz.1.3412
[  304.549647][T20864] x_tables: ip6_tables: CT target: only valid in raw table, not 
[  304.747648][T20870] mkiss: ax0: crc mode is auto.
[  304.975383][T20883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=20883 comm=syz.6.3427
[  305.273516][T20902] loop4: detected capacity change from 0 to 524288000
[  305.398039][ T6022] libceph: connect (1)[c::]:6789 error -101
[  305.403197][ T6022] libceph: mon0 (1)[c::]:6789 connect error
[  305.460878][ T6022] libceph: connect (1)[c::]:6789 error -101
[  305.463614][ T6022] libceph: mon0 (1)[c::]:6789 connect error
[  305.497630][T20917] ceph: No mds server is up or the cluster is laggy
[  305.499917][T20923] ceph: No mds server is up or the cluster is laggy
[  305.548453][T20941] netlink: 'syz.1.3439': attribute type 30 has an invalid length.
[  305.585406][T20941] bridge2: entered promiscuous mode
[  305.603443][T20980] kvm: apic: phys broadcast and lowest prio
[  305.761227][T20991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.990660][T21004] macvlan2: entered promiscuous mode
[  305.992794][T21004] macvlan2: entered allmulticast mode
[  305.995403][T21004] bond1: entered promiscuous mode
[  305.998105][T21004] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  306.054333][T21004] bond1: left promiscuous mode
[  306.446902][T21077] __nla_validate_parse: 45 callbacks suppressed
[  306.446921][T21077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3458'.
[  306.505029][T21082] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3459'.
[  306.582299][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.585190][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.587895][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.590506][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.592902][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.595360][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.597990][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.604072][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.606696][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.609248][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.612034][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.614453][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.617115][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.619570][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.622836][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.624998][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'.
[  306.625271][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.629447][T21094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'.
[  306.631703][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.631759][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.631821][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.643169][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.645904][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.648511][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.651216][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.654176][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.656725][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.659602][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.660050][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'.
[  306.662376][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.668715][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.671170][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.674447][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.677234][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.679656][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.682117][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.685448][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.688049][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.690432][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.692909][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.695659][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.698148][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.700609][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.703114][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.706537][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.709457][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.712570][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.715754][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.719222][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.722290][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.725499][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.729659][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.732234][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.734728][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.737256][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.742950][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.748877][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.752925][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.754371][T21103] bond8 (unregistering): Released all slaves
[  306.756145][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.761926][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.765124][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.768576][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.772727][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.775414][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.778232][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.781701][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.784934][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.787497][T21089] binder: 21088:21089 ioctl c0306201 200000000240 returned -14
[  306.855159][T21177] ipt_rpfilter: unknown options
[  306.860685][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3468'.
[  306.975732][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'.
[  306.980280][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'.
[  306.985818][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'.
[  306.989913][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'.
[  307.169510][T21218] 9pnet_virtio: no channels available for device syz
[  307.295667][   T40] kauditd_printk_skb: 340 callbacks suppressed
[  307.295684][   T40] audit: type=1400 audit(292.750:64292): avc:  denied  { create } for  pid=21233 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  307.297281][T21234] openvswitch: netlink: IP tunnel dst address not specified
[  307.317829][   T40] audit: type=1400 audit(292.769:64293): avc:  denied  { read write } for  pid=21231 comm="syz.4.3479" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.327032][   T40] audit: type=1400 audit(292.769:64294): avc:  denied  { open } for  pid=21231 comm="syz.4.3479" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.328196][T21237] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  307.336045][   T40] audit: type=1400 audit(292.769:64295): avc:  denied  { ioctl } for  pid=21231 comm="syz.4.3479" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.347820][   T40] audit: type=1400 audit(292.778:64296): avc:  denied  { create } for  pid=21233 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  307.348088][T21232] bond0 (unregistering): (slave bond1): Releasing backup interface
[  307.355806][   T40] audit: type=1400 audit(292.778:64297): avc:  denied  { bind } for  pid=21233 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  307.365431][   T40] audit: type=1400 audit(292.778:64298): avc:  denied  { read write } for  pid=21233 comm="syz.3.3480" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  307.375945][   T40] audit: type=1400 audit(292.788:64299): avc:  denied  { open } for  pid=21233 comm="syz.3.3480" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  307.385877][   T40] audit: type=1400 audit(292.788:64300): avc:  denied  { setopt } for  pid=21233 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  307.393977][   T40] audit: type=1400 audit(292.788:64301): avc:  denied  { ioctl } for  pid=21233 comm="syz.3.3480" path="socket:[78261]" dev="sockfs" ino=78261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  307.407919][T21232] bond0 (unregistering): (slave team0): Releasing backup interface
[  307.469342][T21232] bond0 (unregistering): Released all slaves
[  307.515801][T21237] 8021q: adding VLAN 0 to HW filter on device bond8
[  307.557988][T21240] bond8: (slave veth7): Enslaving as an active interface with a down link
[  307.565583][T21242] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.583725][T21278] bond8: (slave dummy0): making interface the new active one
[  307.587441][T21278] dummy0: entered promiscuous mode
[  307.589354][T21278] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  307.666947][T21352] netlink: 'syz.3.3486': attribute type 1 has an invalid length.
