last executing test programs:

4m7.559098473s ago: executing program 3 (id=4):
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x366, 0x1b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c000000080003", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff}) (async)
syz_usb_connect(0x2, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cd861e2042070920ca440102030109024d0001000010000904ee02029cc9fd00090503040002020000090582"], 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x18}) (async)
syz_emit_ethernet(0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="ffd094ffffffffffaaaaaaaaaa3a81003300"], 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x63}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10)
r6 = io_uring_setup(0x3634, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x32d})
io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x2000000, 0x0) (async)
r7 = memfd_secret(0x80000)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r7)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
mmap(&(0x7f0000684000/0x4000)=nil, 0x4000, 0x1000007, 0x11, r4, 0xffffd000) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) (async)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2, 0xaf}]}]}, 0x2c}, 0x1, 0x8100000000000000, 0x0, 0x4008010}, 0x4004004)
close_range(r8, 0xffffffffffffffff, 0x0)

4m6.532466598s ago: executing program 3 (id=9):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000040)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000240)={0xdbf, 0x2, 0x8, 0x2b25, 0x80000001, 0xb, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
clock_adjtime(0xf423f, &(0x7f0000000040)={0xd51, 0x9, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200000, 0x10080, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000))

4m6.201935458s ago: executing program 0 (id=11):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0x5411, 0x1000000000000)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0200f8caf3fa9", @ANYRESDEC=r2], 0x0, 0x26, 0x0, 0x0, 0x8, 0x10000}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000000051090000000000007590000000950000e983d7aeff"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)

4m6.146093138s ago: executing program 3 (id=12):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x84)
syz_open_procfs(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008000e", @ANYBLOB], 0x60}}, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x101091, 0x0)

4m5.115386518s ago: executing program 0 (id=14):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x240481, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x145681, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xc)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0)
shutdown(r2, 0x2)

4m4.887933655s ago: executing program 3 (id=15):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4)

4m3.843461581s ago: executing program 0 (id=17):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000140), 0x6, 0x14a442)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x4, 0x80a0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$HIDIOCGRAWPHYS(r2, 0x4004480d, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000000c0)={0x1, 0x280, 0x380, &(0x7f0000000900)=[0x3, 0x2, 0x8, 0x4028, 0x0, 0x3, 0x3, 0xfffffffffffffff8, 0x800, 0xd0, 0x940, 0x80000001, 0x80000000, 0x44, 0x6, 0xa6, 0x10000, 0x0, 0x8000, 0x6e0, 0x8, 0x6, 0xc4a8, 0x89, 0x6, 0x3, 0x4, 0x9, 0x1, 0x3, 0xc1e, 0x2, 0xc0c7, 0x0, 0x5, 0x1, 0x4, 0x80000001, 0x5c96, 0x9, 0x8, 0xbf71, 0x8, 0x100000000, 0x1, 0x7fffffffffffffff, 0x7, 0xfffffffffffffffd, 0x35, 0x9, 0x9, 0x3d, 0x8001, 0xe5b, 0xfffffffffffffff5, 0x3, 0x2, 0x4b, 0x4, 0x3, 0x2a, 0x5, 0x3, 0x4, 0x0, 0x6, 0x7fffffffffffffff, 0x7, 0x6, 0x0, 0x8636, 0x3, 0x4, 0x9, 0x5d0, 0x6, 0xffffffffffffffff, 0x5, 0x7f, 0xfffffffffffffffa, 0x4, 0x4, 0x7, 0x8, 0x5, 0xa22, 0x8000000000000001, 0x4, 0x9, 0xff, 0x0, 0x3, 0xffff, 0x7, 0x1, 0x7, 0xf6, 0xccfd, 0x4, 0x2, 0x2231a785, 0x0, 0x0, 0xf2, 0x6, 0x7, 0xfb09, 0x4, 0x4, 0x10, 0x40, 0x9, 0x5, 0x7, 0x7fffffffffffffff, 0x2, 0x3, 0x4, 0x5, 0x9, 0x9, 0x76d393a, 0xef, 0xa, 0xffffffffffffffff, 0x50f1c29b, 0x1, 0x9]})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@v={0x93, 0x0, 0x80})
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0)
dup(r5)
sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="392a2d35b3db06839e3aaca855680ac3eae3a325f865d9299559afb2ea54b7cd3ffea8155e293ac282a96daf45358f332b98ae8b48c581bc94af45e4e17b3a071604f14d1c4bf2b20ff17120a3bd4de29e8fb13f921e0fd62d2bf481ffa0ae83eec85ff9c3713087792302c7fd1d6a91da0cead8e0aece937b5febda2c6392c009aecdcc0c6801b6d7874b69c2ed69f2c1a772b1f5b96b5fd132be75278bc4ec4e3b21c80d226f14e2208411ecf8fd20b82e0123c5", 0xb5}, {&(0x7f00000002c0)="c51b98f1ec072d099b43aaddb3aa343d729bfc4e5800bf7d77338797540b1a657fbeb089ce0bead07f3feda91090a4aafc6faa0a94ec0da4f4abaf70443febab4c3ced71fac043bb02be0e94d200cf951cb028176ad2ddda90c5639467624063d2c32afb15355038e397687d8e9c226827024f803905b402d957e587d76497fddc68cf2641794a3516a859", 0x8b}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000640)="64fb7404cc9623ca536e79c9ca53dd8445bb0a2fdc715fc6b6749495159b164ff5a34dbac3382a50873351b46afdabed0c123c7ccd2f619dff5e5d36c0c153eac548d58805f763873ef25d7627fc09671aa5f9f8c17b25cf1fb5960ac0cfa2e596f1e35bcbf77296a1303d3471a8fe4b65beba3d72100183cd432333c5ae9a544df54aa980f9855c80bc266a2641176fad6f1840deaf7cf5cf6f00d1f58765f2492b890dbfe6092612d29200da1d01613e0ba806eb34a6ac439af42ace95bdb6b95d814167bc30b0c6ae8997e7109e6aabc34b66c492feb4a602479c0bd84089f6a67c5f95115c367d618048441332d14d83e2ec9e", 0xf5}], 0x4, &(0x7f0000000d00)=[{0xf8, 0x111, 0xffffffe2, "2e162a88570700f9070de5a1b0376176c6576686552d885d9c53ad19616b324646433da14639f7297dfd56b3c86778b6d86d7b886acaba32f899ce5534158bfd0635169fd8b543be9726eae7a2b1a4ae4670aebd559ab7e771fa6cfc2cb6e76cd97c603987957d450942a7f8a40cc61e11bbba04b275417a858b7c2d33d9004958421fe25bed855d74b16080674bfcd678044b214858daae0d9f28b9614db1ea73c71a87e7e2b229e86b47e433d6ddc208a59cd39604a8e116ac93f086fcba67c07efc071767df53f25c39dd5f177da959ab13c946fcea00882a932201c6ce7e27a06406aa2b"}], 0xf8}, 0x4000)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)

4m3.358038753s ago: executing program 3 (id=20):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x64)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x0, 0xdddd1000}}, "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", "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"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x448c4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'wlan1\x00', @broadcast})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8)
r7 = userfaultfd(0x801)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x201000003, 0x0, 0x8, r10, 0x3})
close_range(r7, 0xffffffffffffffff, 0x0)

4m3.15799248s ago: executing program 32 (id=20):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x64)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x0, 0xdddd1000}}, "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", "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"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x448c4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'wlan1\x00', @broadcast})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8)
r7 = userfaultfd(0x801)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x201000003, 0x0, 0x8, r10, 0x3})
close_range(r7, 0xffffffffffffffff, 0x0)

4m3.031375425s ago: executing program 4 (id=23):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
r1 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}})
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)={0xc0000008})
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000140))

4m2.674080799s ago: executing program 0 (id=25):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x84)
syz_open_procfs(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008000e", @ANYBLOB], 0x60}}, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x101091, 0x0)

4m2.177009135s ago: executing program 0 (id=26):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', <r5=>0x0, 0x1, 0x7800, 0xd6, 0xffffffff, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x67, 0x0, 0xf9, 0x29, 0x0, @multicast2, @local, {[@generic={0x44, 0x12, "5014c2c089a18f3e5848c847c18fb528"}, @noop, @ssrr={0x89, 0x13, 0x64, [@private=0xa010101, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x36}]}, @end, @end, @cipso={0x86, 0x9, 0x3, [{0xde0537bf4c032dde, 0x3, 's'}]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0xee08}, {@loopback, 0x4}, {@empty, 0xd}, {@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x1b, 0x99, [@rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}})
sendmsg$nl_route_sched(r4, &(0x7f0000001dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=@delchain={0xdc0, 0x65, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x9}, {0x30acf44168847586, 0x1e}, {0x6, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x164, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xc}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8a}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_EMATCHES={0x138, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x110, 0x2, 0x0, 0x0, {{0x6f3, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "616e44d79af144f3b7637d751d6fe7ee8d366eab33438487c252fdbf4ed410b6d7d5c15c113f3fd905fb1d813f1dea5628dea2d5ebc11e0984ca0ba80f73c810fdb8231554ded4750add13f32e1470b5524fd4cd0b22391c5204204c491523b20b1c94b84af17bbdce7b5ccd5bb27ed28683fe263cbd01b827e5092659a30912e18983342db673e05639dac0fb902d9a523e563d71e4f92bacd8e8168407c692f051e6c2cff35b399ea8b69612fe3ba65e8f6618ecb89dc17c277e4aeb8cbbe4952d8f0be5862ff307221701cf07a4e346bfdc2655a4f9bac4f3d853840193bb5e"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x5}, {0x1, 0x5, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4e4, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x74174c7c}, @TCA_FLOW_XOR={0x8, 0x7, 0xb}, @TCA_FLOW_MASK={0x8, 0x6, 0xbead}, @TCA_FLOW_XOR={0x8, 0x7, 0xffff8000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x4b8, 0x9, 0x0, 0x1, [@m_connmark={0x50, 0x1c, 0x0, 0x0, {{0xd}, {0x4}, {0x1e, 0x6, "549a43baf2bf70f632ed3843613c6d8b40c7aa726bb6b01f50db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x118, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x4, 0x1dc1, 0x400}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3b5, 0x9, 0x20000003, 0x2d4, 0x4}, 0x3, r5}}]}, {0xa9, 0x6, "f188f02aba4fafe76ab88e1d4da866f3bb671de3361e94e57069120801e9d00915aa53fe88a9fc1b0f7a060650d1f2c9799525cb28174347fd913cdff3bd605e8ffb0540c3e00658ade20b01b44e261f64e0362154bcc59d33694b6ae55964374e3f0d7978009faf79d9d9f206263c3c9d03dd3a3f5380c1b1bab736c13d0d5abbef12513468956134755485b42803ff0f3cf3f6be7230abf9ffc27afd31374d78752b3393"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x98, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffffa, 0x7, 0x2, 0x2}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x0, 0x7, 0x5}, 0x66}}]}, {0x32, 0x6, "a872ba403a47968c22541b5f64bcf9c6c366ce1e8f714fb13daf8832a6490a3ee738abe40bfee59e34ed8cfb400d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x128, 0x1c, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa}]}, {0xd6, 0x6, "5174a3f152ba0c7935d33e82913959538951804e07cc5034a44adf16332d9d6467f8f84091396e185f2c38cff57471db937e455f02b376c556ba0d96f1a9192ca33d3d59e73511a889f0c8912d0caff175f727a87b408db12128571bf6183e5444cd6eb4be3bf0cb303588b4dcb68e3f2808e03cde610cd83ee0c2d1699ce1d9366d925300a012359468b0317eb637cbd5c2485ec468030f2f8fbd3db8986f577bfd4cec32ecc9fd3cdb7a500b35f83c7c5498b3df738260e3ece179870d123176937550fa2c799e1d953123ce4cb48ff499"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_bpf={0x74, 0x16, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xc00, 0x3, 0x5, 0xfff}, {0x68, 0x1, 0x5, 0x40}, {0x8, 0x51, 0x6, 0x5b}, {0x8b61, 0x2, 0x1, 0x4}, {0x3, 0x6, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x8bf, 0x10000000, 0x6, 0x400}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x118, 0x14, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x6, 0x8, 0x8, 0xf7}}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x1701d670, 0x0, 0x2}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x9ee0, 0x8, 0x7fffffff, 0xfea}, 0x5}}]}, {0x71, 0x6, "a84e17e113d762c60685f33bc96f9f2b06705e9a78613b4a5917f25bf19c6fb0761643ac4cb287388542dbbfb8597018e9ca79465348e6a9e04090b445c18a11b4a7f33ba33dce152ecce8a89e35102538cbd61085c58fc4fa0daa93b415041c933f838d737bf4ae5435e90bce"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf8}}, @filter_kind_options=@f_bpf={{0x8}, {0x72c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x6, 0x2, 0x0, 0x8001}, {0x6, 0xf3, 0x7f, 0x8000}]}}, @TCA_BPF_ACT={0x2f8, 0x1, [@m_csum={0x1b8, 0x4, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x5}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff80, 0x20000000, 0x7fff, 0x3}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0xffffffff, 0x10000000, 0x7, 0x40}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xda90, 0x2, 0x1, 0x5}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2000000, 0xfffffffa, 0x10000000, 0x1, 0x37a}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x18b6, 0x10000000, 0x3, 0x5}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0xffffffffffffffff, 0x3, 0xffffffff}, 0x7}}]}, {0xc5, 0x6, "9ecd3e0301aefeac1ea82042e43454beb054d84fe510faeea2ad1dcad90342c4812cd7e5caae87e200917c0b5338bf41eee97f40740a0d6c8244187800e68894d76f12de73d680002cbdb92c5c3416e4ba1597d320dbbc78d28bec9937e4e8b2398be2a4124db764a1b5217c6d2344f6d177b7fdb7aed79bda3d89f9c0ec416d315e05d5a46d2a32a19c20a9fe6d7d362219051857765f9542af5a8c79c040cfd1affee11b8569d7263e92cc27d53607faea597cb7169377e0e353418f3050f557"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0xa0, 0x1a, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x2}]]}, {0x65, 0x6, "b2fc990b7fbcd288b3c7aa48054537407519621c01cb5b1c9c0950aeccb11522bcd20cbb97e4c75189c1604ad9957a1c923a51810ea43b0505dfce6270655094c9eddff21d7e55cacd0ecd4cbd43d1a6413bc0e08cf460e1615f6247cc34e4e0a6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x9c, 0x1b, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "79fcf58c7ee6185e448b5a4be2622ee6"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_LABELS={0x14, 0x7, "4364a484c13eaa4f5a52fc9be22a3bdf"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x11, 0x6, "af6843aca9cc80cd8c07612a67"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x40, 0x1, 0x0, 0x3, 0x9, 0x5, 0x0, 0x605, 0x3ff, 0x2, 0xff, 0x5, 0x7, 0x2, 0xfffffffe, 0x2, 0x93f, 0x400, 0x5, 0x7, 0x9, 0x6, 0x5, 0xd4f, 0x2, 0x6, 0x1, 0x9, 0x7ff, 0x1000, 0x1, 0x6e78, 0x8, 0x6721, 0x443, 0x8, 0x1, 0x80000000, 0x0, 0x101, 0x2, 0x2, 0x1, 0x10000, 0x4, 0x9, 0x9, 0x2, 0x3, 0x3, 0x9, 0x4, 0x8001, 0x8, 0x0, 0x6, 0x7, 0x27b, 0x331f442d, 0x3, 0x1, 0x2e, 0x401, 0x9243, 0xec3, 0x80000000, 0x3, 0x81, 0xef7d, 0x0, 0x1, 0x20000, 0x4, 0x26e2, 0x1, 0x3, 0x1, 0x147, 0x1acf, 0x2, 0x3, 0x290, 0xfffffffe, 0xffff0000, 0x0, 0x8, 0x200, 0xfffffffd, 0x80000000, 0x101, 0x9, 0x1200, 0x4, 0x107, 0x884, 0x6, 0x2, 0x1, 0x8000, 0x1, 0x9, 0x1ff, 0x4, 0xa23, 0x5, 0x59e, 0x7c, 0x80000001, 0x4, 0x7ff, 0x0, 0x6, 0x2, 0x200, 0x7, 0x2, 0x1, 0x0, 0x3, 0x7fffffff, 0xa, 0xfffff93d, 0x562af38d, 0x0, 0x9, 0xff, 0x3, 0x3ff, 0x10e, 0x401, 0xffff, 0x8, 0x2, 0x8, 0x0, 0x8142, 0xe3, 0x1, 0x85, 0x0, 0x10001, 0x5, 0x4, 0x40a3, 0x0, 0x2, 0x3, 0x7, 0x0, 0x8, 0x38, 0x4d, 0x4, 0x8, 0x8, 0x6, 0x5adc830c, 0x8, 0xe, 0x3, 0x200, 0x6, 0x6, 0x100, 0xfff, 0x6, 0x6, 0x4, 0x0, 0x4, 0x4, 0x7, 0x4, 0xa, 0x7, 0x10000, 0xb71, 0x1, 0x7, 0xfff, 0x5, 0x5, 0xf, 0xb2, 0x10001, 0x0, 0x4, 0x2, 0x47, 0x8, 0x9, 0x9, 0x8, 0x1ff, 0x3, 0x6, 0x8, 0xbe, 0xff, 0x9, 0x101, 0x200, 0x8001, 0x40, 0x9, 0x4, 0x37e2, 0x9, 0x3, 0x9, 0x8, 0x63a, 0x7, 0xfffffffc, 0x1, 0xc, 0x1, 0x4, 0x8, 0xf10, 0x2, 0x9, 0x3000000, 0x499, 0x4, 0x0, 0x21ad, 0x6, 0x1, 0x60000, 0x9, 0x3, 0x7f, 0x8001, 0x401, 0x6, 0x100, 0x8, 0x2, 0xfffffc00, 0x3ff, 0x5, 0x9, 0x81, 0x68ed, 0x0, 0x6, 0x1, 0x8, 0xb9e, 0x9, 0x7, 0x3, 0x74, 0xbdc]}]}]}}]}, 0xdc0}, 0x1, 0x0, 0x0, 0x44004}, 0x4840)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r9 = dup(r8)
read$FUSE(r9, &(0x7f0000003c40)={0x2020}, 0xffffff0a)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0)

