last executing test programs:

10m40.379291015s ago: executing program 2 (id=2014):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000200000000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)

10m40.194578507s ago: executing program 2 (id=2015):
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)="a6cc")
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7}) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async)
eventfd2(0x8, 0x800) (async)
syz_open_dev$vim2m(0x0, 0x7, 0x2) (async)
chdir(0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r4=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0069ae"], 0x30}}, 0x40181)

10m39.979361327s ago: executing program 2 (id=2017):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x3, 0x0, 0x0, 0x2})
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680))
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0), 0x8800)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x320, 0x30, 0x65, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0x2}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x7})

10m39.403244461s ago: executing program 2 (id=2020):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
syz_clone3(0x0, 0x0)
syz_emit_ethernet(0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="aaffffffffff0005c08e23dbea"], 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
setfsuid(0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x1a)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x1, r0, 0x4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x8, 0x8000, 0xc0})

10m38.513735352s ago: executing program 2 (id=2028):
socket$inet(0xa, 0x801, 0x84)
kexec_load(0xf7, 0x8, &(0x7f0000000780)=[{&(0x7f0000000100)="24c5a2e326d7d398d7e35840416ad232af8f6faaa249f44523951e83ccb87bf8b74519cc0846e0747c7071f6d320571bbd62668a5d00e6b73920960845c9dc90442fcf81f6d4e328b5aaa2128a3afcda10c22eb7c2e1aeae747480fcf0575bb315769cfbb8870233add6a97f8507d476da42c34175c48fc724ce510e3231cbec74f8ed3ea4723eecf0d5885327cdd15875a897e3e6e6d07ec32872adb73b1e896a22a75f2513d8835b2d93ca9a72927470022af340", 0xb5, 0x7, 0x2}, {&(0x7f0000000040)="11cada6d094a82aadfa1686a3802780bd4cac67d584f43b0d9b1fd760c76", 0x1e, 0x3}, {&(0x7f0000000240), 0x0, 0x1, 0x8}, {&(0x7f0000000380)="0dfb37dcfa4aefac820de7700b7ce8d9b7dd304712591c92c93868e526469432bfbb000eff0491dd424f6f8fac85c73c8aad290fba14cd276e92b83871abc116f98384e51a14fd6804bed2ea84ec384f32abf6c55283baaa725ffd717dfb0ca423bfbb68499bf1071557f179e5b455", 0x6f, 0xf, 0xfffffffffffffff9}, {&(0x7f0000000500)="368c67056822787b02c99ba0d760a5ae32cd73650927b0ae5fef7e481a416ff46c373263d82880909d12f8497ab93a009ba60c6515db93c932eb48653312e7980a3a051da9b6e9a3a419a0538aec86e89b21f6a0297f8bcbe3f46178", 0x5c, 0x101, 0x1a5}, {&(0x7f0000000580)="3b3018659fc0a9cfe3f035544c4354c4bad7482d7b540687edd55f4d155aff7dff108de5942dbec49f96b4f0c9db3a3a46e65fe57588e528c58d93202d82bd2b594e7db4fbbd6b8c37f2c1b16224a8e5bc9ec641053b5bb199f0e8b2058773188c9b5c309ec95cc99da3cf326517098f520434af34e9ae6a071022615155846097259f54a4d3df3cfaa313a98b05c439c4e7602388fd4948243346469801537bdd193203657d6ddc82d8936e4f2221b65d39c72f0c33b42a9e29beb9f329cb0e8d4a10f1eb411b5b1982ca931bd80fd25a3de8f1c3", 0xd5, 0x80}, {&(0x7f0000000680)="51913d38ca7f5f6829aced162dcdb0c85d60b0bec4f7d199fd15c04eec80a92a6b7d6663c9f67ad1497ae9da4be3c8fc4b869128920b62e30c8761dd2edd7fa7538f2c89e31b682ae788ec73ed023a8025a457cdae0c5dd807b7db584b10c0ccefc00b8f0867f6fd582ffbc9002315fa0d4b001b65e9f038bdd9ed86524034e3dff78e4ff3e3f14ca66e57494930e8d8ee0ed657017a9d1a2212991777c210b1980ea18c9b4e237c7ee41fbcc87d4be5e9d7939b3c08a2173b684814a85493e6ebc587f77233ed5b13c06fe534168adec57b77f06067f2a86bb726e08848beb3685b", 0xe2, 0x0, 0x636}, {&(0x7f0000000300)="fe9064da1682cc668422ed66", 0xc, 0x8001, 0x5}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