[  307.679346][T21352] dummy0: left allmulticast mode
[  307.681139][T21352] dummy0: left promiscuous mode
[  307.683063][T21352] bridge0: port 3(dummy0) entered disabled state
[  307.684999][T21356] netlink: 'syz.1.3487': attribute type 1 has an invalid length.
[  307.708040][T21356] 8021q: adding VLAN 0 to HW filter on device bond9
[  307.790100][T21401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21401 comm=syz.1.3493
[  307.806120][T21405] binder: Unknown parameter 'obj_user'
[  307.808322][T21405] binder: Unknown parameter 'obj_user'
[  307.810232][T21405] binder: Unknown parameter 'obj_user'
[  307.812070][T21405] binder: Unknown parameter 'obj_user'
[  307.813903][T21405] binder: Unknown parameter 'obj_user'
[  307.815807][T21405] binder: Unknown parameter 'obj_user'
[  307.817687][T21405] binder: Unknown parameter 'obj_user'
[  307.820074][T21405] binder: Unknown parameter 'obj_user'
[  307.822002][T21405] binder: Unknown parameter 'obj_user'
[  307.823826][T21405] binder: Unknown parameter 'obj_user'
[  307.825661][T21405] binder: Unknown parameter 'obj_user'
[  307.827619][T21405] binder: Unknown parameter 'obj_user'
[  307.832237][T21405] binder: Unknown parameter 'obj_user'
[  307.834152][T21405] binder: Unknown parameter 'obj_user'
[  307.836088][T21405] binder: Unknown parameter 'obj_user'
[  307.838123][T21405] binder: Unknown parameter 'obj_user'
[  307.840601][T21405] binder: Unknown parameter 'obj_user'
[  307.842482][T21405] binder: Unknown parameter 'obj_user'
[  307.844305][T21405] binder: Unknown parameter 'obj_user'
[  307.846179][T21405] binder: Unknown parameter 'obj_user'
[  307.848099][T21405] binder: Unknown parameter 'obj_user'
[  307.850431][T21405] binder: Unknown parameter 'obj_user'
[  307.852327][T21405] binder: Unknown parameter 'obj_user'
[  307.854165][T21405] binder: Unknown parameter 'obj_user'
[  307.856065][T21405] binder: Unknown parameter 'obj_user'
[  307.857958][T21405] binder: Unknown parameter 'obj_user'
[  307.859889][T21405] binder: Unknown parameter 'obj_user'
[  307.866398][T21405] binder: Unknown parameter 'obj_user'
[  307.870836][T21405] binder: Unknown parameter 'obj_user'
[  307.873352][T21405] binder: Unknown parameter 'obj_user'
[  307.875378][T21405] binder: Unknown parameter 'obj_user'
[  307.877346][T21405] binder: Unknown parameter 'obj_user'
[  307.879331][T21405] binder: Unknown parameter 'obj_user'
[  308.080944][T21422] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  308.607921][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.612741][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.615076][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.617474][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.620223][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.623325][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.625902][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.628397][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.631875][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.634264][T21492] xt_hashlimit: max too large, truncated to 1048576
[  308.899618][T21525] warn_alloc: 1 callbacks suppressed
[  308.899628][T21525] syz.4.3520: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  308.906295][T21525] CPU: 3 UID: 0 PID: 21525 Comm: syz.4.3520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  308.906313][T21525] Tainted: [L]=SOFTLOCKUP
[  308.906317][T21525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  308.906324][T21525] Call Trace:
[  308.906328][T21525]  <TASK>
[  308.906333][T21525]  dump_stack_lvl+0x16c/0x1f0
[  308.906353][T21525]  warn_alloc+0x248/0x3a0
[  308.906368][T21525]  ? __pfx_warn_alloc+0x10/0x10
[  308.906381][T21525]  ? __pfx_stack_trace_save+0x10/0x10
[  308.906400][T21525]  ? kasan_save_stack+0x42/0x60
[  308.906415][T21525]  ? kasan_save_stack+0x33/0x60
[  308.906436][T21525]  ? kasan_save_track+0x14/0x30