4m1.710341509s ago: executing program 4 (id=27):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x14, r1, 0x1, 0x72bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r8, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4})

4m1.642055005s ago: executing program 0 (id=28):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x280, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6]}, @NL80211_ATTR_FRAME={0x24e, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random, {0x3, 0x9}}, 0x0, 0x3, 0x56, @void, [{0xdd, 0x63, "ebb6c979f98bf6b2740eba764f9dbc6c16013851011a04efb3425362442612e6ba70b79ef75039e7d41bf6949794891e02fa974a7c9a7153d2da0782b1c452e417567bd49b872be9cb14f2c875bb45eb0d9f9710db88e8104d4acba879de9f3ef2a833"}, {0xdd, 0x37, "b1640f1fbf95799de270caa06d3c533a93bbf7fedc4ccab948e8c1ef783b314b337c691e9ec70cc5a56f05964159fa1ccb5e387a009efe"}, {0xdd, 0x75, "ec57e76799dbb688686c288df7643a9f2cbf4989fc89c20b660b29aa43a4856f4087b5fa3ccd9ee9fef9afd4130268acdedf560547ce307f05c3f832154fd739f77b7661d203a334cb4758fd634cc33750e8c796fdb7877936e9ec0077ceb8dd96adca642923c19f7c2469d60d68d03ebcf5920d43"}, {0xdd, 0xe0, "0efda49622db0370820afa7e7b8b5a5c3d3d63aa6d8e206a0138ea6cdb776f04df6999be6b49f011cbd297867f0272691ed47bc20ac69d4bdc73a0b46d44e0884d23e10eec052a556df46aa693130cac4896ae2f9c5d8e658cc574ab64fe1bbfda210189a73f9b636c752e58b85e86877000207557057c55c608fd0bc99ccf3a75375927df44003f489b14eca5c6be792e57a57b3dcb428bd61b9b28843ab1c6be9d2ff4e77a6539f50c4f1398b5d925b5613ff2dba05b801bf763ca11bb593d2f4aeba7162dd31e5ea5867f790ab4b37d1e4bc98bb23b460a9bbb890207fa2d"}, {0xdd, 0x33, "a89092bac95d499059f449b0980b0781766cd2fd92b64f355983ca5a15998e9120ab68340d01feee2b3b4bde77b603fcc31a64"}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioperm(0x0, 0x9, 0xd648)
statx(0xffffffffffffffff, 0xfffffffffffffffd, 0x1000, 0x20, 0x0)
shmdt(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x4b6, r1}, 0x38)

4m0.721849436s ago: executing program 33 (id=28):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x280, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6]}, @NL80211_ATTR_FRAME={0x24e, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random, {0x3, 0x9}}, 0x0, 0x3, 0x56, @void, [{0xdd, 0x63, "ebb6c979f98bf6b2740eba764f9dbc6c16013851011a04efb3425362442612e6ba70b79ef75039e7d41bf6949794891e02fa974a7c9a7153d2da0782b1c452e417567bd49b872be9cb14f2c875bb45eb0d9f9710db88e8104d4acba879de9f3ef2a833"}, {0xdd, 0x37, "b1640f1fbf95799de270caa06d3c533a93bbf7fedc4ccab948e8c1ef783b314b337c691e9ec70cc5a56f05964159fa1ccb5e387a009efe"}, {0xdd, 0x75, "ec57e76799dbb688686c288df7643a9f2cbf4989fc89c20b660b29aa43a4856f4087b5fa3ccd9ee9fef9afd4130268acdedf560547ce307f05c3f832154fd739f77b7661d203a334cb4758fd634cc33750e8c796fdb7877936e9ec0077ceb8dd96adca642923c19f7c2469d60d68d03ebcf5920d43"}, {0xdd, 0xe0, "0efda49622db0370820afa7e7b8b5a5c3d3d63aa6d8e206a0138ea6cdb776f04df6999be6b49f011cbd297867f0272691ed47bc20ac69d4bdc73a0b46d44e0884d23e10eec052a556df46aa693130cac4896ae2f9c5d8e658cc574ab64fe1bbfda210189a73f9b636c752e58b85e86877000207557057c55c608fd0bc99ccf3a75375927df44003f489b14eca5c6be792e57a57b3dcb428bd61b9b28843ab1c6be9d2ff4e77a6539f50c4f1398b5d925b5613ff2dba05b801bf763ca11bb593d2f4aeba7162dd31e5ea5867f790ab4b37d1e4bc98bb23b460a9bbb890207fa2d"}, {0xdd, 0x33, "a89092bac95d499059f449b0980b0781766cd2fd92b64f355983ca5a15998e9120ab68340d01feee2b3b4bde77b603fcc31a64"}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioperm(0x0, 0x9, 0xd648)
statx(0xffffffffffffffff, 0xfffffffffffffffd, 0x1000, 0x20, 0x0)
shmdt(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x4b6, r1}, 0x38)

3m58.568592422s ago: executing program 4 (id=32):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xbfa8be5ef523b773, 0x70bd25, 0x25dfdbfd}, 0xfffffe7f}, 0x1, 0x0, 0x0, 0xc010}, 0x20000880)

3m57.443535682s ago: executing program 4 (id=35):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x84)
syz_open_procfs(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008000e", @ANYBLOB], 0x60}}, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x101091, 0x0)

3m56.667312064s ago: executing program 4 (id=36):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e62, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x4885)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1000000000041)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000ce"])
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000c59a169900", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$char_usb(r1, &(0x7f00000005c0)=""/197, 0xc5)

3m55.200110399s ago: executing program 4 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x7, 0xc8}}}, 0x6)
socket$packet(0x11, 0xa, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x42, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x36}, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r4 = gettid()
tkill(r4, 0x28)
ioperm(0x284, 0x7f, 0xe3)
rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000)

3m54.944700497s ago: executing program 34 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x7, 0xc8}}}, 0x6)
socket$packet(0x11, 0xa, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x42, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x36}, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r4 = gettid()
tkill(r4, 0x28)
ioperm(0x284, 0x7f, 0xe3)
rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000)

13.400622447s ago: executing program 6 (id=729):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc71a6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$isdn(0x22, 0x2, 0x25)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x80)
syz_emit_ethernet(0x82, &(0x7f0000000580)={@random="856b1200ff00", @local, @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, '&_Y', 0x44, 0x21, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[@fragment={0x32, 0x0, 0x5, 0x0, 0x0, 0x6, 0x66}, @dstopts={0x3a, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x8000, [0x2, 0x101]}}, @pad1]}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x7, "fbec15", 0x0, "9b07b0"}, "e5a8d83a"}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001000370400000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="9345050001000000180012800900010069706970"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4)

10.089178151s ago: executing program 6 (id=737):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x24, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x452fc200d819e4a6, 'J'}, @main=@item_4={0x3, 0x0, 0x9, "859def06"}]}}, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=ANY=[@ANYBLOB="0200000004000000090000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000007d8038e10848f0f80000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)
timer_create(0x4, &(0x7f0000000000)={0x0, 0x4, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)={'team0\x00', <r7=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@dev, @rand_addr, <r8=>0x0}, &(0x7f0000000300)=0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg2\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r13, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
sendto$packet(r10, &(0x7f0000000900)="31696ddd20c5926100ea235ce7a83eab0614", 0x12, 0x40, &(0x7f0000000200)={0x11, 0x8100, r13, 0x1, 0x7, 0x6, @random="734c594dead2"}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', <r14=>0x0, 0x700, 0x700, 0x2, 0x8, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x68, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@ssrr={0x89, 0x1b, 0x38, [@empty, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0xbc, [@multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0xb, 0x5c, [@broadcast, @remote]}, @end]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@private, @remote, <r15=>0x0}, &(0x7f0000000500)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000540)={'tunl0\x00', <r16=>0x0, 0x7, 0x10, 0x2, 0xfffffffc, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x66, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ra={0x94, 0x4}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000640)={@private1, <r18=>0x0}, &(0x7f0000000680)=0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=<r19=>0x0, &(0x7f0000000700)=0x4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x19c, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)

6.806912572s ago: executing program 1 (id=748):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x400003, 0x4, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
dup(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
lseek(r0, 0xe, 0x3)

5.933894486s ago: executing program 2 (id=750):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) (async)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x44, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'nr0\x00'}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x44, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'nr0\x00'}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
unshare(0x64000600)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x4, 0x100000, 0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x4, 0x100000, 0x4, 0xffffffffffffffff, 0x1})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x7, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x1, [0x5, 0x4, 0x10, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xfffd, 0x8, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0)

5.768274844s ago: executing program 1 (id=751):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
shmdt(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0x299, {<r2=>0x0}, {0xee01}, 0x6, 0x4e})
ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000380), 0x1001)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
shmat(0x0, &(0x7f0000682000/0x3000)=nil, 0x1000)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0)
ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000001000)={0xf, "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"})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000001000000000e184e8bcd5e9e738f6f9a8e6aa46cc00e60000000043786478"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5.737437667s ago: executing program 6 (id=752):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000480))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_emit_ethernet(0x86, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$admmidi(&(0x7f0000000080), 0x4, 0x20000)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0xc951349034062a20)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x81c0, 0xf)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file3\x00', 0x2000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x800}, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000300)={@rand_addr=0x64010102, @loopback, @local}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
getgid()
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
setresuid(r8, r8, 0x0)

5.317806889s ago: executing program 5 (id=754):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="da7053", 0x3}], 0x1}}], 0x1, 0x4400c800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2], 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r6, 0x11b, 0x8, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r9 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[], 0xa)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

4.382897003s ago: executing program 6 (id=755):
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x8, 0x0, @fd=r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {0x0, r4}})
io_uring_enter(r1, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0)

4.003834592s ago: executing program 5 (id=756):
r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e1f, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000000c0)=""/111)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000004b6f45d6e2f9261c3baf000000000000488852b00a26d94f4fb1d6137d68e9360000"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000340)=""/246, 0xf6}], 0x3, &(0x7f0000000480)=""/23, 0x17}, 0xfffffbff}], 0x1, 0x20102, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14000000000092f94413582b00", '\x00', "4e67cb72f328ac2f"}, 0x28)

4.003071134s ago: executing program 6 (id=757):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)

3.749911392s ago: executing program 7 (id=758):
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x65)
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x200)
write$cgroup_int(r0, &(0x7f0000000040)=0x88, 0x12)

3.379379722s ago: executing program 1 (id=759):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x4, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setuid(0xee01)
write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, &(0x7f00000004c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x35dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a54e5a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0xddcd0000, 0x0, 0x4, 0x9b, 0x9})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)

3.23643974s ago: executing program 2 (id=760):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="891001000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="891001000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r2}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1})
syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x20000)
io_uring_enter(r3, 0x234f, 0x2d59, 0x2, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async)
fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r7, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000003c0))

3.236046642s ago: executing program 7 (id=761):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
shmdt(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0x299, {<r2=>0x0}, {0xee01}, 0x6, 0x4e})
ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000380), 0x1001)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.821301325s ago: executing program 5 (id=762):
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0x10001, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x4, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xffffffff, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x9, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff225, 0xfffffffa, 0x80000004, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0xff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd5, 0x9, 0x0, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x7ff, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x1, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x10000, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x9, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b0fff, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0xea, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x4, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x1, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0xa, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x8, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x9, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0x8, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0x240000, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xffe, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000020, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x200, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0x7, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x894, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x4, 0x6, 0x5, 0x3d91, 0xffffffff, 0x2dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x9, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]})
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa913f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc50e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085955ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc23d31b930692f2a2c5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55ade10bdb4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e654cca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b9614040995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b9f20800000f3226660fc7330f07f30fc7b7000000000f01cfc4e27925b719d77a0a98b8080000000f23c80f21f8350c0070000f23f8660f2f8664f44e4f0f004d01", 0x42}], 0x1, 0x1e, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fccbdf2509000000050007001f0000000800010001000000", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x24040000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.722370148s ago: executing program 7 (id=763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x5b8, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0xa000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB    \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0xff, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r3, r4, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x5b8)
read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000)
capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800})
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000))
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="480100004300040028bd7000ffdbdf2502af8bef7a03bfc6000000e8fb7b24885f27a234750b1508000300080000000800020001040000070001005e2c000008000200e803008fdcef8399ca50cb5c"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8)
setreuid(r8, r9)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080))
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r10, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b8317ad07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7d9ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162f3abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c900"}, 0x11000})
r11 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r11, 0xab00, 0xffffffffffffffff)

2.686915357s ago: executing program 2 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
r2 = socket(0x2c, 0x3, 0x0)
epoll_create1(0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0xd, 0xa7d7, 0x8, @loopback, @loopback, 0x700, 0x7, 0x8, 0xffff4913}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001000)={'gre0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000010c0)={'ip_vti0\x00', &(0x7f0000001040)={'sit0\x00', 0x0, 0x8000, 0x700, 0x8, 0x8000, {{0x11, 0x4, 0x2, 0x12, 0x44, 0x67, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0x14, 0xd9, 0x1, 0x4, [{@multicast2, 0xd}, {@local, 0x9}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0x0, [{@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9ca0}]}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001100)={0x0, @rand_addr, @multicast1}, &(0x7f0000001140)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x29, 0xdf, 0x9, 0x8, 0x68, @private1, @local, 0x8, 0x8, 0x7fffffff, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000012c0)={'ip6_vti0\x00', &(0x7f0000001240)={'ip6_vti0\x00', 0x0, 0x2f, 0x4d, 0x1, 0x2, 0x40, @loopback, @private1, 0x20, 0x1, 0x8, 0x7ff}})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0xe6ef0000, 0x3, 0x2, 0x0, 0x0, [{0x5, 0x3, 0x9, '\x00', 0x9}, {0x3, 0x5, 0xd1, '\x00', 0x3}, {0x0, 0x5, 0x0, '\x00', 0x69}, {0x0, 0x4, 0x19, '\x00', 0x2}, {0x81, 0x6, 0x2, '\x00', 0x5}, {0x1, 0x27, 0x3, '\x00', 0x7}, {0xc, 0x9, 0x5, '\x00', 0x4}, {0x5, 0x1, 0x6, '\x00', 0x7}, {0xa, 0x9, 0x8, '\x00', 0x6}, {0x0, 0x4, 0xd, '\x00', 0x5}, {0xff, 0xb6, 0x3, '\x00', 0x80}, {0x7, 0x8, 0x81, '\x00', 0x3}, {0x8, 0xff, 0x4, '\x00', 0x2}, {0x9, 0xfe, 0x60, '\x00', 0xbe}, {0x5, 0x3, 0x3, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0x2}, {0x8, 0x0, 0xec, '\x00', 0x4}, {0x8, 0x8}, {0x8, 0x8, 0x5, '\x00', 0x1}, {0x3, 0xfd, 0x6, '\x00', 0x4}, {0x7, 0x3, 0xb, '\x00', 0x6}, {0x2, 0x0, 0xf1, '\x00', 0xcf}, {0x2, 0x19, 0x5, '\x00', 0x7}, {0x2, 0x0, 0x9, '\x00', 0x7}]}})