[  308.906450][T21525]  ? xskq_create+0x52/0x1d0
[  308.906461][T21525]  ? xsk_setsockopt+0x932/0xc00
[  308.906471][T21525]  ? do_sock_setsockopt+0xf3/0x1d0
[  308.906486][T21525]  ? xskq_create+0xfb/0x1d0
[  308.906498][T21525]  __vmalloc_node_range_noprof+0xfbc/0x1480
[  308.906514][T21525]  ? xskq_create+0xfb/0x1d0
[  308.906529][T21525]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  308.906544][T21525]  ? xskq_create+0xfb/0x1d0
[  308.906556][T21525]  vmalloc_user_noprof+0x9e/0xe0
[  308.906566][T21525]  ? xskq_create+0xfb/0x1d0
[  308.906578][T21525]  xskq_create+0xfb/0x1d0
[  308.906590][T21525]  xsk_setsockopt+0x932/0xc00
[  308.906602][T21525]  ? __pfx_xsk_setsockopt+0x10/0x10
[  308.906618][T21525]  ? selinux_socket_setsockopt+0x6a/0x80
[  308.906630][T21525]  ? __pfx_xsk_setsockopt+0x10/0x10
[  308.906642][T21525]  do_sock_setsockopt+0xf3/0x1d0
[  308.906657][T21525]  __sys_setsockopt+0x1a0/0x230
[  308.906676][T21525]  __x64_sys_setsockopt+0xbd/0x160
[  308.906692][T21525]  ? do_syscall_64+0x91/0xf80
[  308.906707][T21525]  ? lockdep_hardirqs_on+0x7c/0x110
[  308.906722][T21525]  do_syscall_64+0xcd/0xf80
[  308.906741][T21525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.906752][T21525] RIP: 0033:0x7f0eae38f7c9
[  308.906761][T21525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.906771][T21525] RSP: 002b:00007f0eac5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  308.906781][T21525] RAX: ffffffffffffffda RBX: 00007f0eae5e5fa0 RCX: 00007f0eae38f7c9
[  308.906788][T21525] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  308.906794][T21525] RBP: 00007f0eae413f91 R08: 0000000000000004 R09: 0000000000000000
[  308.906800][T21525] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.906806][T21525] R13: 00007f0eae5e6038 R14: 00007f0eae5e5fa0 R15: 00007ffe6f6bbc28
[  308.906820][T21525]  </TASK>
[  308.906824][T21525] Mem-Info:
[  308.962427][T21525] active_anon:29378 inactive_anon:0 isolated_anon:0
[  308.962427][T21525]  active_file:4822 inactive_file:27735 isolated_file:0
[  308.962427][T21525]  unevictable:1768 dirty:135 writeback:0
[  308.962427][T21525]  slab_reclaimable:8738 slab_unreclaimable:86577
[  308.962427][T21525]  mapped:25092 shmem:19819 pagetables:1622
[  308.962427][T21525]  sec_pagetables:314 bounce:0
[  308.962427][T21525]  kernel_misc_reclaimable:0
[  308.962427][T21525]  free:426290 free_pcp:21516 free_cma:0
[  309.011269][T21525] Node 0 active_anon:117512kB inactive_anon:0kB active_file:19028kB inactive_file:110632kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100128kB dirty:484kB writeback:0kB shmem:75740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16048kB pagetables:6364kB sec_pagetables:1256kB all_unreclaimable? no Balloon:0kB
[  309.021354][T21525] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:240kB dirty:56kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.030823][T21525] Node 0 DMA free:9140kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB
[  309.040071][T21525] lowmem_reserve[]: 0 1236 1236 1236 1236
[  309.041968][T21525] Node 0 DMA32 free:97636kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:117512kB inactive_anon:0kB active_file:19028kB inactive_file:110632kB unevictable:3536kB writepending:484kB zspages:0kB present:2080628kB managed:1266132kB mlocked:0kB bounce:0kB free_pcp:65080kB local_pcp:29168kB free_cma:0kB
[  309.053879][T21525] lowmem_reserve[]: 0 0 0 0 0
[  309.055390][T21525] Node 1 Normal free:1598256kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:308kB unevictable:3536kB writepending:56kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:20972kB local_pcp:12532kB free_cma:0kB
[  309.065564][T21525] lowmem_reserve[]: 0 0 0 0 0
[  309.067110][T21525] Node 0 DMA: 5*4kB (U) 6*8kB (U) 5*16kB (U) 5*32kB (U) 4*64kB (U) 5*128kB (U) 5*256kB (U) 5*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 9140kB
[  309.072193][T21525] Node 0 DMA32: 391*4kB (UE) 529*8kB (UME) 234*16kB (UME) 302*32kB (UME) 92*64kB (UE) 67*128kB (UME) 81*256kB (UME) 16*512kB (UM) 30*1024kB (UM) 2*2048kB (M) 0*4096kB = 97412kB
[  309.077530][T21525] Node 1 Normal: 30*4kB (UME) 27*8kB (UME) 66*16kB (UME) 230*32kB (UME) 116*64kB (UME) 50*128kB (UME) 35*256kB (UME) 24*512kB (UME) 22*1024kB (UME) 2*2048kB (UM) 373*4096kB (UM) = 1598256kB
[  309.083690][T21525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  309.086566][T21525] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  309.089322][T21525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  309.092459][T21525] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  309.095327][T21525] 52372 total pagecache pages
[  309.096830][T21525] 0 pages in swap cache
[  309.098154][T21525] Free swap  = 124996kB
[  309.099422][T21525] Total swap = 124996kB
[  309.100801][T21525] 1048443 pages RAM
[  309.102541][T21525] 0 pages HighMem/MovableOnly
[  309.104112][T21525] 282597 pages reserved
[  309.105357][T21525] 0 pages cma reserved
[  309.181943][T21554] macvtap0: entered allmulticast mode
[  309.184317][T21554] veth0_macvtap: entered allmulticast mode
[  309.230949][T21560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.312705][T21571] macvtap0: entered allmulticast mode
[  309.314555][T21571] veth0_macvtap: entered allmulticast mode
[  309.540097][T21667] random: crng reseeded on system resumption
[  309.560165][T21667] Restarting kernel threads ...
[  309.569205][T21667] Done restarting kernel threads.
[  309.744027][T21564] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  309.777214][T21743] tipc: Started in network mode
[  309.779222][T21743] tipc: Node identity 84e, cluster identity 4711
[  309.781265][T21743] tipc: Node number set to 2126
[  309.940667][T21761] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  309.958765][T21761] kvm: pic: non byte read
[  309.961926][T21761] kvm: pic: non byte read
[  309.964966][T21761] kvm: pic: non byte read
[  310.086622][   T10] usb 8-1: new low-speed USB device number 54 using dummy_hcd
[  310.247374][   T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  310.250216][   T10] usb 8-1: config 0 has no interface number 0
[  310.252211][   T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  310.255722][   T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  310.259471][   T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  310.262931][   T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  310.266414][   T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  310.271589][   T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  310.275695][   T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  310.278945][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.284331][   T10] usb 8-1: config 0 descriptor??
[  310.286576][T21750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  310.289372][T21750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  310.294077][   T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  310.388880][T21810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.432528][T21810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.465336][T21810] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  310.498780][T21810] bond0 (unregistering): Released all slaves
[  310.509628][   T24] usb 8-1: USB disconnect, device number 54
[  310.517377][   T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  310.896900][T21905] input: syz0 as /devices/virtual/input/input49
[  310.972998][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.094471][T21916] pimreg: entered allmulticast mode
[  311.370324][T21950] SELinux: ebitmap start bit (4044972160) is beyond the end of the bitmap (1472)
[  311.379006][T21950] SELinux: failed to load policy
[  311.473213][T21960] netlink: 'syz.1.3577': attribute type 4 has an invalid length.