2.22149454s ago: executing program 1 (id=765):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000009, 0x11, r0, 0x180000000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x61c540, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0)
ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bind$xdp(r4, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3)
getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x400000000000004)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f046})
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000000140)=0xf95e5c6f, 0xfffffe87)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

2.173086239s ago: executing program 2 (id=766):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)

2.020514445s ago: executing program 2 (id=767):
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x8, 0x0, @fd=r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {0x0, r4}})
io_uring_enter(r1, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0)

1.848226226s ago: executing program 5 (id=768):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4)

1.847004995s ago: executing program 7 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
shmdt(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0x299, {<r2=>0x0}, {0xee01}, 0x6, 0x4e})
ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000380), 0x1001)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
shmat(0x0, &(0x7f0000682000/0x3000)=nil, 0x1000)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0)
ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000001000)={0xf, "6148719754ac21aa4b0692b6fe5134e227a50bf0f82ee1c938965936453597958a86cb8e718ee8b4f0cfba925344f59bf94b4612f511b9735dc3f4f422acb7ba99867fec98aedea3adeefeec394a035a77894fdaff5b1e7f7c4c5cd9707066674f59a084d03c7e9652334e1ba89c2ba480c54e23d366bb3bc701f38751a31b2d8f825afa770f695a119f3e046b401ee2276f2263a49a3a1200fd47bfd33aa7baffba2f39f1271efa23abe7528852f4417ac2360b71ac366c3ebaa391cb53295d97281119bb4e6de6c89e29b77379112af9850e372278c1437e0be7be75ca4a6be371b0f5d268765ee08e4bb0fb84bcba6033c1c52053728073d7f7a2c5463ec27362bd90ff3a55e109ba06d7955793ea8e81556e172071824e7238be4a39fefd82f8448580517901ddebf33ada06ea77514ae260f2ef863b16ad9e79e6c4e73579582d5590f79263be8f9c2df49bf51f21ad97e8ac15a4fa2b14c0010eaab37e59645bb2f133bb1760e4a912b193108cb4b84622a22dd0bdb010292b356b0416c6b2ecd36009444e3249ccbc50953dacccd42942917fd01444dad554b66368692c46928d5a4a91f29adfbeb53a617bc3a49e8661f81506d5a085746ae42286cecfde11a64c2587ee6e6d0ee7681533284078acfad59038541fbf84d3fe3ff3caa5629348a38aa739302758cbe90b96366feb3598dec227372bd9365669a002d8"})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000001000000000e184e8bcd5e9e738f6f9a8e6aa46cc00e60000000043786478"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})

1.836292172s ago: executing program 1 (id=770):
socket(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r5, &(0x7f000000a040)=[{{&(0x7f0000001200)={0xa, 0x4e20, 0x3, @mcast1, 0x4}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000001240)="6e46b47583112bfab1e288c6e86829ac2f4151bde77ea4f3c34632216b4fee7a85e0d4320418bd68a8353c7bafd1530def01ead2daab16e723be43915c16688c8097021b8ab303d5472a947ba1d94cd63af7166bcfe552a43d86c5a19c0cd0440d622be6675afc04a59c5b0cc385faa26cb20ed7c9c87f9f49396d949f758f477a08f424686aa9a26ae93b5ee6468aa44d029938e3910c18da0ce7dfb49ab48530405e4275cbc5c7880ed973b6e11c8482d75ddc2cd48702330eba423a36999b", 0xc0}, {&(0x7f0000001300)="31d801e86b29d93ca7cc7452c53c062dc59a650b0c6b887ab17f2ee6748585a9252f14c349758cf3a809370d8cfd8e73e47df782129eb7645b1dc65d354374ac778289caa9e6efaf60d28baf942af6be559e4a9f89895d8512363502e19388add4db35ec6c983c70449c99ff334e8c11e6fa448b90", 0x75}, {&(0x7f0000001380)="393c6c9a99d3afeb4f90e42c3b1d9b01beb6c41d2060d7252c452687e31123251346c2fc1d5a73112e379bea322a6e9335261ed51a9671eba236886587b112076d4cd67eddc0549cd50f7dcadc9b66b862fd0f11d80b98611a57a7edf2386c3c9c549bbb7df727ed5cdca0e3ab2e1562d887e0f6f4d0788ab3a2438b7569556f75bab6a41d8f7ec6ee", 0x89}, {&(0x7f0000001440)="08864f3aebf50d0074a088356883696b22d9eef91918dce4adf01c25dbdfe647806e72e4b0392e00f779f9563b4e49ca663b526f444fb25e4e62d1f69ee4c8de73b00af5708ce526af7b98249add91c9ba622f97ad45634c4892306e24d4bd711e8a5be1229b1be73cd0f3a5143acfe87b2fe59b6e6f", 0x76}, {&(0x7f00000014c0)="3c175a370bb8ed87a2efcad96c93c21e9f42374da8f3bfdd7eb8e92442d7848c66154da93d712139c699e90e7b706f2b5eab31f9addc8ead795d90ff8514985bfb6ba4f0baf4f00ebcee8db73fa0e36edeab2677802565ed9bdef71578659b92700db3ebce5a7d351ccce7de76a171f6750e93bc412e452031f4b6fee458250356fb5ff20d9f483011c56232fab45910cf9d558fb617a5bf41f4e3d96084547b7d95ac9ed32d0cd50c154ce060a28132b08a54086cebfe218d5652984aedb33037d73bcc061411527515c526266c37e125c0ad22726bca11826b4c30a72681f804f1cafc", 0xe4}, {&(0x7f00000015c0)="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", 0x267}], 0x6, &(0x7f00000027c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hopopts={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}}], 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.791121624s ago: executing program 5 (id=771):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
clock_gettime(0x7, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0x1, 0x0, 0x4, 0x2, 0x0, {r1, r2/1000+10000}, {0x2, 0x1, 0x6, 0xf, 0xf, 0x5, "3296965a"}, 0x6, 0x1, {}, 0xfff, 0x0, r3})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r5 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000200)="daffc3fa80002cd21721a4af36a4a2ab80000000000000025a91f64b007f046a680f6e787f76d5e86cf70af12c3ffa32", 0x30}], 0x1}, 0x4b00)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"a664bf15fdac3cc459a474b732be9f310bdae86ddda63dbe768429c4000142ca", 0xffffffffffffffff, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x40010, r6, 0x3cc07000)

1.651071176s ago: executing program 6 (id=772):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x700040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})

1.141623194s ago: executing program 1 (id=773):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x3, @multicast1}}, 0x1e)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008c0400000000000005"])
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0)
close(0x3)
recvmsg(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
ioctl$FITHAW(r3, 0xc0045878)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x9, {0x9, 0xa, "a7ea3163fd3bc5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f})
r8 = fanotify_init(0x2, 0x2)
fanotify_mark(r8, 0x1, 0x1008, 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00')

1.141186918s ago: executing program 5 (id=774):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xe0ff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xe0ff}}], 0x48}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r5, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

1.083441351s ago: executing program 2 (id=775):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x9)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040040)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bond0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
r7 = syz_io_uring_setup(0x1b5, &(0x7f00000000c0)={0x0, 0x99d, 0x400, 0x1, 0x84}, &(0x7f0000000240)=<r8=>0x0, &(0x7f00000002c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r7, 0x787, 0x0, 0x2, 0x0, 0x0)
r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioctl$TCSETS(r10, 0x5402, &(0x7f0000000540)={0x1, 0xfffffffe, 0x4, 0x10001, 0x8, "008ef1faa278887cb0baba08431799317e6324"})

650.589015ms ago: executing program 7 (id=776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x40000)
syz_emit_ethernet(0x1fc, &(0x7f0000000100)=ANY=[@ANYBLOB="ff"], 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x10004804)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x4e23, 0x2, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000480)={0x1, 0x1, 0x0, &(0x7f0000000340)=[{0x0}], 0x0}, 0x20)
close(0x3)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
rseq(0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x4f, &(0x7f0000000380)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0x0, 0xff, "7593", "c49283", 0x1, "2555f503f6afa0020b55a5aa69b9b54d4710edb4b7eeccb18935a0f0ba7e028ace4c22e8f2f28e904fdd2f53aae84e161dea0c4b5a88a677"}}}}}, &(0x7f0000000180)={0x0, 0x2, [0xd73, 0xe54, 0x575, 0xade]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f)
socket$inet_smc(0x2b, 0x1, 0x0)
read$dsp(r7, &(0x7f00000001c0)=""/95, 0x2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)

0s ago: executing program 7 (id=777):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00'})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x40000000015, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x4, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x99, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]})
r6 = gettid()
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0)
tkill(r6, 0xb)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10, @empty, 0x2}, {0xa, 0x4e23, 0x7ffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20003}, 0xffffffffffffffff, 0x6}}, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)

kernel console output (not intermixed with test programs):