[  311.478791][T21960] netlink: 'syz.1.3577': attribute type 4 has an invalid length.
[  311.525155][T21966] netlink: 'syz.6.3579': attribute type 1 has an invalid length.
[  311.619721][T21969] macsec1: entered allmulticast mode
[  311.621985][T21969] bridge0: entered allmulticast mode
[  311.627515][T21969] bridge0: port 1(macsec1) entered blocking state
[  311.629768][T21969] bridge0: port 1(macsec1) entered disabled state
[  311.639093][T21969] bridge0: left allmulticast mode
[  311.728150][T21989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  311.754194][T22004] ip6t_srh: unknown srh match flags  4000
[  311.847001][T22010] program syz.6.3588 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  311.894379][T21994] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  311.961395][T22020] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  311.996876][T22031] __nla_validate_parse: 11 callbacks suppressed
[  311.996892][T22031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3597'.
[  312.075190][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.078386][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.082293][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.084795][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.087385][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.089832][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.092278][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.094685][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.098856][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.101355][   T69] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  312.106221][   T69] hid-generic 0000:0000:0000.001C: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  312.185245][T22057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.376800][T22090] syzkaller1: entered promiscuous mode
[  312.379187][T22090] syzkaller1: entered allmulticast mode
[  312.421675][T22094] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3609'.
[  312.424574][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3609'.
[  312.491438][  T840] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  312.513383][T22097] vxlan0: entered promiscuous mode
[  312.515194][T22097] vxlan0: entered allmulticast mode
[  312.534036][ T9978] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.538566][ T9978] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.542408][ T9978] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.548523][ T9978] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.662649][  T840] usb 9-1: Using ep0 maxpacket: 8
[  312.666618][  T840] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  312.669441][  T840] usb 9-1: config 179 has no interface number 0
[  312.671553][  T840] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  312.675892][  T840] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  312.679681][  T840] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  312.684678][  T840] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  312.689086][  T840] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  312.694892][  T840] usb 9-1: config 179 interface 65 has no altsetting 0
[  312.697315][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'.
[  312.697725][  T840] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  312.705142][  T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.722476][  T840] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input50
[  312.729277][   T40] kauditd_printk_skb: 343 callbacks suppressed
[  312.729290][   T40] audit: type=1400 audit(297.837:64645): avc:  denied  { read } for  pid=5330 comm="acpid" name="js0" dev="devtmpfs" ino=3230 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  312.741945][   T40] audit: type=1400 audit(297.846:64646): avc:  denied  { open } for  pid=5330 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3230 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  312.838214][   T40] audit: type=1400 audit(297.931:64647): avc:  denied  { mount } for  pid=22118 comm="syz.6.3613" name="/" dev="overlay" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  312.861814][   T40] audit: type=1400 audit(297.949:64648): avc:  denied  { unmount } for  pid=18829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  312.895185][   T40] audit: type=1400 audit(297.987:64649): avc:  denied  { ioctl } for  pid=22120 comm="syz.6.3614" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=78840 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  312.904943][T22121] netlink: 'syz.6.3614': attribute type 10 has an invalid length.
[  312.930769][   T40] audit: type=1400 audit(298.015:64650): avc:  denied  { read write } for  pid=22069 comm="syz.4.3604" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  312.938834][   T40] audit: type=1400 audit(298.024:64651): avc:  denied  { open } for  pid=22069 comm="syz.4.3604" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  312.948755][   T40] audit: type=1400 audit(298.024:64652): avc:  denied  { ioctl } for  pid=22069 comm="syz.4.3604" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  312.958651][   T40] audit: type=1400 audit(298.024:64653): avc:  denied  { read write } for  pid=22069 comm="syz.4.3604" name="event4" dev="devtmpfs" ino=3231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  312.968431][   T40] audit: type=1400 audit(298.024:64654): avc:  denied  { open } for  pid=22069 comm="syz.4.3604" path="/dev/input/event4" dev="devtmpfs" ino=3231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  312.984272][T22070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22070 comm=syz.4.3604
[  312.997890][  T840] usb 9-1: USB disconnect, device number 16
[  313.000549][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  313.067139][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  313.070633][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  313.074368][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  313.077162][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  313.082275][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  313.086104][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'.