ix failed with error -71
[  180.528654][   T30] audit: type=1400 audit(1753836117.420:568): avc:  denied  { connect } for  pid=7903 comm="syz.7.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  180.615849][ T7914] xt_l2tp: missing protocol rule (udp|l2tpip)
[  180.624792][ T5911] usb 3-1: USB disconnect, device number 17
[  180.731349][ T7917] netlink: 'syz.2.346': attribute type 4 has an invalid length.
[  180.822193][ T7920] netlink: 'syz.2.346': attribute type 4 has an invalid length.
[  180.940946][   T30] audit: type=1400 audit(1753836117.860:569): avc:  denied  { mount } for  pid=7913 comm="syz.2.346" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  181.132233][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[  181.344212][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.348'.
[  181.458236][ T7935] loop6: detected capacity change from 0 to 524287999
[  181.606793][   T30] audit: type=1400 audit(1753836118.530:570): avc:  denied  { unmount } for  pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  182.154214][ T7944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  182.161042][ T7944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  182.249526][ T7944] vhci_hcd vhci_hcd.0: Device attached
[  182.493248][   T30] audit: type=1400 audit(1753836119.370:571): avc:  denied  { ioctl } for  pid=7950 comm="syz.5.351" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  182.853285][ T7950] cgroup: fork rejected by pids controller in /syz5
[  182.939392][ T5987] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  183.483146][ T7945] vhci_hcd: connection reset by peer
[  183.504817][ T4246] vhci_hcd: stop threads
[  183.510044][ T4246] vhci_hcd: release socket
[  183.538556][ T4246] vhci_hcd: disconnect device
[  183.703215][ T5893] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  183.876514][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  183.927531][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.948383][ T5893] usb 7-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  183.980464][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.053618][ T5893] usb 7-1: config 0 descriptor??
[  184.191180][ T6147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.545608][ T5893] wacom 0003:056A:0217.000E: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  184.951510][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.045642][ T6147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.223420][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.359653][   T43] usb 7-1: USB disconnect, device number 10
[  185.484204][ T6147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.510889][ T8080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8080 comm=syz.2.356
[  185.837168][ T6147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.219297][ T8090] input: syz1 as /devices/virtual/input/input31
[  186.257900][ T6147] bridge_slave_1: left allmulticast mode
[  186.281398][ T6147] bridge_slave_1: left promiscuous mode
[  186.312012][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.323710][   T30] audit: type=1400 audit(1753836123.250:572): avc:  denied  { read } for  pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2949 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  186.440855][ T6147] bridge_slave_0: left allmulticast mode
[  186.445415][   T30] audit: type=1400 audit(1753836123.250:573): avc:  denied  { open } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2949 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  186.463149][ T6147] bridge_slave_0: left promiscuous mode
[  186.527253][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.536818][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.546939][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.556487][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.565076][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.576685][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.613219][   T30] audit: type=1400 audit(1753836123.530:574): avc:  denied  { mounton } for  pid=8098 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  187.989049][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.024970][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.043321][   T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  188.051673][ T6147] bond0 (unregistering): Released all slaves
[  188.164260][ T8090] netlink: 'syz.6.358': attribute type 3 has an invalid length.
[  188.193255][   T43] usb 3-1: Using ep0 maxpacket: 8
[  188.223523][ T5987] vhci_hcd: vhci_device speed not set
[  188.297645][   T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  188.326563][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.365677][   T43] usb 3-1: Product: syz
[  188.369894][   T43] usb 3-1: Manufacturer: syz
[  188.411148][   T43] usb 3-1: SerialNumber: syz
[  188.438481][   T43] usb 3-1: config 0 descriptor??
[  188.458963][ T8130] comedi comedi2: pcmmio: I/O port conflict (0x4f27,32)
[  188.636508][ T5835] Bluetooth: hci2: command tx timeout
[  188.651151][ T8120] Illegal XDP return value 4225381458 on prog  (id 62) dev N/A, expect packet loss!
[  189.034395][ T8148] Bluetooth: MGMT ver 1.23
[  189.163254][   T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  189.208603][ T8144] loop6: detected capacity change from 0 to 524287999
[  189.247782][   T30] audit: type=1400 audit(1753836126.170:575): avc:  denied  { write } for  pid=8152 comm="syz.7.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  189.274652][   T30] audit: type=1400 audit(1753836126.170:576): avc:  denied  { create } for  pid=8152 comm="syz.7.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  189.378620][   T30] audit: type=1400 audit(1753836126.170:577): avc:  denied  { setopt } for  pid=8152 comm="syz.7.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  189.412291][ T8098] chnl_net:caif_netlink_parms(): no params data found
[  189.533519][   T30] audit: type=1400 audit(1753836126.170:578): avc:  denied  { connect } for  pid=8152 comm="syz.7.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  189.710165][ T8167] FAULT_INJECTION: forcing a failure.
[  189.710165][ T8167] name failslab, interval 1, probability 0, space 0, times 0
[  189.723180][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.7.368 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) 
[  189.723204][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  189.723214][ T8167] Call Trace:
[  189.723220][ T8167]  <TASK>
[  189.723227][ T8167]  dump_stack_lvl+0x16c/0x1f0
[  189.723251][ T8167]  should_fail_ex+0x512/0x640
[  189.723270][ T8167]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  189.723298][ T8167]  should_failslab+0xc2/0x120
[  189.723321][ T8167]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  189.723348][ T8167]  ? __alloc_skb+0x2b2/0x380
[  189.723370][ T8167]  __alloc_skb+0x2b2/0x380
[  189.723387][ T8167]  ? __pfx___alloc_skb+0x10/0x10
[  189.723407][ T8167]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  189.723436][ T8167]  netlink_alloc_large_skb+0x69/0x130
[  189.723461][ T8167]  netlink_sendmsg+0x6a1/0xdd0
[  189.723490][ T8167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.723524][ T8167]  ____sys_sendmsg+0xa95/0xc70
[  189.723551][ T8167]  ? copy_msghdr_from_user+0x10a/0x160
[  189.723572][ T8167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.723602][ T8167]  ? kvm_sched_clock_read+0x11/0x20
[  189.723624][ T8167]  ___sys_sendmsg+0x134/0x1d0
[  189.723647][ T8167]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.723666][ T8167]  ? __lock_acquire+0x622/0x1c90
[  189.723705][ T8167]  ? try_to_wake_up+0xa20/0x1680
[  189.723733][ T8167]  __sys_sendmsg+0x16d/0x220
[  189.723755][ T8167]  ? __pfx___sys_sendmsg+0x10/0x10
[  189.723776][ T8167]  ? sched_clock_cpu+0x6c/0x530
[  189.723799][ T8167]  ? __pfx___rdmsr_safe_on_cpu+0x10/0x10
[  189.723825][ T8167]  do_syscall_64+0xcd/0x4c0
[  189.723848][ T8167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.723866][ T8167] RIP: 0033:0x7fae7878e9a9
[  189.723881][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.723897][ T8167] RSP: 002b:00007fae79636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.723915][ T8167] RAX: ffffffffffffffda RBX: 00007fae789b6080 RCX: 00007fae7878e9a9
[  189.723926][ T8167] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006
[  189.723936][ T8167] RBP: 00007fae79636090 R08: 0000000000000000 R09: 0000000000000000
[  189.723946][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.723954][ T8167] R13: 0000000000000000 R14: 00007fae789b6080 R15: 00007ffdd3e7c098
[  189.723977][ T8167]  </TASK>
[  190.245458][ T5849] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  190.273436][   T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  190.357388][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.376988][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.397904][ T8098] bridge_slave_0: entered allmulticast mode
[  190.406373][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  190.433183][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.445789][ T8098] bridge_slave_0: entered promiscuous mode
[  190.460289][ T5849] usb 7-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  190.464004][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.483124][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.485423][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.499679][ T8098] bridge_slave_1: entered allmulticast mode
[  190.508843][ T8098] bridge_slave_1: entered promiscuous mode
[  190.528689][ T5849] usb 7-1: config 0 descriptor??
[  190.537866][ T6147] hsr_slave_0: left promiscuous mode
[  190.550751][ T6147] hsr_slave_1: left promiscuous mode
[  190.558143][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.565974][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.567879][ T8177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8177 comm=syz.7.371
[  190.588001][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.595957][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.611763][ T6147] veth1_macvtap: left promiscuous mode
[  190.617423][ T6147] veth0_macvtap: left promiscuous mode
[  190.623198][ T6147] veth1_vlan: left promiscuous mode
[  190.629659][ T6147] veth0_vlan: left promiscuous mode
[  190.752607][ T5841] Bluetooth: hci2: command tx timeout
[  191.052169][ T5849] wacom 0003:056A:0217.000F: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  191.320434][ T5987] usb 3-1: USB disconnect, device number 18
[  191.340965][   T30] audit: type=1400 audit(1753836128.260:579): avc:  denied  { bind } for  pid=8182 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  191.528472][ T6147] team0 (unregistering): Port device team_slave_1 removed
[  191.565191][ T6147] team0 (unregistering): Port device team_slave_0 removed
[  191.703259][ T5987] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  191.890378][ T5987] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  191.915593][ T5987] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  191.930394][ T5987] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  191.939575][ T5987] usb 3-1: config 1 has no interface number 0
[  191.946285][ T5987] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  191.957880][ T5987] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  191.971636][ T5987] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  191.981001][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.076632][ T5987] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  192.273656][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[  192.348208][ T5987] snd_usb_pod 3-1:1.1: set_interface failed
[  192.354786][ T5987] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  192.362092][ T5987] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71
[  192.373653][ T5987] usb 3-1: USB disconnect, device number 19
[  192.446512][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.480200][ T5849] usb 7-1: USB disconnect, device number 11
[  192.510929][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.798139][ T5841] Bluetooth: hci2: command tx timeout
[  192.802559][ T8098] team0: Port device team_slave_0 added
[  192.878927][ T8098] team0: Port device team_slave_1 added
[  192.907893][ T8199] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.374'.
[  192.924276][ T8198] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.374'.
[  193.131965][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.143044][ T5987] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  193.160698][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.225246][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.275477][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.312440][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.357508][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.756101][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  193.764289][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  193.829797][ T5987] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  193.833531][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  193.849882][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0
[  193.849956][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  193.868140][ T5987] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.888438][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  193.916840][ T5987] usb 2-1: Product: syz
[  193.926287][ T5987] usb 2-1: Manufacturer: syz
[  193.932575][ T5987] usb 2-1: SerialNumber: syz
[  193.952031][ T5987] usb 2-1: config 0 descriptor??
[  193.954906][ T5941] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  193.965811][ T8098] hsr_slave_0: entered promiscuous mode
[  193.972188][ T8098] hsr_slave_1: entered promiscuous mode
[  193.982168][ T5987] usb 2-1: selecting invalid altsetting 0
[  194.080659][   T30] audit: type=1400 audit(1753836130.990:580): avc:  denied  { read } for  pid=8223 comm="syz.7.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  194.124650][ T8224] netlink: 24 bytes leftover after parsing attributes in process `syz.7.380'.
[  194.144535][ T5941] usb 7-1: config 0 has an invalid interface number: 160 but max is 0
[  194.155924][ T5941] usb 7-1: config 0 has no interface number 0
[  194.167272][ T5941] usb 7-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  194.209800][ T5941] usb 7-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.248593][ T5941] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e
[  194.272087][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.295536][ T5880] usb 2-1: USB disconnect, device number 21
[  194.321855][ T5941] usb 7-1: Product: syz
[  194.339856][ T5941] usb 7-1: Manufacturer: syz
[  194.360841][ T5941] usb 7-1: SerialNumber: syz
[  194.380144][ T5941] usb 7-1: config 0 descriptor??
[  194.396531][ T5941] usb 7-1: Found UVC 0.00 device syz (05ac:8501)
[  194.482929][ T5941] usb 7-1: No valid video chain found.
[  194.893046][ T5841] Bluetooth: hci2: command tx timeout
[  195.494147][   T30] audit: type=1400 audit(1753836132.420:581): avc:  denied  { create } for  pid=8194 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  195.556290][   T30] audit: type=1400 audit(1753836132.480:582): avc:  denied  { execute } for  pid=8253 comm="syz.2.386" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  195.618372][   T30] audit: type=1400 audit(1753836132.500:583): avc:  denied  { setopt } for  pid=8253 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  195.758676][   T30] audit: type=1400 audit(1753836132.510:584): avc:  denied  { write } for  pid=8253 comm="syz.2.386" lport=60824 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  195.782253][   T30] audit: type=1400 audit(1753836132.510:585): avc:  denied  { setopt } for  pid=8253 comm="syz.2.386" lport=60824 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  195.867190][   T30] audit: type=1400 audit(1753836132.780:586): avc:  denied  { listen } for  pid=8258 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  195.977963][   T30] audit: type=1400 audit(1753836132.780:587): avc:  denied  { connect } for  pid=8258 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  195.997688][   T30] audit: type=1400 audit(1753836132.790:588): avc:  denied  { accept } for  pid=8258 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  196.020502][   T30] audit: type=1400 audit(1753836132.790:589): avc:  denied  { read } for  pid=8258 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  196.265519][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[  196.325521][ T8098] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  196.345016][ T8098] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  196.426009][ T8098] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  196.641863][ T8098] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.284788][ T5880] usb 7-1: USB disconnect, device number 12
[  197.300131][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'.
[  197.387172][ T5849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5849 comm=kworker/0:3
[  197.428559][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.531212][ T8098] 8021q: adding VLAN 0 to HW filter on device team0
[  197.564826][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.571964][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.742669][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.749856][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.988884][ T8098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  198.013230][ T5941] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  198.021514][ T8098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.215288][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.223983][ T5941] usb 2-1: not running at top speed; connect to a high speed hub
[  198.232886][ T5941] usb 2-1: config 3 has an invalid interface number: 187 but max is 0
[  198.262327][ T5941] usb 2-1: config 3 has no interface number 0
[  198.297907][ T5941] usb 2-1: config 3 interface 187 has no altsetting 0
[  198.438621][ T5941] usb 2-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88
[  198.474060][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.518995][ T5941] usb 2-1: Product: syz
[  198.654030][ T5941] usb 2-1: Manufacturer: syz
[  198.658671][ T5941] usb 2-1: SerialNumber: syz
[  198.771470][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.963358][ T5941] HFC-S_USB 2-1:3.187: probe with driver HFC-S_USB failed with error -5
[  198.998722][ T5941] usb 2-1: USB disconnect, device number 22
[  200.337036][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  200.337051][   T30] audit: type=1400 audit(1753836137.260:595): avc:  denied  { mount } for  pid=8346 comm="syz.7.398" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  200.381456][ T8098] veth0_vlan: entered promiscuous mode
[  200.388949][ T8347] input: syz0 as /devices/virtual/input/input36
[  200.456120][ T8098] veth1_vlan: entered promiscuous mode
[  200.463079][   T30] audit: type=1400 audit(1753836137.360:596): avc:  denied  { ioctl } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2962 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  200.487943][    C0] vkms_vblank_simulate: vblank timer overrun
[  200.589844][ T8098] veth0_macvtap: entered promiscuous mode
[  200.634334][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'.
[  200.651185][ T8098] veth1_macvtap: entered promiscuous mode
[  200.678239][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.699326][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.856875][ T5893] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  200.904562][ T8098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.986652][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.404'.
[  201.393914][ T8098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.457458][ T8098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.489708][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.516949][ T8365] delete_channel: no stack
[  201.727233][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.881849][ T5893] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  201.892699][ T8098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.915925][ T5893] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[  202.006399][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.014526][ T5893] usb 3-1: Product: syz
[  202.018717][ T5893] usb 3-1: Manufacturer: syz
[  202.025027][ T5893] usb 3-1: SerialNumber: syz
[  202.030832][ T5893] usb 3-1: config 0 descriptor??
[  202.065302][ T8383] netlink: 'syz.7.406': attribute type 10 has an invalid length.
[  202.084816][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.092075][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.750144][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.773022][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.799716][ T5911] usb 3-1: USB disconnect, device number 20
[  202.808159][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.829815][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.869815][   T30] audit: type=1400 audit(1753836139.790:597): avc:  denied  { mounton } for  pid=8098 comm="syz-executor" path="/root/syzkaller.WBOzlG/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  202.894087][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.053208][   T30] audit: type=1400 audit(1753836139.830:598): avc:  denied  { mount } for  pid=8098 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  203.122005][   T30] audit: type=1400 audit(1753836139.840:599): avc:  denied  { mounton } for  pid=8098 comm="syz-executor" path="/root/syzkaller.WBOzlG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  203.225805][   T30] audit: type=1400 audit(1753836139.840:600): avc:  denied  { mounton } for  pid=8098 comm="syz-executor" path="/root/syzkaller.WBOzlG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  203.773582][   T30] audit: type=1400 audit(1753836139.970:601): avc:  denied  { mounton } for  pid=8098 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  203.803740][   T30] audit: type=1400 audit(1753836139.970:602): avc:  denied  { mount } for  pid=8098 comm="syz-executor" name="/" dev="gadgetfs" ino=5932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  203.949912][   T30] audit: type=1400 audit(1753836139.970:603): avc:  denied  { mount } for  pid=8098 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  204.053022][ T5893] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  204.189982][   T30] audit: type=1400 audit(1753836139.970:604): avc:  denied  { mounton } for  pid=8098 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  204.313329][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  204.358776][ T5893] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  204.370338][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.582576][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400
[  204.605676][ T5893] pvrusb2: **********
[  204.609705][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  204.636889][ T5893] pvrusb2: Important functionality might not be entirely working.
[  204.648166][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  204.663853][ T5893] pvrusb2: **********
[  204.714412][ T8422] netlink: 32 bytes leftover after parsing attributes in process `syz.5.355'.
[  204.732200][ T2334] pvrusb2: Invalid write control endpoint
[  204.747562][ T5893] usb 6-1: USB disconnect, device number 12
[  204.853293][ T2334] pvrusb2: Invalid write control endpoint
[  204.882364][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  204.896885][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.414'.
[  204.900915][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  204.926802][ T8438] netlink: 'syz.7.414': attribute type 7 has an invalid length.
[  204.935115][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  204.948198][ T2334] pvrusb2: Device being rendered inoperable
[  204.951583][ T8438] netlink: 'syz.7.414': attribute type 8 has an invalid length.
[  204.990028][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.414'.
[  205.028567][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  205.049151][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  205.071502][ T2334] pvrusb2: Attached sub-driver cx25840
[  205.079005][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  205.089280][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  205.099561][ T8438] bridge0: entered promiscuous mode
[  205.108797][ T8438] bridge0: left promiscuous mode
[  205.256512][ T8452] nbd1: detected capacity change from 0 to 10
[  205.277200][ T8452] block nbd1: Unsupported socket: shutdown callout must be supported.
[  205.311360][ T8452] block nbd1: shutting down sockets
[  205.323304][ T5880] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  205.538667][ T8466] netlink: 'syz.1.419': attribute type 10 has an invalid length.
[  205.547411][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.553527][ T5880] usb 8-1: Using ep0 maxpacket: 16
[  205.554892][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.564316][ T5880] usb 8-1: too many configurations: 97, using maximum allowed: 8
[  205.577754][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.584978][ T8466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.592359][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.599458][ T8466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.614333][ T8468] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  205.628354][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  205.628371][   T30] audit: type=1400 audit(1753836142.530:615): avc:  denied  { nlmsg_write } for  pid=8463 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  205.655066][    C0] vkms_vblank_simulate: vblank timer overrun
[  205.686482][ T5880] usb 8-1: string descriptor 0 read error: -71
[  205.692902][ T5880] usb 8-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  205.702123][ T5880] usb 8-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  205.726069][ T8466] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  205.841826][ T5880] usb 8-1: rejected 8 configurations due to insufficient available bus power
[  205.875732][ T5880] usb 8-1: no configuration chosen from 8 choices
[  205.898158][ T5880] usb 8-1: USB disconnect, device number 17
[  206.193215][ T5911] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  206.440616][ T5911] usb 7-1: Using ep0 maxpacket: 8
[  206.492339][ T5911] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.504440][ T5911] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  206.526571][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  206.653880][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  206.669487][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  206.680665][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  206.691615][ T5911] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  206.703041][ T5987] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  206.781734][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'.
[  206.873126][ T5987] usb 6-1: Using ep0 maxpacket: 8
[  207.143701][ T5911] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  207.152768][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.170254][ T5987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.183140][ T5911] usb 7-1: Product: syz
[  207.187365][ T5911] usb 7-1: Manufacturer: syz
[  207.191985][ T5911] usb 7-1: SerialNumber: syz
[  207.200654][ T5911] usb 7-1: config 0 descriptor??
[  207.208062][ T8475] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  207.221047][ T5911] ati_remote 7-1:0.0: Initializing ati_remote hardware failed.
[  207.223255][ T5987] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  207.228889][ T5911] ati_remote 7-1:0.0: probe with driver ati_remote failed with error -5
[  207.463293][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  207.482444][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  207.524847][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  207.555971][   T30] audit: type=1400 audit(1753836144.470:616): avc:  denied  { read } for  pid=8504 comm="syz.2.426" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  207.672573][ T5987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  207.691713][ T5987] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.706719][ T8509] block device autoloading is deprecated and will be removed.
[  208.169772][   T30] audit: type=1400 audit(1753836144.470:617): avc:  denied  { open } for  pid=8504 comm="syz.2.426" path="/99/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  208.253499][ T5987] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  208.277442][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.432190][ T5987] usb 6-1: Product: syz
[  208.445653][ T5987] usb 6-1: Manufacturer: syz
[  208.472710][ T5987] usb 6-1: SerialNumber: syz
[  208.574334][ T5987] usb 6-1: config 0 descriptor??
[  208.585028][ T8493] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  208.593685][ T5987] ati_remote 6-1:0.0: Initializing ati_remote hardware failed.
[  208.603973][ T5987] ati_remote 6-1:0.0: probe with driver ati_remote failed with error -5
[  209.875812][ T5987] usb 6-1: USB disconnect, device number 13
[  209.903638][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.912387][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.299968][   T24] usb 7-1: USB disconnect, device number 13
[  210.583422][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.433'.
[  211.002741][ T8548] loop6: detected capacity change from 0 to 524287999
[  211.193768][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.7.433'.
[  212.122899][   T30] audit: type=1400 audit(1753836149.030:618): avc:  denied  { override_creds } for  pid=8563 comm="syz.5.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  212.571030][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.439'.
[  213.818371][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.7.439'.
[  215.129314][ T8611] tipc: Started in network mode
[  215.134266][ T8611] tipc: Node identity 7a90a9c2cf6d, cluster identity 4711
[  215.141523][ T8611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.279345][ T8611] syzkaller0: entered promiscuous mode
[  215.403025][ T8611] syzkaller0: entered allmulticast mode
[  215.409440][ T8611] tipc: Resetting bearer <eth:syzkaller0>
[  215.570408][ T1030] tipc: Resetting bearer <eth:syzkaller0>
[  215.983151][ T8609] tipc: Resetting bearer <eth:syzkaller0>
[  216.133528][ T5987] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  216.164915][   T30] audit: type=1400 audit(1753836153.090:619): avc:  denied  { read write } for  pid=8634 comm="syz.6.449" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  216.211232][   T30] audit: type=1400 audit(1753836153.090:620): avc:  denied  { open } for  pid=8634 comm="syz.6.449" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  216.264126][ T5880] tipc: Node number set to 3053300162
[  216.393171][ T5987] usb 2-1: Using ep0 maxpacket: 16
[  216.416869][ T5987] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  216.485211][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.551842][ T8639] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  216.558161][ T8639] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  216.568907][ T8639] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  216.574874][ T8639] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  216.654169][ T8639] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  216.660147][ T8639] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  216.672090][ T8639] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  216.678109][ T8639] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  216.729882][ T5987] usb 2-1: Product: syz
[  216.743735][ T5987] usb 2-1: Manufacturer: syz
[  216.752825][ T5987] usb 2-1: SerialNumber: syz
[  216.769108][ T5987] usb 2-1: config 0 descriptor??
[  216.788093][ T5987] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  217.643117][ T5849] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  217.647344][ T5987] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  217.986599][ T5849] usb 7-1: Using ep0 maxpacket: 32
[  218.690121][ T5849] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  218.701325][ T5849] usb 7-1: config 0 has no interface number 0
[  218.710475][ T5849] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  218.720944][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.731411][ T5849] usb 7-1: Product: syz
[  218.736547][ T5849] usb 7-1: Manufacturer: syz
[  218.741198][ T5849] usb 7-1: SerialNumber: syz
[  218.798646][ T5849] usb 7-1: config 0 descriptor??
[  218.807591][ T5849] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  218.877448][ T5849] usb 7-1: selecting invalid altsetting 1
[  218.907507][   T30] audit: type=1326 audit(1753836155.830:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8655 comm="syz.5.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c2e18e9a9 code=0x0
[  218.930367][ T5849] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  219.018801][ T5849] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  219.042341][ T5849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  219.061966][ T5849] usb 7-1: media controller created
[  219.314067][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.512157][ T5849] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  219.529053][ T5849] zl10353_read_register: readreg error (reg=127, ret==-32)
[  219.574377][ T5849] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  219.598897][ T5849] usb 7-1: USB disconnect, device number 14
[  219.623104][ T8609] tipc: Disabling bearer <eth:syzkaller0>
[  219.958768][ T5849] usb 2-1: USB disconnect, device number 23
[  219.994931][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.457'.
[  220.003944][   T43] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  220.101594][   T30] audit: type=1400 audit(1753836157.020:622): avc:  denied  { write } for  pid=8670 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  220.177255][   T30] audit: type=1400 audit(1753836157.090:623): avc:  denied  { write } for  pid=8674 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  220.216125][   T43] usb 8-1: unable to get BOS descriptor or descriptor too short
[  220.243544][   T43] usb 8-1: unable to read config index 0 descriptor/start: -71
[  220.328546][   T43] usb 8-1: can't read configurations, error -71
[  221.076094][ T8695] syz_tun: entered allmulticast mode
[  221.093354][ T8695] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  221.102170][ T8695] mroute: pending queue full, dropping entries
[  221.112638][ T8694] syz_tun: left allmulticast mode
[  221.453265][ T5911] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  221.623722][ T5911] usb 7-1: Using ep0 maxpacket: 32
[  221.630115][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.641973][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.651837][ T5911] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  221.660892][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.670209][ T5911] usb 7-1: config 0 descriptor??
[  221.676560][ T5911] hub 7-1:0.0: USB hub found
[  221.753089][ T5849] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  221.833123][   T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  221.877374][ T5911] hub 7-1:0.0: 1 port detected
[  221.903211][ T5849] usb 3-1: Using ep0 maxpacket: 8
[  221.916843][ T5849] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  221.925828][ T5849] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202
[  221.935116][ T5849] usb 3-1: config 167 has no interface number 0
[  221.941397][ T5849] usb 3-1: config 167 interface 101 has no altsetting 0
[  221.950206][ T5849] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  221.959310][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.967339][ T5849] usb 3-1: Product: syz
[  221.971491][ T5849] usb 3-1: Manufacturer: syz
[  221.976123][ T5849] usb 3-1: SerialNumber: syz
[  221.983098][   T43] usb 2-1: Using ep0 maxpacket: 16
[  221.984378][ T5849] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  221.993046][   T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  222.000355][ T5849] dvb-usb: bulk message failed: -22 (3/0)
[  222.012484][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.026958][   T43] usb 2-1: Product: syz
[  222.031158][   T43] usb 2-1: Manufacturer: syz
[  222.035864][   T43] usb 2-1: SerialNumber: syz
[  222.036333][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  222.050979][ T5849] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  222.051865][   T43] usb 2-1: config 0 descriptor??
[  222.063664][ T5849] usb 3-1: media controller created
[  222.070000][   T43] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  222.092135][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.116989][ T5849] dvb-usb: bulk message failed: -22 (6/0)
[  222.124030][ T5849] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  222.142504][ T5849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39
[  222.167366][ T5849] dvb-usb: schedule remote query interval to 150 msecs.
[  222.176630][ T5849] dvb-usb: bulk message failed: -22 (3/0)
[  222.189976][   T30] audit: type=1400 audit(1753836159.110:624): avc:  denied  { write } for  pid=8703 comm="syz.2.467" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  222.221240][ T5849] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  222.240378][ T5849] usb 3-1: USB disconnect, device number 21
[  222.307585][ T5849] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  222.896228][ T5911] hub 7-1:0.0: activate --> -90
[  223.057383][   T43] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  223.498876][ T8726] loop6: detected capacity change from 0 to 524287999
[  224.543150][   T43] usb 7-1: USB disconnect, device number 15
[  224.962833][ T8745] netlink: 87 bytes leftover after parsing attributes in process `syz.6.476'.
[  225.077546][ T5911] usb 7-1-port1: config error
[  225.362467][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'.
[  225.406594][ T4246] Bluetooth: hci5: Frame reassembly failed (-84)
[  225.438818][ T4246] Bluetooth: hci5: Frame reassembly failed (-84)
[  225.455307][   T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  225.467768][ T5849] usb 2-1: USB disconnect, device number 24
[  225.610367][   T43] usb 7-1: Using ep0 maxpacket: 8
[  225.884250][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[  226.296745][   T43] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  226.305289][   T43] usb 7-1: config 179 has no interface number 0
[  226.331114][   T43] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  226.361821][   T43] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  226.454078][ T8758] delete_channel: no stack
[  226.468576][   T43] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 62, changing to 9
[  226.511436][   T43] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 26402, setting to 1024
[  226.546283][   T43] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  226.592378][   T43] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  226.606613][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.618557][ T8749] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  226.643479][ T8749] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  226.753169][ T5911] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  226.775447][   T30] audit: type=1400 audit(1753836163.690:625): avc:  denied  { setopt } for  pid=8771 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  226.795183][    C1] vkms_vblank_simulate: vblank timer overrun
[  226.863110][   T30] audit: type=1400 audit(1753836163.690:626): avc:  denied  { getopt } for  pid=8771 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  226.914809][ T5849] usb 7-1: USB disconnect, device number 16
[  226.914878][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  226.929727][    C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending?
[  226.933011][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  226.987419][ T5911] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  226.998248][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.009336][ T5911] usb 2-1: Product: syz
[  227.021462][ T5911] usb 2-1: Manufacturer: syz
[  227.026220][ T5911] usb 2-1: SerialNumber: syz
[  227.043537][ T5911] usb 2-1: config 0 descriptor??
[  227.060124][   T43] libceph: connect (1)[c::]:6789 error -101
[  227.060473][ T5911] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  227.083518][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  227.099883][   T43] libceph: connect (1)[c::]:6789 error -101
[  227.113151][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  227.152917][ T8779] ceph: No mds server is up or the cluster is laggy
[  227.433195][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  227.433222][ T5835] Bluetooth: hci5: command 0x1003 tx timeout
[  227.657915][ T8788] syz_tun: entered allmulticast mode
[  227.666633][ T8788] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  227.675247][ T8788] mroute: pending queue full, dropping entries
[  227.713915][ T8788] dvmrp1: entered allmulticast mode
[  227.725237][ T8788] syz_tun: left allmulticast mode
[  228.082980][ T5911] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  229.517955][ T8809] netlink: 'syz.5.494': attribute type 4 has an invalid length.
[  229.596087][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.495'.
[  230.037860][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.5.494'.
[  230.049253][   T30] audit: type=1400 audit(1753836166.960:627): avc:  denied  { name_connect } for  pid=8807 comm="syz.5.494" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  230.101823][ T8809] netlink: 56 bytes leftover after parsing attributes in process `syz.5.494'.
[  230.115608][ T8809] tmpfs: Unknown parameter '01777777777777777777777'
[  230.145392][ T8814] delete_channel: no stack
[  231.213068][ T5911] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  231.230036][ T8840] block device autoloading is deprecated and will be removed.
[  231.344154][ T5849] usb 2-1: USB disconnect, device number 25
[  231.455907][ T5911] usb 7-1: Using ep0 maxpacket: 16
[  231.497943][   T30] audit: type=1400 audit(1753836168.420:628): avc:  denied  { setopt } for  pid=8845 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  231.564924][ T8850] netlink: 'syz.2.503': attribute type 4 has an invalid length.
[  231.573231][ T8850] netlink: 152 bytes leftover after parsing attributes in process `syz.2.503'.
[  231.637248][ T5911] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  231.646527][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.658986][ T5911] usb 7-1: Product: syz
[  231.693406][ T8850] : renamed from bond0 (while UP)
[  231.825364][ T5911] usb 7-1: Manufacturer: syz
[  231.830023][ T5911] usb 7-1: SerialNumber: syz
[  231.839191][ T5911] usb 7-1: config 0 descriptor??
[  231.857269][ T5911] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  232.009589][   T30] audit: type=1400 audit(1753836168.930:629): avc:  denied  { ioctl } for  pid=8864 comm="syz.2.508" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  232.158534][ T5911] ssu100 7-1:0.0: probe with driver ssu100 failed with error -5
[  232.213188][ T5880] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  232.407194][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  232.539511][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.649939][ T5893] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  232.673467][ T5880] usb 8-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  232.687918][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.700568][ T5880] usb 8-1: config 0 descriptor??
[  232.813099][ T5893] usb 6-1: Using ep0 maxpacket: 16
[  232.820736][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.959876][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  233.029257][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.039400][ T5893] usb 6-1: Product: syz
[  233.053253][ T5893] usb 6-1: Manufacturer: syz
[  233.057890][ T5893] usb 6-1: SerialNumber: syz
[  233.191392][ T5880] wacom 0003:056A:0217.0010: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  233.203287][ T5893] usb 6-1: config 0 descriptor??
[  233.403829][ T8882] loop6: detected capacity change from 0 to 524287999
[  233.751639][ T5893] usb 8-1: USB disconnect, device number 20
[  235.558417][ T5911] usb 6-1: USB disconnect, device number 14
[  235.642348][ T5880] usb 7-1: USB disconnect, device number 17
[  236.703070][   T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  236.906217][   T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  236.924109][ T5893] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  236.938414][   T24] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  236.958977][ T8917] netlink: 'syz.2.520': attribute type 10 has an invalid length.
[  236.967722][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.975453][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  236.976374][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.992995][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  237.013496][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.020668][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.028142][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.035260][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.074049][ T8917] : (slave bridge0): Enslaving as an active interface with an up link
[  237.165966][   T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  237.175260][ T5893] usb 7-1: Using ep0 maxpacket: 8
[  237.231414][   T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  237.240072][ T5893] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  237.398432][   T24] usb 6-1: Product: syz
[  237.403254][   T24] usb 6-1: Manufacturer: syz
[  237.407904][ T5893] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  237.421809][ T5893] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  237.435692][ T5893] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  237.446280][   T24] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  237.457775][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.472288][ T5893] usbtmc 7-1:16.0: bulk endpoints not found