[  313.299331][T22161] netlink: 'syz.1.3623': attribute type 10 has an invalid length.
[  313.303637][T22161] batman_adv: batadv0: Adding interface: team0
[  313.307364][T22161] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  313.757928][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.761037][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.765804][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.768721][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.771584][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.774449][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.785614][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.788566][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.791468][T22195] program syz.3.3631 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.796525][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.799314][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.802284][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.805133][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.808196][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.811100][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.814075][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.818590][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.822671][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.826180][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.829207][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.832405][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.835326][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.838143][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.841458][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.844339][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.847303][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.853294][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.856089][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.858781][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.861689][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.864492][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.867346][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.870179][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.873166][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.875712][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.878481][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.881290][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.884281][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.887102][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.889937][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.892944][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.895871][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.898748][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.901683][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.904622][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.907006][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.909142][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.911419][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.913588][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.916665][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.919011][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.922152][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.924908][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.927737][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.930287][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.933100][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.936132][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.939026][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.941848][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.944630][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.947555][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.950439][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.953341][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.956427][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.959491][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  313.962417][ T5936] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  313.965196][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2007
[  314.189333][T22228] CIFS mount error: No usable UNC path provided in device string!
[  314.189333][T22228] 
[  314.193423][T22228] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  314.449193][   T59] usb 8-1: new full-speed USB device number 55 using dummy_hcd
[  314.530051][T22250] geneve3: entered promiscuous mode
[  314.532806][   T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.540847][   T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.543688][   T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.543710][   T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.603725][T22252] input input51: cannot allocate more than FF_MAX_EFFECTS effects
[  314.610825][   T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  314.614541][   T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  314.617987][   T59] usb 8-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  314.621453][   T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.625990][   T59] usb 8-1: config 0 descriptor??
[  314.628299][T22228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  314.636722][T22268] syzkaller0: entered promiscuous mode
[  314.638620][T22268] syzkaller0: entered allmulticast mode
[  314.802808][T22284] dvmrp6: entered allmulticast mode
[  314.822587][T22282] 9pnet: Could not find request transport: virtiy
[  314.853513][   T59] usbhid 8-1:0.0: can't add hid device: -71
[  314.855975][   T59] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  314.859851][   T59] usb 8-1: USB disconnect, device number 55
[  315.090891][T22325] tipc: Started in network mode
[  315.092934][T22325] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  315.095943][T22325] tipc: Enabled bearer <eth:batadv0>, priority 10
[  315.098679][T22326] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  315.113254][T22329] netlink: 'syz.1.3663': attribute type 1 has an invalid length.
[  315.136286][T22329] 8021q: adding VLAN 0 to HW filter on device bond11
[  315.147871][T22328] bond11: (slave ip6erspan0): making interface the new active one
[  315.152240][T22328] bond11: (slave ip6erspan0): Enslaving as an active interface with an up link
[  315.440701][ T6022] hid-generic 0000:0000:0000.001D: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  315.457713][T22403] hpfs: Bad magic ... probably not HPFS
[  315.659183][T22446] sctp: [Deprecated]: syz.1.3682 (pid 22446) Use of int in maxseg socket option.
[  315.659183][T22446] Use struct sctp_assoc_value instead
[  315.809410][T22462] input: syz1 as /devices/virtual/input/input52
[  315.812608][T22462] input: failed to attach handler leds to device input52, error: -6
[  315.918507][ T9968] nci: nci_rsp_packet: unsupported rsp opcode 0xf1e
[  316.159636][   T10] tipc: Node number set to 8432298
[  316.785438][T22487] infiniband syz0: set down
[  316.788092][T22487] infiniband syz0: added bond0
[  316.813200][T22487] RDS/IB: syz0: added
[  316.813494][T22506] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  316.816147][T22487] smc: adding ib device syz0 with port count 1
[  316.825270][T22487] smc:    ib device syz0 port 1 has no pnetid
[  316.913489][T22515] loop3: detected capacity change from 0 to 16384
[  317.165783][T22520] loop3: detected capacity change from 16384 to 16383
[  317.296412][T22531] openvswitch: netlink: Flow key attr not present in new flow.