[  237.493096][ T5941] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  237.623031][ T5941] usb 2-1: device descriptor read/64, error -71
[  237.694746][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.522'.
[  237.803506][ T8931] loop6: detected capacity change from 0 to 524287999
[  238.000501][ T5941] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  238.133064][ T5941] usb 2-1: device descriptor read/64, error -71
[  238.158838][ T8935] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.518'.
[  238.171211][ T8934] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.518'.
[  238.208109][   T30] audit: type=1400 audit(1753836175.130:630): avc:  denied  { read write } for  pid=8936 comm="syz.2.523" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  238.236924][   T30] audit: type=1400 audit(1753836175.130:631): avc:  denied  { open } for  pid=8936 comm="syz.2.523" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  238.262235][ T5941] usb usb2-port1: attempt power cycle
[  238.613153][ T5941] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  238.673730][ T5941] usb 2-1: device descriptor read/8, error -71
[  238.682223][ T5893] usb 6-1: USB disconnect, device number 15
[  238.993974][ T8949] serio: Serial port ptm0
[  239.038728][ T5941] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  239.073038][ T5893] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  239.101013][ T5941] usb 2-1: device descriptor read/8, error -71
[  239.244351][ T5941] usb usb2-port1: unable to enumerate USB device
[  239.282795][ T8952] netlink: 56 bytes leftover after parsing attributes in process `syz.2.524'.
[  239.310622][ T5893] usb 6-1: Using ep0 maxpacket: 16
[  239.338628][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.377871][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  239.423223][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[  239.443700][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.684334][ T5893] usb 6-1: Product: syz
[  239.688556][ T5893] usb 6-1: Manufacturer: syz
[  239.696732][ T5893] usb 6-1: SerialNumber: syz
[  239.713683][ T5893] usb 6-1: config 0 descriptor??
[  239.728926][   T30] audit: type=1400 audit(1753836176.630:632): avc:  denied  { getopt } for  pid=8939 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  239.977347][ T5893] usb 7-1: USB disconnect, device number 18
[  240.632660][ T8982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8982 comm=syz.2.534
[  241.346475][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.536'.
[  241.403425][ T8988] loop6: detected capacity change from 0 to 524287999
[  241.841482][ T5987] usb 6-1: USB disconnect, device number 16
[  242.646354][   T30] audit: type=1400 audit(1753836179.570:633): avc:  denied  { map } for  pid=8992 comm="syz.6.538" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  243.355372][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[  243.365978][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.540'.
[  243.376183][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.540'.
[  243.613520][ T9010] delete_channel: no stack
[  243.951447][   T30] audit: type=1400 audit(1753836180.870:634): avc:  denied  { read write } for  pid=9022 comm="syz.2.544" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  243.994077][   T30] audit: type=1400 audit(1753836180.870:635): avc:  denied  { open } for  pid=9022 comm="syz.2.544" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  244.018376][    C1] vkms_vblank_simulate: vblank timer overrun
[  244.722654][   T30] audit: type=1400 audit(1753836180.880:636): avc:  denied  { watch } for  pid=9023 comm="syz.6.545" path="/87/file1" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  244.745883][   T30] audit: type=1400 audit(1753836180.880:637): avc:  denied  { watch_sb watch_reads } for  pid=9023 comm="syz.6.545" path="/87/file1" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  244.769345][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.038981][   T30] audit: type=1400 audit(1753836181.640:638): avc:  denied  { map } for  pid=9023 comm="syz.6.545" path="socket:[19178]" dev="sockfs" ino=19178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  245.096025][   T30] audit: type=1400 audit(1753836181.640:639): avc:  denied  { accept } for  pid=9023 comm="syz.6.545" path="socket:[19178]" dev="sockfs" ino=19178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  245.142558][ T9034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.546'.
[  245.168048][ T9034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.546'.
[  245.507713][   T30] audit: type=1400 audit(1753836182.430:640): avc:  denied  { write } for  pid=9033 comm="syz.1.546" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  245.598265][   T30] audit: type=1400 audit(1753836182.430:641): avc:  denied  { open } for  pid=9033 comm="syz.1.546" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  245.893044][ T5911] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  245.903083][ T5849] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  245.914737][   T30] audit: type=1400 audit(1753836182.830:642): avc:  denied  { write } for  pid=9054 comm="syz.7.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  245.935777][   T30] audit: type=1400 audit(1753836182.830:643): avc:  denied  { prog_load } for  pid=9054 comm="syz.7.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  246.083092][ T5849] usb 3-1: Using ep0 maxpacket: 16
[  246.089846][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.093061][   T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  246.155614][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.167354][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  246.178711][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  246.195909][ T5911] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  246.205417][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.213581][ T5849] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  246.222623][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.230723][ T5911] usb 6-1: Product: syz
[  246.235038][ T5849] usb 3-1: Product: syz
[  246.239200][ T5911] usb 6-1: Manufacturer: syz
[  246.243828][ T5849] usb 3-1: Manufacturer: syz
[  246.248419][ T5911] usb 6-1: SerialNumber: syz
[  246.253099][ T5849] usb 3-1: SerialNumber: syz
[  246.260556][ T5911] usb 6-1: config 0 descriptor??
[  246.266698][ T9044] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  246.275318][ T5849] usb 3-1: config 0 descriptor??
[  246.313262][   T24] usb 2-1: Using ep0 maxpacket: 32
[  246.320309][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.331320][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.341083][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.355623][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  246.365674][   T24] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  246.375803][   T24] usb 2-1: Product: syz
[  246.379984][   T24] usb 2-1: Manufacturer: syz
[  246.385939][   T24] usb 2-1: SerialNumber: syz
[  246.396056][   T24] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input45
[  246.443104][ T5900] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  246.485088][ T5911] powermate: unknown product id 0240
[  246.491227][ T5911] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  246.501174][ T5911] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46
[  246.593059][ T5900] usb 8-1: Using ep0 maxpacket: 16
[  246.611810][ T5900] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  246.633543][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.649777][ T5900] usb 8-1: Product: syz
[  246.657594][ T5900] usb 8-1: Manufacturer: syz
[  246.667399][ T5900] usb 8-1: SerialNumber: syz
[  246.680061][ T5911] usb 2-1: USB disconnect, device number 30
[  246.686971][ T5900] usb 8-1: config 0 descriptor??
[  246.785404][ T9063] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  246.807986][ T5900] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  246.862030][ T5911] appletouch 2-1:1.0: input: appletouch disconnected
[  247.263463][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.556'.
[  247.606605][ T5900] ssu100 8-1:0.0: probe with driver ssu100 failed with error -110
[  247.616299][    C0] powermate: config urb returned -71
[  247.621925][    C0] powermate: config urb returned -71
[  247.627406][    C0] powermate: config urb returned -71
[  247.637814][ T5941] usb 6-1: USB disconnect, device number 17
[  247.643854][    C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  247.771605][ T9065] delete_channel: no stack
[  248.663094][ T5849] usb 3-1: USB disconnect, device number 22
[  249.099209][   T30] kauditd_printk_skb: 50 callbacks suppressed
[  249.099227][   T30] audit: type=1400 audit(1753836186.010:694): avc:  denied  { sys_module } for  pid=9081 comm="syz.6.560" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  249.294249][   T24] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  249.413262][   T30] audit: type=1400 audit(1753836186.040:695): avc:  denied  { map_create } for  pid=9081 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  249.528834][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.540555][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  249.551703][   T30] audit: type=1400 audit(1753836186.470:696): avc:  denied  { create } for  pid=9095 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  249.572229][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  249.583260][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  249.596709][   T30] audit: type=1400 audit(1753836186.470:697): avc:  denied  { ioctl } for  pid=9095 comm="syz.1.561" path="socket:[19299]" dev="sockfs" ino=19299 ioctlcmd=0x8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  249.621902][    C1] vkms_vblank_simulate: vblank timer overrun
[  249.643036][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  249.658135][   T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  249.670012][   T24] usb 6-1: Manufacturer: syz
[  249.829728][   T24] usb 6-1: config 0 descriptor??
[  249.834889][   T30] audit: type=1400 audit(1753836186.470:698): avc:  denied  { write } for  pid=9095 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  250.621282][   T30] audit: type=1400 audit(1753836187.540:699): avc:  denied  { create } for  pid=9099 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  250.734005][   T30] audit: type=1400 audit(1753836187.660:700): avc:  denied  { create } for  pid=9109 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  250.813141][   T24] rc_core: IR keymap rc-hauppauge not found
[  250.876797][   T24] Registered IR keymap rc-empty
[  250.893659][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  250.904676][   T30] audit: type=1400 audit(1753836187.770:701): avc:  denied  { read } for  pid=9109 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  251.023036][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.064420][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  251.284717][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input47
[  251.381615][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.564'.
[  251.416552][   T30] audit: type=1400 audit(1753836188.340:702): avc:  denied  { create } for  pid=9109 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  251.453973][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.481214][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.589552][   T30] audit: type=1400 audit(1753836188.370:703): avc:  denied  { bind } for  pid=9109 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  251.611397][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.655852][ T9128] input: syz1 as /devices/virtual/input/input48
[  251.664012][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.687109][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.703675][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.564'.
[  251.722910][ T5849] usb 8-1: USB disconnect, device number 21
[  251.733610][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.784898][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.813702][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.836723][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.885537][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  251.911347][ T5911] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  251.936255][   T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  251.952161][ T5911] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  251.966396][   T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  252.143218][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.567'.
[  252.166379][ T9137] loop6: detected capacity change from 0 to 524287999
[  252.902994][   T43] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  253.083433][   T43] usb 3-1: Using ep0 maxpacket: 16
[  253.103559][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.188888][   T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  253.243241][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  253.316195][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.359632][   T43] usb 3-1: Product: syz
[  253.381291][   T43] usb 3-1: Manufacturer: syz
[  253.415532][ T9154] futex_wake_op: syz.1.570 tries to shift op by 32; fix this program
[  253.453454][   T43] usb 3-1: SerialNumber: syz
[  253.460640][   T43] usb 3-1: config 0 descriptor??
[  253.475433][   T43] usb 6-1: USB disconnect, device number 18
[  253.493625][   T24] usb 7-1: Using ep0 maxpacket: 8
[  253.563941][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[  253.598843][   T24] usb 7-1: config 8 has an invalid interface number: 174 but max is 0
[  253.623009][   T24] usb 7-1: config 8 has no interface number 0
[  253.642412][   T24] usb 7-1: config 8 interface 174 has no altsetting 0
[  253.652238][   T24] usb 7-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=4d.47
[  253.672073][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.691023][ T9157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9157 comm=syz.7.573
[  253.703787][   T24] usb 7-1: Product: syz
[  253.707990][   T24] usb 7-1: Manufacturer: syz
[  253.712600][   T24] usb 7-1: SerialNumber: syz
[  254.378275][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  254.378290][   T30] audit: type=1400 audit(1753836191.300:724): avc:  denied  { create } for  pid=9146 comm="syz.6.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  254.414185][   T30] audit: type=1400 audit(1753836191.330:725): avc:  denied  { ioctl } for  pid=9146 comm="syz.6.571" path="socket:[20506]" dev="sockfs" ino=20506 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  254.419124][   T24] s2255 7-1:8.174: Could not find bulk-in endpoint
[  254.634645][   T30] audit: type=1400 audit(1753836191.550:726): avc:  denied  { write } for  pid=9159 comm="syz.5.574" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  254.658042][    C0] vkms_vblank_simulate: vblank timer overrun
[  254.663150][   T24] Sensoray 2255 driver load failed: 0xfffffff4
[  254.899468][ T9168] netlink: 'syz.1.575': attribute type 5 has an invalid length.
[  255.141671][   T24] s2255 7-1:8.174: probe with driver s2255 failed with error -12
[  255.152291][   T24] usb 7-1: USB disconnect, device number 19
[  255.174348][   T30] audit: type=1400 audit(1753836192.090:727): avc:  denied  { ioctl } for  pid=9159 comm="syz.5.574" path="/dev/vbi0" dev="devtmpfs" ino=952 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  255.203067][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  255.209574][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  255.223108][   T30] audit: type=1400 audit(1753836192.150:728): avc:  denied  { create } for  pid=9170 comm="syz.7.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  255.741856][   T24] usb 3-1: USB disconnect, device number 23
[  255.823026][ T5911] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  255.952147][   T30] audit: type=1400 audit(1753836192.870:729): avc:  denied  { read append } for  pid=9180 comm="syz.2.578" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  255.987503][   T30] audit: type=1400 audit(1753836192.910:730): avc:  denied  { open } for  pid=9180 comm="syz.2.578" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  256.010810][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.050481][ T9184] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  256.061651][ T9184] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  256.550267][   T30] audit: type=1400 audit(1753836192.960:731): avc:  denied  { mounton } for  pid=9179 comm="syz.5.579" path="/31/file0" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  256.573679][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  256.815700][   T30] audit: type=1400 audit(1753836192.970:732): avc:  denied  { mount } for  pid=9179 comm="syz.5.579" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  256.841853][   T30] audit: type=1400 audit(1753836192.970:733): avc:  denied  { mounton } for  pid=9179 comm="syz.5.579" path="/31/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  256.887986][ T5911] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  256.904600][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.032066][ T5911] usb 2-1: Product: syz
[  257.036751][ T5911] usb 2-1: Manufacturer: syz
[  257.041414][ T5911] usb 2-1: SerialNumber: syz
[  257.069279][ T5911] usb 2-1: config 0 descriptor??
[  257.079273][ T5911] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  257.367009][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'.
[  257.823664][ T9189] delete_channel: no stack
[  258.183036][   T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  258.836320][   T24] usb 6-1: Using ep0 maxpacket: 32
[  258.861527][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.882108][   T24] usb 6-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  258.918505][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[  258.936896][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.955240][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  258.969549][   T24] usb 6-1: SerialNumber: syz
[  258.981678][   T24] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  258.989747][   T24] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  258.996393][   T24] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  259.143304][ T5911] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  259.168733][ T9208] program syz.6.585 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  259.191468][ T5911] usb 6-1: USB disconnect, device number 19
[  259.423631][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  259.423647][   T30] audit: type=1400 audit(1753836196.350:743): avc:  denied  { create } for  pid=9207 comm="syz.6.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  259.457233][   T30] audit: type=1400 audit(1753836196.380:744): avc:  denied  { bind } for  pid=9207 comm="syz.6.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  259.685042][   T30] audit: type=1400 audit(1753836196.610:745): avc:  denied  { egress } for  pid=9211 comm="syz.2.586" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  259.708236][    C0] vkms_vblank_simulate: vblank timer overrun
[  259.733927][   T30] audit: type=1400 audit(1753836196.610:746): avc:  denied  { sendto } for  pid=9211 comm="syz.2.586" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  259.756978][    C0] vkms_vblank_simulate: vblank timer overrun
[  260.257718][   T30] audit: type=1400 audit(1753836197.170:747): avc:  denied  { create } for  pid=9220 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  260.390937][   T30] audit: type=1400 audit(1753836197.230:748): avc:  denied  { create } for  pid=9220 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  260.543016][   T30] audit: type=1400 audit(1753836197.230:749): avc:  denied  { connect } for  pid=9220 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  260.623044][   T30] audit: type=1400 audit(1753836197.240:750): avc:  denied  { write } for  pid=9220 comm="syz.5.588" path="socket:[20457]" dev="sockfs" ino=20457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  260.660890][ T5900] usb 2-1: USB disconnect, device number 31
[  260.863131][   T30] audit: type=1400 audit(1753836197.770:751): avc:  denied  { write } for  pid=9234 comm="syz.6.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  262.144450][   T30] audit: type=1400 audit(1753836199.070:752): avc:  denied  { ioctl } for  pid=9247 comm="syz.6.594" path="socket:[20648]" dev="sockfs" ino=20648 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  262.311887][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'.
[  262.645319][   T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  262.803043][   T24] usb 8-1: Using ep0 maxpacket: 32
[  262.817471][   T24] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  262.829205][ T5900] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  263.079785][   T24] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  263.089728][   T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  263.098860][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  263.109160][   T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  263.119022][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  263.132108][   T24] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  263.141298][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.151570][   T24] usb 8-1: config 0 descriptor??
[  264.083088][ T5911] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  264.268728][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short
[  264.279621][ T5911] usb 3-1: not running at top speed; connect to a high speed hub
[  264.293329][ T5911] usb 3-1: config 1 interface 0 has no altsetting 0
[  264.332545][   T24] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  264.362174][   T24] usb 8-1: USB disconnect, device number 22
[  264.370090][ T5900] usb 2-1: config 127 has an invalid interface number: 133 but max is 3
[  264.607369][   T24] usblp0: removed
[  264.612275][ T5900] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[  264.631510][ T5900] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[  264.648280][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  264.648296][   T30] audit: type=1400 audit(1753836201.570:759): avc:  denied  { create } for  pid=9282 comm="syz.5.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  264.678609][ T5900] usb 2-1: config 127 has an invalid interface number: 108 but max is 3
[  264.689852][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  264.699085][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.707455][ T5911] usb 3-1: Product: syz
[  264.708951][ T5900] usb 2-1: config 127 has an invalid interface number: 225 but max is 3
[  264.713557][ T5911] usb 3-1: Manufacturer: syz
[  264.724936][ T5911] usb 3-1: SerialNumber: syz
[  264.731112][   T30] audit: type=1400 audit(1753836201.620:760): avc:  denied  { ioctl } for  pid=9282 comm="syz.5.604" path="socket:[21642]" dev="sockfs" ino=21642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  264.752852][ T5900] usb 2-1: config 127 has an invalid interface number: 46 but max is 3