[  317.298897][T22515] ------------[ cut here ]------------
[  317.298908][T22515] WARNING: mm/page_alloc.c:5159 at __alloc_frozen_pages_noprof+0x309/0x2440, CPU#3: syz.3.3698/22515
[  317.305226][T22515] Modules linked in:
[  317.306616][T22515] CPU: 3 UID: 0 PID: 22515 Comm: syz.3.3698 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  317.310602][T22515] Tainted: [L]=SOFTLOCKUP
[  317.311973][T22515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  317.315659][T22515] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440
[  317.317914][T22515] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d 76 f0 55 0e 00 75 0b c6 05 6d f0 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  317.326417][T22515] RSP: 0018:ffffc90007a5f9f8 EFLAGS: 00010246
[  317.328415][T22515] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  317.331496][T22515] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0
[  317.334646][T22515] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009
[  317.338082][T22515] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0
[  317.341448][T22515] R13: 1ffff92000f4bf55 R14: ffffffff9abd6944 R15: 0000000000000013
[  317.344790][T22515] FS:  00007f8f9b5596c0(0000) GS:ffff8880d6c60000(0000) knlGS:0000000000000000
[  317.348713][T22515] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.351518][T22515] CR2: 000000110c3fce9b CR3: 000000004b379000 CR4: 0000000000352ef0
[  317.354825][T22515] Call Trace:
[  317.356284][T22515]  <TASK>
[  317.357932][T22515]  ? find_held_lock+0x2b/0x80
[  317.359920][T22515]  ? avc_has_extended_perms+0x33a/0x1090
[  317.362251][T22515]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  317.364864][T22515]  ? avc_has_extended_perms+0x47c/0x1090
[  317.367165][T22515]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  317.369903][T22515]  ? lockdep_hardirqs_on+0x7c/0x110
[  317.372135][T22515]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  317.374650][T22515]  ? policy_nodemask+0xea/0x4e0
[  317.376735][T22515]  alloc_pages_mpol+0x1fb/0x550
[  317.379107][T22515]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  317.381374][T22515]  ___kmalloc_large_node+0x130/0x1a0
[  317.383562][T22515]  __kmalloc_large_node_noprof+0x1c/0x70
[  317.385473][T22515]  ? __might_fault+0xe3/0x190
[  317.386988][T22515]  __kmalloc_noprof.cold+0xc/0x62
[  317.389191][T22515]  ? raw_alloc_io_data+0x12c/0x1a0
[  317.391694][T22515]  ? raw_alloc_io_data+0x12c/0x1a0
[  317.393492][T22515]  raw_alloc_io_data+0x12c/0x1a0
[  317.395084][T22515]  raw_ioctl+0x1397/0x2bf0
[  317.396733][T22515]  ? __pfx_raw_ioctl+0x10/0x10
[  317.398702][T22515]  ? selinux_file_ioctl+0xb4/0x270
[  317.401215][T22515]  ? __pfx_raw_ioctl+0x10/0x10
[  317.402995][T22515]  __x64_sys_ioctl+0x18e/0x210
[  317.404537][T22515]  do_syscall_64+0xcd/0xf80
[  317.405975][T22515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.407931][T22515] RIP: 0033:0x7f8f9a78f7c9
[  317.409365][T22515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.415571][T22515] RSP: 002b:00007f8f9b559038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.418576][T22515] RAX: ffffffffffffffda RBX: 00007f8f9a9e5fa0 RCX: 00007f8f9a78f7c9
[  317.422199][T22515] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 000000000000000d
[  317.425048][T22515] RBP: 00007f8f9a813f91 R08: 0000000000000000 R09: 0000000000000000
[  317.427938][T22515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.431128][T22515] R13: 00007f8f9a9e6038 R14: 00007f8f9a9e5fa0 R15: 00007fff4607cce8
[  317.434423][T22515]  </TASK>
[  317.435723][T22515] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  317.438647][T22515] CPU: 3 UID: 0 PID: 22515 Comm: syz.3.3698 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  317.443044][T22515] Tainted: [L]=SOFTLOCKUP
[  317.444834][T22515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  317.449239][T22515] Call Trace:
[  317.450577][T22515]  <TASK>
[  317.451773][T22515]  dump_stack_lvl+0x3d/0x1f0
[  317.453639][T22515]  vpanic+0x640/0x6f0
[  317.454961][T22515]  ? __alloc_frozen_pages_noprof+0x309/0x2440
[  317.456894][T22515]  panic+0xca/0xd0
[  317.458149][T22515]  ? __pfx_panic+0x10/0x10
[  317.459637][T22515]  check_panic_on_warn+0xab/0xb0
[  317.461514][T22515]  __warn+0x108/0x3c0
[  317.462815][T22515]  __report_bug+0x2a0/0x520
[  317.464355][T22515]  ? __alloc_frozen_pages_noprof+0x309/0x2440
[  317.466246][T22515]  ? __pfx___report_bug+0x10/0x10
[  317.467869][T22515]  ? __kernel_text_address+0xd/0x40
[  317.469523][T22515]  ? unwind_get_return_address+0x59/0xa0
[  317.471309][T22515]  ? arch_stack_walk+0xa6/0x100
[  317.472870][T22515]  ? __alloc_frozen_pages_noprof+0x309/0x2440
[  317.475158][T22515]  report_bug+0xb2/0x220
[  317.476885][T22515]  ? __alloc_frozen_pages_noprof+0x309/0x2440
[  317.479114][T22515]  handle_bug+0x127/0x260
[  317.480816][T22515]  exc_invalid_op+0x17/0x50
[  317.482572][T22515]  asm_exc_invalid_op+0x1a/0x20
[  317.484542][T22515] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440
[  317.487189][T22515] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d 76 f0 55 0e 00 75 0b c6 05 6d f0 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[  317.495018][T22515] RSP: 0018:ffffc90007a5f9f8 EFLAGS: 00010246
[  317.497538][T22515] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  317.500729][T22515] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0
[  317.503874][T22515] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009
[  317.507001][T22515] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0
[  317.510163][T22515] R13: 1ffff92000f4bf55 R14: ffffffff9abd6944 R15: 0000000000000013
[  317.513260][T22515]  ? find_held_lock+0x2b/0x80
[  317.515107][T22515]  ? avc_has_extended_perms+0x33a/0x1090
[  317.517272][T22515]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  317.519726][T22515]  ? avc_has_extended_perms+0x47c/0x1090
[  317.521977][T22515]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  317.524349][T22515]  ? lockdep_hardirqs_on+0x7c/0x110
[  317.526477][T22515]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  317.528911][T22515]  ? policy_nodemask+0xea/0x4e0
[  317.530923][T22515]  alloc_pages_mpol+0x1fb/0x550
[  317.532927][T22515]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  317.535110][T22515]  ___kmalloc_large_node+0x130/0x1a0
[  317.537263][T22515]  __kmalloc_large_node_noprof+0x1c/0x70
[  317.539320][T22515]  ? __might_fault+0xe3/0x190
[  317.541060][T22515]  __kmalloc_noprof.cold+0xc/0x62
[  317.543185][T22515]  ? raw_alloc_io_data+0x12c/0x1a0
[  317.545327][T22515]  ? raw_alloc_io_data+0x12c/0x1a0
[  317.547474][T22515]  raw_alloc_io_data+0x12c/0x1a0
[  317.549412][T22515]  raw_ioctl+0x1397/0x2bf0
[  317.551283][T22515]  ? __pfx_raw_ioctl+0x10/0x10
[  317.553235][T22515]  ? selinux_file_ioctl+0xb4/0x270
[  317.555318][T22515]  ? __pfx_raw_ioctl+0x10/0x10
[  317.557157][T22515]  __x64_sys_ioctl+0x18e/0x210
[  317.558815][T22515]  do_syscall_64+0xcd/0xf80
[  317.560388][T22515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.562461][T22515] RIP: 0033:0x7f8f9a78f7c9
[  317.564066][T22515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.570467][T22515] RSP: 002b:00007f8f9b559038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.573174][T22515] RAX: ffffffffffffffda RBX: 00007f8f9a9e5fa0 RCX: 00007f8f9a78f7c9
[  317.575821][T22515] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 000000000000000d
[  317.578567][T22515] RBP: 00007f8f9a813f91 R08: 0000000000000000 R09: 0000000000000000
[  317.581195][T22515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.583752][T22515] R13: 00007f8f9a9e6038 R14: 00007f8f9a9e5fa0 R15: 00007fff4607cce8
[  317.586332][T22515]  </TASK>
[  317.588146][T22515] Kernel Offset: disabled
[  317.589572][T22515] Rebooting in 86400 seconds..