[  264.760478][   T30] audit: type=1400 audit(1753836201.620:761): avc:  denied  { create } for  pid=9282 comm="syz.5.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  264.792536][   T30] audit: type=1400 audit(1753836201.710:762): avc:  denied  { mount } for  pid=9284 comm="syz.6.605" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  264.848008][   T30] audit: type=1400 audit(1753836201.770:763): avc:  denied  { unmount } for  pid=6068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  264.906862][   T30] audit: type=1400 audit(1753836201.830:764): avc:  denied  { bind } for  pid=9286 comm="syz.6.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  264.914579][ T5900] usb 2-1: config 127 has no interface number 0
[  264.932852][ T5900] usb 2-1: config 127 has no interface number 1
[  264.939171][ T5900] usb 2-1: config 127 has no interface number 2
[  264.945490][ T5900] usb 2-1: config 127 has no interface number 3
[  264.952775][ T5900] usb 2-1: config 127 interface 133 altsetting 118 endpoint 0xF has invalid maxpacket 512, setting to 64
[  264.964539][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has a duplicate endpoint with address 0xF, skipping
[  264.976669][   T30] audit: type=1400 audit(1753836201.830:765): avc:  denied  { name_bind } for  pid=9286 comm="syz.6.606" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  264.979760][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has a duplicate endpoint with address 0x6, skipping
[  265.004493][   T30] audit: type=1400 audit(1753836201.830:766): avc:  denied  { node_bind } for  pid=9286 comm="syz.6.606" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  265.367629][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  265.379737][ T5900] usb 2-1: config 127 interface 133 altsetting 118 endpoint 0x8E has invalid maxpacket 51585, setting to 64
[  265.391281][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has a duplicate endpoint with address 0xF, skipping
[  265.402373][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has an invalid descriptor for endpoint zero, skipping
[  265.413649][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has a duplicate endpoint with address 0x2, skipping
[  265.424858][   T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  265.425449][   T30] audit: type=1400 audit(1753836201.860:767): avc:  denied  { write } for  pid=9286 comm="syz.6.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  265.467703][ T5900] usb 2-1: config 127 interface 133 altsetting 118 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  265.467733][   T30] audit: type=1400 audit(1753836201.860:768): avc:  denied  { connect } for  pid=9286 comm="syz.6.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  265.551805][ T5900] usb 2-1: config 127 interface 108 altsetting 9 has a duplicate endpoint with address 0xA, skipping
[  265.771244][ T5900] usb 2-1: config 127 interface 108 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 951
[  265.781494][ T5900] usb 2-1: config 127 interface 108 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  265.792382][ T5900] usb 2-1: config 127 interface 108 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  265.803444][ T5900] usb 2-1: config 127 interface 108 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  265.814518][ T5900] usb 2-1: config 127 interface 108 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  265.825715][ T5900] usb 2-1: config 127 interface 108 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  266.057963][ T5900] usb 2-1: config 127 interface 108 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  266.073613][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0x1, skipping
[  266.185118][ T5900] usb 2-1: config 127 interface 225 altsetting 10 endpoint 0x7 has an invalid bInterval 44, changing to 9
[  266.196581][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0xE, skipping
[  266.223015][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0xD, skipping
[  266.290778][ T5900] usb 2-1: config 127 interface 225 altsetting 10 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  266.313920][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0xB, skipping
[  266.374373][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0xD, skipping
[  266.480364][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  266.532561][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0xD, skipping
[  266.565730][ T5911] usb 3-1: USB disconnect, device number 24
[  266.587850][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0x7, skipping
[  266.705861][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'.
[  266.955262][ T5900] usb 2-1: config 127 interface 225 altsetting 10 has a duplicate endpoint with address 0xC, skipping
[  267.290076][ T5900] usb 2-1: config 127 interface 46 altsetting 255 has a duplicate endpoint with address 0xB, skipping
[  267.298615][ T9324] netlink: 'syz.2.614': attribute type 10 has an invalid length.
[  267.337874][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.345044][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.356756][ T5900] usb 2-1: config 127 interface 133 has no altsetting 0
[  267.372723][ T5900] usb 2-1: config 127 interface 108 has no altsetting 0
[  267.382816][ T5900] usb 2-1: config 127 interface 225 has no altsetting 0
[  267.410245][ T5900] usb 2-1: config 127 interface 46 has no altsetting 0
[  267.422215][ T5900] usb 2-1: string descriptor 0 read error: -71
[  267.430117][ T5900] usb 2-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice=b7.1e
[  267.550104][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.577882][ T5900] usb 2-1: can't set config #127, error -71
[  268.246915][ T5900] usb 2-1: USB disconnect, device number 32
[  268.784484][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'.
[  268.794087][ T9340] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  268.817660][ T5900] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  269.223249][ T5941] usb 8-1: new full-speed USB device number 24 using dummy_hcd
[  269.274680][ T5900] usb 2-1: device descriptor read/64, error -71
[  269.313296][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  269.450067][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  269.463173][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.476598][ T5941] usb 8-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  269.486263][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.497439][ T5941] usb 8-1: config 0 descriptor??
[  269.518526][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  269.538636][   T24] usb 6-1: config 176 has an invalid interface number: 245 but max is 0
[  269.554398][   T24] usb 6-1: config 176 has no interface number 0
[  269.561355][   T24] usb 6-1: config 176 interface 245 has no altsetting 0
[  269.568514][ T5900] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  269.595211][   T24] usb 6-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=fe.17
[  269.607412][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.616115][   T24] usb 6-1: Product: syz
[  269.620296][   T24] usb 6-1: Manufacturer: syz
[  269.625141][   T24] usb 6-1: SerialNumber: syz
[  269.744653][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  269.752452][ T5900] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  269.768495][ T5900] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  269.779390][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  269.791460][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  269.800095][ T5900] usb 2-1: SerialNumber: syz
[  269.808714][ T9348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  269.817296][ T9348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  269.838264][   T24] usb 6-1: bad CDC descriptors
[  269.846788][   T24] usb 6-1: USB disconnect, device number 20
[  269.919506][ T5941] wacom 0003:056A:0217.0012: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  270.308594][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.351577][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.466655][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  270.466671][   T30] audit: type=1400 audit(1753836207.390:784): avc:  denied  { ioctl } for  pid=9343 comm="syz.7.619" path="socket:[21754]" dev="sockfs" ino=21754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  270.497186][    C0] vkms_vblank_simulate: vblank timer overrun
[  270.519602][   T30] audit: type=1400 audit(1753836207.440:785): avc:  denied  { connect } for  pid=9343 comm="syz.7.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  270.551039][   T24] usb 8-1: USB disconnect, device number 24
[  270.577450][   T30] audit: type=1400 audit(1753836207.440:786): avc:  denied  { write } for  pid=9343 comm="syz.7.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  270.686672][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.627'.
[  270.695991][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.703602][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.724133][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.731930][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.170753][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.627'.
[  271.269598][ T9376] loop6: detected capacity change from 0 to 524287999
[  271.387330][ T9381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9381 comm=syz.5.629
[  271.992790][ T5941] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[  272.114994][ T5900] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  272.155982][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  272.168095][   T30] audit: type=1400 audit(1753836209.080:787): avc:  denied  { create } for  pid=9384 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  272.192576][ T5900] usb 2-1: USB disconnect, device number 34
[  272.204882][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.260676][ T9385] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  272.297939][ T5941] usb 8-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  272.309384][   T30] audit: type=1400 audit(1753836209.190:788): avc:  denied  { relabelto } for  pid=9384 comm="syz.1.631" name="file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  272.343381][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.367895][ T5941] usb 8-1: config 0 descriptor??
[  272.395537][   T30] audit: type=1400 audit(1753836209.190:789): avc:  denied  { associate } for  pid=9384 comm="syz.1.631" name="file0" dev="tmpfs" ino=710 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  272.453492][   T30] audit: type=1400 audit(1753836209.190:790): avc:  denied  { write } for  pid=9384 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  272.512685][   T30] audit: type=1400 audit(1753836209.280:791): avc:  denied  { unlink } for  pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  272.514311][ T9391] overlayfs: missing 'lowerdir'
[  272.599970][   T30] audit: type=1400 audit(1753836209.370:792): avc:  denied  { append } for  pid=9388 comm="syz.5.632" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  272.719799][   T30] audit: type=1400 audit(1753836209.430:793): avc:  denied  { append } for  pid=9388 comm="syz.5.632" name="v4l-subdev7" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  272.833114][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  273.171598][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.219877][ T9387] delete_channel: no stack
[  273.236828][ T5941] wacom 0003:056A:0217.0013: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  273.309743][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.556830][ T5844] usb 8-1: USB disconnect, device number 25
[  274.462082][ T9406] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.066510][ T9415] smc: net device bond0 applied user defined pnetid SYZ0
[  275.619735][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  275.619767][   T30] audit: type=1400 audit(1753836212.530:802): avc:  denied  { getopt } for  pid=9419 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  275.824688][   T30] audit: type=1400 audit(1753836212.530:803): avc:  denied  { name_connect } for  pid=9419 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  277.168720][ T9444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9444 comm=syz.1.647
[  277.181423][ T5941] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  277.848221][ T5941] usb 6-1: Using ep0 maxpacket: 16
[  277.855836][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.188109][ T5941] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  278.284180][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.329093][ T5941] usb 6-1: Product: syz
[  278.333536][ T5941] usb 6-1: Manufacturer: syz
[  278.338136][ T5941] usb 6-1: SerialNumber: syz
[  278.424758][ T5941] usb 6-1: config 0 descriptor??
[  279.187917][ T9462] xt_cgroup: invalid path, errno=-2
[  279.329170][   T30] audit: type=1400 audit(1753836216.250:804): avc:  denied  { load_policy } for  pid=9466 comm="syz.7.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  279.329742][ T9468] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  279.360657][ T9468] SELinux: failed to load policy
[  279.403082][ T5941] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  279.757391][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  279.774225][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.860670][ T5941] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  279.890036][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.073565][   T30] audit: type=1400 audit(1753836216.980:805): avc:  denied  { ioctl } for  pid=9474 comm="syz.7.656" path="socket:[21063]" dev="sockfs" ino=21063 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  280.085508][ T5941] usb 3-1: config 0 descriptor??
[  280.098044][    C1] vkms_vblank_simulate: vblank timer overrun
[  280.322636][ T5911] usb 6-1: USB disconnect, device number 21
[  280.401015][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.659'.
[  280.434113][ T9484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9484 comm=syz.5.660
[  280.451994][   T30] audit: type=1400 audit(1753836217.370:806): avc:  denied  { create } for  pid=9485 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  281.115086][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.128427][ T5941] wacom 0003:056A:0217.0014: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  281.129483][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.167790][ T5844] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  281.201852][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.663'.
[  281.239460][ T9495] loop6: detected capacity change from 0 to 524287999
[  281.662660][   T24] usb 3-1: USB disconnect, device number 25
[  281.785422][ T5844] usb 2-1: Using ep0 maxpacket: 16
[  281.791905][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  281.805766][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  282.280513][ T5844] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  282.289876][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.298642][ T5844] usb 2-1: Product: syz
[  282.302877][ T5844] usb 2-1: Manufacturer: syz
[  282.310659][ T5844] usb 2-1: SerialNumber: syz
[  282.317419][ T5844] usb 2-1: config 0 descriptor??
[  282.327772][ T5844] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  282.341255][ T5844] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  282.562612][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.610927][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.695563][ T5844] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  282.741700][ T5844] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  282.766488][ T5844] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  282.785202][   T30] audit: type=1400 audit(1753836219.700:807): avc:  denied  { create } for  pid=9511 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  282.793017][ T5941] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  282.806896][ T5844] em28xx 2-1:0.0: No AC97 audio processor
[  282.921111][   T30] audit: type=1400 audit(1753836219.700:808): avc:  denied  { ioctl } for  pid=9511 comm="syz.5.668" path="socket:[22064]" dev="sockfs" ino=22064 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  282.945587][    C1] vkms_vblank_simulate: vblank timer overrun
[  282.964027][ T5844] usb 2-1: USB disconnect, device number 35
[  283.574757][ T5844] em28xx 2-1:0.0: Disconnecting em28xx
[  283.583421][   T30] audit: type=1400 audit(1753836219.710:809): avc:  denied  { getopt } for  pid=9511 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  283.601263][ T5844] em28xx 2-1:0.0: Freeing device
[  283.603272][   T30] audit: type=1400 audit(1753836219.790:810): avc:  denied  { write } for  pid=9511 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  283.695961][ T9521] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  283.703032][ T5941] usb 3-1: Using ep0 maxpacket: 8
[  283.710779][ T5941] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  283.738885][ T5941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.750040][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.762235][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  283.786799][   T30] audit: type=1400 audit(1753836220.700:811): avc:  denied  { create } for  pid=9520 comm="syz.7.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  283.903370][ T5941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.921182][   T30] audit: type=1400 audit(1753836220.700:812): avc:  denied  { write } for  pid=9520 comm="syz.7.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  283.923313][ T5844] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  284.068235][ T5941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.081422][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.356559][ T5941] usb 3-1: GET_CAPABILITIES returned 0
[  284.362096][ T5941] usbtmc 3-1:16.0: can't read capabilities
[  284.401494][   T30] audit: type=1400 audit(1753836221.320:813): avc:  denied  { read } for  pid=9529 comm="syz.7.673" path="socket:[21138]" dev="sockfs" ino=21138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  284.439976][ T9535] netlink: 'syz.5.675': attribute type 10 has an invalid length.
[  284.451325][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.458927][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.189212][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.196440][ T9535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.203813][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.210869][ T9535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.247103][   T24] usb 3-1: USB disconnect, device number 26
[  285.396725][ T9535] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  285.728494][   T30] audit: type=1400 audit(1753836222.650:814): avc:  denied  { write } for  pid=9548 comm="syz.7.679" path="socket:[22184]" dev="sockfs" ino=22184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  285.868382][ T9552] syz.7.679: attempt to access beyond end of device
[  285.868382][ T9552] loop7: rw=0, sector=1, nr_sectors = 1 limit=0
[  285.882384][ T9552] qnx4: unable to read the superblock
[  285.888580][   T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  285.940155][ T9547] xt_CT: No such helper "pptp"
[  286.063033][   T24] usb 7-1: Using ep0 maxpacket: 8
[  286.075918][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  286.093469][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  286.106612][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  286.119772][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  286.133321][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  286.192489][   T24] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  286.201898][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9
[  286.211056][   T24] usb 7-1: Product: syz
[  286.216578][   T24] usb 7-1: Manufacturer: syz
[  286.223706][   T24] usb 7-1: SerialNumber: syz
[  286.272596][   T24] usb 7-1: config 0 descriptor??
[  286.283319][   T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input58
[  286.883615][   T30] audit: type=1400 audit(1753836223.810:815): avc:  denied  { create } for  pid=9562 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  287.444185][ T9571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9571 comm=syz.7.684
[  287.456711][ T9564] mkiss: ax0: crc mode is auto.
[  287.621957][    C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  287.655525][   T24] usb 7-1: USB disconnect, device number 20
[  287.664839][   T30] audit: type=1400 audit(1753836224.590:816): avc:  denied  { bind } for  pid=9562 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  287.683960][    C1] vkms_vblank_simulate: vblank timer overrun
[  288.073877][   T30] audit: type=1400 audit(1753836224.970:817): avc:  denied  { listen } for  pid=9562 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.407886][   T30] audit: type=1400 audit(1753836224.970:818): avc:  denied  { write } for  pid=9562 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.437674][   T30] audit: type=1400 audit(1753836224.970:819): avc:  denied  { connect } for  pid=9562 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  289.198021][   T30] audit: type=1400 audit(1753836225.580:820): avc:  denied  { setopt } for  pid=9576 comm="syz.6.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  289.267318][   T30] audit: type=1400 audit(1753836225.590:821): avc:  denied  { ioctl } for  pid=9576 comm="syz.6.687" path="socket:[21282]" dev="sockfs" ino=21282 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  289.785824][   T30] audit: type=1400 audit(1753836225.590:822): avc:  denied  { bind } for  pid=9576 comm="syz.6.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  289.908444][   T30] audit: type=1400 audit(1753836226.440:823): avc:  denied  { write } for  pid=9585 comm="syz.2.689" path="socket:[21293]" dev="sockfs" ino=21293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  290.217376][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.690'.
[  290.236137][ T5844] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  290.383020][   T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  290.393133][ T5844] usb 6-1: Using ep0 maxpacket: 16
[  290.402208][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.450581][ T5844] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  290.480531][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.499316][ T5844] usb 6-1: Product: syz
[  290.510217][ T5844] usb 6-1: Manufacturer: syz
[  290.520205][ T5844] usb 6-1: SerialNumber: syz
[  290.544821][ T5844] usb 6-1: config 0 descriptor??
[  290.556463][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  290.581330][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.594247][   T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  290.604691][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.644037][ T9594] delete_channel: no stack
[  290.677150][   T24] usb 3-1: config 0 descriptor??
[  290.833905][   T30] audit: type=1400 audit(1753836227.750:824): avc:  denied  { execute } for  pid=9606 comm="syz.7.694" path="/131/cgroup.events" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  291.060726][   T30] audit: type=1400 audit(1753836227.980:825): avc:  denied  { mounton } for  pid=9614 comm="syz.1.697" path="/149/file0" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  291.099567][   T24] wacom 0003:056A:0217.0015: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  291.130298][   T30] audit: type=1400 audit(1753836227.980:826): avc:  denied  { mount } for  pid=9614 comm="syz.1.697" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  291.320464][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.360964][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.964171][   T24] usb 3-1: USB disconnect, device number 27
[  293.189698][   T24] usb 6-1: USB disconnect, device number 22
[  294.588973][ T5844] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  295.055669][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'.
[  295.100441][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  295.335669][ T5844] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  295.346178][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.359439][ T5844] usb 7-1: config 0 descriptor??
[  295.570569][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'.
[  295.579569][ T9665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.587282][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.598364][ T9665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.606130][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.780016][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'.
[  296.251322][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[  296.735133][ T9673] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  296.745770][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'.
[  296.804204][ T5987] usb 7-1: USB disconnect, device number 21
[  296.814844][ T9667] delete_channel: no stack
[  297.010681][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  297.010696][   T30] audit: type=1400 audit(1753836233.930:835): avc:  denied  { execute_no_trans } for  pid=9685 comm="syz.5.715" path="/64/file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  297.039858][    C1] vkms_vblank_simulate: vblank timer overrun
[  297.306348][ T5844] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  297.743116][ T5844] usb 8-1: Using ep0 maxpacket: 16
[  297.751079][ T9697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9697 comm=syz.5.719
[  298.140761][ T5844] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.163262][ T5844] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  298.172647][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.273121][ T5844] usb 8-1: Product: syz
[  298.277404][ T5844] usb 8-1: Manufacturer: syz
[  298.282107][ T5844] usb 8-1: SerialNumber: syz
[  298.681158][ T5844] usb 8-1: config 0 descriptor??
[  299.356510][ T9723] netlink: 'syz.5.724': attribute type 10 has an invalid length.
[  299.723759][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.730908][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.717106][ T5911] usb 8-1: USB disconnect, device number 26
[  301.838466][ T9735] netlink: 'syz.7.726': attribute type 10 has an invalid length.
[  302.658612][   T30] audit: type=1400 audit(1753836239.580:836): avc:  denied  { create } for  pid=9739 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  304.060861][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'.
[  305.098928][   T30] audit: type=1400 audit(1753836242.020:837): avc:  denied  { create } for  pid=9764 comm="syz.2.732" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  305.129910][   T30] audit: type=1400 audit(1753836242.050:838): avc:  denied  { mounton } for  pid=9764 comm="syz.2.732" path="/162/file0" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  305.153084][ T9772] Invalid source name
[  305.157252][ T9772] UBIFS error (pid: 9772): cannot open "./file0", error -22
[  305.162868][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'.
[  305.272391][   T30] audit: type=1400 audit(1753836242.080:839): avc:  denied  { mount } for  pid=9764 comm="syz.2.732" name="/" dev="configfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  305.369968][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.729'.
[  305.859858][   T30] audit: type=1400 audit(1753836242.080:840): avc:  denied  { search } for  pid=9764 comm="syz.2.732" name="/" dev="configfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  305.862283][ T9760] delete_channel: no stack
[  305.895922][   T30] audit: type=1400 audit(1753836242.080:841): avc:  denied  { search } for  pid=9764 comm="syz.2.732" name="/" dev="configfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  305.931371][   T30] audit: type=1400 audit(1753836242.080:842): avc:  denied  { read open } for  pid=9764 comm="syz.2.732" path="/" dev="configfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  305.953497][    C0] vkms_vblank_simulate: vblank timer overrun
[  305.974569][ T9772] team0: Port device team_slave_1 removed
[  306.193520][   T30] audit: type=1400 audit(1753836243.110:843): avc:  denied  { ioctl } for  pid=9788 comm="syz.1.738" path="socket:[23613]" dev="sockfs" ino=23613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  306.233076][   T30] audit: type=1400 audit(1753836243.150:844): avc:  denied  { create } for  pid=9790 comm="syz.7.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  306.254245][   T30] audit: type=1400 audit(1753836243.150:845): avc:  denied  { connect } for  pid=9790 comm="syz.7.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  306.256590][ T9791] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  306.385022][ T5911] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  306.514729][ T9798] openvswitch: netlink: IP tunnel dst address not specified
[  307.183817][ T5911] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9
[  307.245502][ T5911] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.265732][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0
[  307.274235][ T5911] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  307.284278][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.298638][ T5911] usb 7-1: config 0 descriptor??
[  307.645775][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9811 comm=syz.5.745
[  307.657182][ T9814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9814 comm=syz.1.744
[  307.701861][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'.
[  307.713004][ T5849] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  307.813636][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'.
[  307.837738][ T5911] pantherlord 0003:0810:0002.0016: unknown main item tag 0x6
[  307.932069][ T5849] usb 8-1: Using ep0 maxpacket: 16
[  308.294289][ T5849] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  308.325518][ T5911] pantherlord 0003:0810:0002.0016: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.6-1/input0
[  308.341394][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.361829][ T5849] usb 8-1: Product: syz
[  308.369630][ T5911] pantherlord 0003:0810:0002.0016: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  308.389675][ T5849] usb 8-1: Manufacturer: syz
[  308.422659][ T5849] usb 8-1: SerialNumber: syz
[  308.554580][ T5849] usb 8-1: config 0 descriptor??
[  308.565149][ T5849] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  308.591143][ T5911] usb 7-1: USB disconnect, device number 22
[  308.899645][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  308.899676][   T30] audit: type=1400 audit(1753836245.800:848): avc:  denied  { map } for  pid=9821 comm="syz.5.747" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  308.907924][ T5849] ssu100 8-1:0.0: probe with driver ssu100 failed with error -110
[  308.949075][   T30] audit: type=1400 audit(1753836245.800:849): avc:  denied  { execute } for  pid=9821 comm="syz.5.747" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  308.974662][   T30] audit: type=1400 audit(1753836245.810:850): avc:  denied  { ioctl } for  pid=9821 comm="syz.5.747" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  310.681608][   T30] audit: type=1400 audit(1753836247.580:851): avc:  denied  { getopt } for  pid=9847 comm="syz.6.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  310.715357][ T5849] usb 8-1: USB disconnect, device number 27
[  312.105548][   T30] audit: type=1400 audit(1753836249.030:852): avc:  denied  { nlmsg_read } for  pid=9857 comm="syz.7.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  312.871973][   T30] audit: type=1326 audit(1753836249.790:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.1.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f066078e9a9 code=0x0
[  313.894548][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'.
[  314.156335][   T30] audit: type=1400 audit(1753836251.080:854): avc:  denied  { map } for  pid=9910 comm="syz.1.765" path="socket:[23835]" dev="sockfs" ino=23835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  314.191800][   T30] audit: type=1400 audit(1753836251.110:855): avc:  denied  { read } for  pid=9910 comm="syz.1.765" path="socket:[23835]" dev="sockfs" ino=23835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  315.073032][ T5987] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  315.089913][   T30] audit: type=1400 audit(1753836252.010:856): avc:  denied  { read } for  pid=9935 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  315.260264][ T5987] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  315.269682][ T5987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.279843][ T5987] usb 7-1: Product: syz
[  315.288459][ T5987] usb 7-1: Manufacturer: syz
[  315.301559][ T5987] usb 7-1: SerialNumber: syz
[  315.311106][ T5987] usb 7-1: config 0 descriptor??
[  315.396063][ T5911] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  315.403747][ T5849] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  315.519385][ T5987] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  315.532012][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.7.776'.
[  315.548451][ T9947] syz_tun: entered promiscuous mode
[  315.564450][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.574448][ T5911] usb 6-1: Using ep0 maxpacket: 16
[  315.583116][ T5849] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  315.599232][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.607873][ T5911] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  315.619239][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.021828][ T5849] usb 2-1: config 0 descriptor??
[  316.043463][ T5911] usb 6-1: Product: syz
[  316.071067][ T5911] usb 6-1: Manufacturer: syz
[  316.081143][ T5911] usb 6-1: SerialNumber: syz
[  316.119539][ T5911] usb 6-1: config 0 descriptor??
[  316.143774][ T5911] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  316.378248][ T9954] ==================================================================
[  316.386350][ T9954] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60
[  316.394523][ T9954] Read of size 1 at addr ffff888035c6d6b0 by task syz.7.777/9954
[  316.402243][ T9954] 
[  316.404579][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.7.777 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) 
[  316.404605][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  316.404616][ T9954] Call Trace:
[  316.404622][ T9954]  <TASK>
[  316.404629][ T9954]  dump_stack_lvl+0x116/0x1f0
[  316.404653][ T9954]  print_report+0xcd/0x630
[  316.404673][ T9954]  ? __virt_addr_valid+0x81/0x610
[  316.404693][ T9954]  ? __phys_addr+0xe8/0x180
[  316.404713][ T9954]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  316.404733][ T9954]  kasan_report+0xe0/0x110
[  316.404752][ T9954]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  316.404772][ T9954]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  316.404791][ T9954]  __kasan_check_byte+0x36/0x50
[  316.404809][ T9954]  lock_acquire+0xfc/0x350
[  316.404827][ T9954]  ? find_held_lock+0x2b/0x80
[  316.404851][ T9954]  _raw_spin_lock_irqsave+0x3a/0x60
[  316.404867][ T9954]  ? remove_wait_queue+0x25/0x180
[  316.404889][ T9954]  remove_wait_queue+0x25/0x180
[  316.404913][ T9954]  poll_freewait+0xd5/0x250
[  316.404939][ T9954]  do_select+0xe52/0x17e0
[  316.404972][ T9954]  ? __pfx_do_select+0x10/0x10
[  316.404996][ T9954]  ? psi_task_switch+0x201/0x8e0
[  316.405020][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405043][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405067][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405091][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405114][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405137][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405161][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405183][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405207][ T9954]  ? __pfx_pollwake+0x10/0x10
[  316.405231][ T9954]  ? find_held_lock+0x2b/0x80
[  316.405256][ T9954]  ? __might_fault+0xe3/0x190
[  316.405271][ T9954]  ? __might_fault+0xe3/0x190
[  316.405285][ T9954]  ? __might_fault+0x13b/0x190
[  316.405304][ T9954]  ? core_sys_select+0x453/0xc10
[  316.405317][ T9954]  core_sys_select+0x453/0xc10
[  316.405334][ T9954]  ? __pfx_core_sys_select+0x10/0x10
[  316.405351][ T9954]  ? kfree+0x24f/0x4d0
[  316.405374][ T9954]  ? bpf_lsm_file_permission+0x9/0x10
[  316.405395][ T9954]  ? security_file_permission+0x71/0x210
[  316.405425][ T9954]  ? set_user_sigmask+0x21b/0x2b0
[  316.405446][ T9954]  ? __pfx_set_user_sigmask+0x10/0x10
[  316.405468][ T9954]  do_pselect.constprop.0+0x19f/0x1e0
[  316.405484][ T9954]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  316.405502][ T9954]  ? __x64_sys_futex+0x1e0/0x4c0
[  316.405519][ T9954]  __x64_sys_pselect6+0x182/0x240
[  316.405534][ T9954]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  316.405553][ T9954]  do_syscall_64+0xcd/0x4c0
[  316.405575][ T9954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.405592][ T9954] RIP: 0033:0x7fae7878e9a9
[  316.405606][ T9954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.405623][ T9954] RSP: 002b:00007fae79657038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  316.405640][ T9954] RAX: ffffffffffffffda RBX: 00007fae789b5fa0 RCX: 00007fae7878e9a9
[  316.405651][ T9954] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  316.405662][ T9954] RBP: 00007fae78810d69 R08: 0000000000000000 R09: 0000000000000000
[  316.405673][ T9954] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  316.405685][ T9954] R13: 0000000000000000 R14: 00007fae789b5fa0 R15: 00007ffdd3e7c098
[  316.405703][ T9954]  </TASK>
[  316.405709][ T9954] 
[  316.734706][ T9954] Allocated by task 7589:
[  316.739029][ T9954]  kasan_save_stack+0x33/0x60
[  316.743696][ T9954]  kasan_save_track+0x14/0x30
[  316.748353][ T9954]  __kasan_kmalloc+0xaa/0xb0
[  316.752924][ T9954]  comedi_device_postconfig+0x2cb/0xc80
[  316.758491][ T9954]  comedi_device_attach+0x3cf/0x900
[  316.763671][ T9954]  do_devconfig_ioctl+0x1a7/0x580
[  316.768684][ T9954]  comedi_unlocked_ioctl+0x165d/0x2f00
[  316.774122][ T9954]  __x64_sys_ioctl+0x18b/0x210
[  316.778878][ T9954]  do_syscall_64+0xcd/0x4c0
[  316.783382][ T9954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.789255][ T9954] 
[  316.791568][ T9954] Freed by task 9955:
[  316.795529][ T9954]  kasan_save_stack+0x33/0x60
[  316.800190][ T9954]  kasan_save_track+0x14/0x30
[  316.804846][ T9954]  kasan_save_free_info+0x3b/0x60
[  316.809854][ T9954]  __kasan_slab_free+0x51/0x70
[  316.814598][ T9954]  kfree+0x2b4/0x4d0
[  316.818478][ T9954]  comedi_device_detach+0x2a4/0x9e0
[  316.823661][ T9954]  do_devconfig_ioctl+0x46c/0x580
[  316.828673][ T9954]  comedi_unlocked_ioctl+0x165d/0x2f00
[  316.834110][ T9954]  __x64_sys_ioctl+0x18b/0x210
[  316.838863][ T9954]  do_syscall_64+0xcd/0x4c0
[  316.843352][ T9954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.849227][ T9954] 
[  316.851532][ T9954] The buggy address belongs to the object at ffff888035c6d600
[  316.851532][ T9954]  which belongs to the cache kmalloc-256 of size 256
[  316.865566][ T9954] The buggy address is located 176 bytes inside of
[  316.865566][ T9954]  freed 256-byte region [ffff888035c6d600, ffff888035c6d700)
[  316.879340][ T9954] 
[  316.881645][ T9954] The buggy address belongs to the physical page:
[  316.888032][ T9954] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c6c
[  316.896770][ T9954] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  316.905260][ T9954] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  316.913139][ T9954] page_type: f5(slab)
[  316.917104][ T9954] raw: 00fff00000000040 ffff88801b841b40 ffffea0000b45380 dead000000000003
[  316.925673][ T9954] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  316.934241][ T9954] head: 00fff00000000040 ffff88801b841b40 ffffea0000b45380 dead000000000003
[  316.942894][ T9954] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  316.951548][ T9954] head: 00fff00000000001 ffffea0000d71b01 00000000ffffffff 00000000ffffffff
[  316.960200][ T9954] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  316.968845][ T9954] page dumped because: kasan: bad access detected
[  316.975246][ T9954] page_owner tracks the page as allocated
[  316.980944][ T9954] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 65838614864, free_ts 65778820113
[  317.002289][ T9954]  post_alloc_hook+0x1c0/0x230
[  317.007044][ T9954]  get_page_from_freelist+0x1321/0x3890
[  317.012630][ T9954]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  317.018538][ T9954]  alloc_pages_mpol+0x1fb/0x550
[  317.023384][ T9954]  new_slab+0x23b/0x330
[  317.027526][ T9954]  ___slab_alloc+0xd9c/0x1940
[  317.032193][ T9954]  __slab_alloc.constprop.0+0x56/0xb0
[  317.037552][ T9954]  __kmalloc_noprof+0x2f2/0x510
[  317.042384][ T9954]  fib_create_info+0x53f/0x46b0
[  317.047220][ T9954]  fib_table_insert+0x177/0x1c40
[  317.052145][ T9954]  fib_magic+0x4d4/0x5c0
[  317.056367][ T9954]  fib_add_ifaddr+0x16d/0x580
[  317.061024][ T9954]  fib_netdev_event+0x38a/0x710
[  317.065856][ T9954]  notifier_call_chain+0xbc/0x410
[  317.070869][ T9954]  call_netdevice_notifiers_info+0xbe/0x140
[  317.076752][ T9954]  __dev_notify_flags+0x12c/0x2e0
[  317.081777][ T9954] page last free pid 5880 tgid 5880 stack trace:
[  317.088084][ T9954]  __free_frozen_pages+0x7fe/0x1180
[  317.093272][ T9954]  qlist_free_all+0x4d/0x120
[  317.097874][ T9954]  kasan_quarantine_reduce+0x195/0x1e0
[  317.103326][ T9954]  __kasan_slab_alloc+0x69/0x90
[  317.108155][ T9954]  __kmalloc_cache_noprof+0x1f1/0x3e0
[  317.113520][ T9954]  nsim_fib_event_work+0x17f5/0x2e80
[  317.118791][ T9954]  process_one_work+0x9cc/0x1b70
[  317.123716][ T9954]  worker_thread+0x6c8/0xf10
[  317.128290][ T9954]  kthread+0x3c5/0x780
[  317.132346][ T9954]  ret_from_fork+0x5d4/0x6f0
[  317.136918][ T9954]  ret_from_fork_asm+0x1a/0x30
[  317.141665][ T9954] 
[  317.143968][ T9954] Memory state around the buggy address:
[  317.149581][ T9954]  ffff888035c6d580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  317.157623][ T9954]  ffff888035c6d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  317.165666][ T9954] >ffff888035c6d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  317.173704][ T9954]                                      ^
[  317.179311][ T9954]  ffff888035c6d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  317.187354][ T9954]  ffff888035c6d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  317.195405][ T9954] ==================================================================
[  317.203449][ T9954] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  317.210637][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.7.777 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) 
[  317.222179][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  317.232218][ T9954] Call Trace:
[  317.235482][ T9954]  <TASK>
[  317.238403][ T9954]  dump_stack_lvl+0x3d/0x1f0
[  317.242985][ T9954]  panic+0x71c/0x800
[  317.246865][ T9954]  ? __pfx_panic+0x10/0x10
[  317.251264][ T9954]  ? __pfx__printk+0x10/0x10
[  317.255852][ T9954]  ? end_report+0x4c/0x170
[  317.260252][ T9954]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  317.265611][ T9954]  check_panic_on_warn+0xab/0xb0
[  317.270565][ T9954]  end_report+0x107/0x170
[  317.274893][ T9954]  kasan_report+0xee/0x110
[  317.279307][ T9954]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  317.284680][ T9954]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  317.290038][ T9954]  __kasan_check_byte+0x36/0x50
[  317.294873][ T9954]  lock_acquire+0xfc/0x350
[  317.299286][ T9954]  ? find_held_lock+0x2b/0x80
[  317.303951][ T9954]  _raw_spin_lock_irqsave+0x3a/0x60
[  317.309135][ T9954]  ? remove_wait_queue+0x25/0x180
[  317.314149][ T9954]  remove_wait_queue+0x25/0x180
[  317.318992][ T9954]  poll_freewait+0xd5/0x250
[  317.323487][ T9954]  do_select+0xe52/0x17e0
[  317.327813][ T9954]  ? __pfx_do_select+0x10/0x10
[  317.332568][ T9954]  ? psi_task_switch+0x201/0x8e0
[  317.337500][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.342165][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.346836][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.351506][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.356174][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.360841][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.365508][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.370177][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.374848][ T9954]  ? __pfx_pollwake+0x10/0x10
[  317.379527][ T9954]  ? find_held_lock+0x2b/0x80
[  317.384196][ T9954]  ? __might_fault+0xe3/0x190
[  317.388864][ T9954]  ? __might_fault+0xe3/0x190
[  317.393521][ T9954]  ? __might_fault+0x13b/0x190
[  317.398272][ T9954]  ? core_sys_select+0x453/0xc10
[  317.403195][ T9954]  core_sys_select+0x453/0xc10
[  317.407944][ T9954]  ? __pfx_core_sys_select+0x10/0x10
[  317.413213][ T9954]  ? kfree+0x24f/0x4d0
[  317.417271][ T9954]  ? bpf_lsm_file_permission+0x9/0x10
[  317.422650][ T9954]  ? security_file_permission+0x71/0x210
[  317.428275][ T9954]  ? set_user_sigmask+0x21b/0x2b0
[  317.433290][ T9954]  ? __pfx_set_user_sigmask+0x10/0x10
[  317.438648][ T9954]  do_pselect.constprop.0+0x19f/0x1e0
[  317.444003][ T9954]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  317.449885][ T9954]  ? __x64_sys_futex+0x1e0/0x4c0
[  317.454807][ T9954]  __x64_sys_pselect6+0x182/0x240
[  317.459814][ T9954]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  317.465349][ T9954]  do_syscall_64+0xcd/0x4c0
[  317.469840][ T9954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.475730][ T9954] RIP: 0033:0x7fae7878e9a9
[  317.480130][ T9954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.499724][ T9954] RSP: 002b:00007fae79657038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  317.508118][ T9954] RAX: ffffffffffffffda RBX: 00007fae789b5fa0 RCX: 00007fae7878e9a9
[  317.516071][ T9954] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  317.524025][ T9954] RBP: 00007fae78810d69 R08: 0000000000000000 R09: 0000000000000000
[  317.531980][ T9954] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  317.539934][ T9954] R13: 0000000000000000 R14: 00007fae789b5fa0 R15: 00007ffdd3e7c098
[  317.547897][ T9954]  </TASK>
[  317.551096][ T9954] Kernel Offset: disabled
[  317.555401][ T9954] Rebooting in 86400 seconds..