10m37.949202066s ago: executing program 2 (id=2031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x1f00}, 0x0)

10m37.586107341s ago: executing program 32 (id=2031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x1f00}, 0x0)

5m35.025434459s ago: executing program 0 (id=2897):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
msgsnd(0x0, 0x0, 0x401, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xa, 0x800019000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000001c0)={0x1f, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

5m33.236718546s ago: executing program 0 (id=2901):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000240))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x20}}, 0x84)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="371fd7ad317466e3ddf657c979924c757586fb8332457366fdc22b75f1521d8a19af5a3e8c58783647b1e170a68658abdbb58b870132d543c395419d402f7cc5be52a2396b1c60ed34bcacc92192f1c4a205f4cc8f3f", 0x56}, {&(0x7f00000005c0)="98824a3236ce8f74fe1ad304dd55a853562826473154270689f9f1c2c6fc36a19bfbe566655e4fd389d9987b13588ca1ee946594be63129f77ce06febeefbec7938dffc50c5289ca74fca214e7479f28706200ca93978e358288d528eb0346c24c10df3136b2c69db6afaa7940ba1c4aa4e1f800a9b4402e33c0c919a5a5", 0x7e}, {&(0x7f0000000800)="8391536ca0860adb7c9a80b7a1aa61c458e188ae60c24e403d7c540864a3e9f12a5a27d740a136b5b3679fb1ce1f614b60e0620787fb3cea790b6cfd85c6eba5d0144d4be5dcdb862d2a205e2fb02ab6b52452b47aefa9555901e5d280a18ab3637f64d9f72144c0447094caa70e0bba7b73c0924d883cb343edd914fd560c58f7d4b666622490307c64bf92214b70921fd070641701573863a64654c92723af1dc48b3a917ae4d9a9dad7a5aa05c73f80a630dcc81e7fd24b4d9119b26406521ff0d254a48b1a8dbac6", 0xca}], 0x3) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
close(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f00000001c0)='\x00', r3}, 0x18) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r4]) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4121, &(0x7f0000000000)=0x1019) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007665746831741e0c77f5766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2400c040)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

5m31.452447483s ago: executing program 0 (id=2910):
syz_open_procfs(0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x220)
pipe2(&(0x7f0000000240), 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040))
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
r4 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

5m30.623806723s ago: executing program 0 (id=2911):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
msgsnd(0x0, 0x0, 0x401, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xa, 0x800019000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000001c0)={0x1f, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

5m29.603138749s ago: executing program 0 (id=2913):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5)
ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000000540)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]})
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000c00)={0xffffffffffffffff, r7, 0x1f000000})
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='smb3\x00', 0x20010, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRESDEC, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d40009807187d1febeb1ab816f"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r11)
sendmsg$TIPC_NL_LINK_RESET_STATS(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200b2}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x40c, r12, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x267f3bc7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa068}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x9, 0x7, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x142}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd2f}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21ad}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0x144, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb295}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5287}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x936a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7a9e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4ef}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x400c094}, 0x20000004)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x3d, 0x0)

5m21.8523845s ago: executing program 0 (id=2928):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4})
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
gettid()
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40, 0x0, 0xfffe}, 0xc)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
lseek(r4, 0x9, 0x0)

5m7.510579252s ago: executing program 33 (id=2928):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4})
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
gettid()
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40, 0x0, 0xfffe}, 0xc)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
lseek(r4, 0x9, 0x0)

2m37.003644907s ago: executing program 5 (id=3325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fdfffc, 0x3})

2m36.497837289s ago: executing program 5 (id=3326):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000004)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x10)
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000000c0)=0x6e)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0xbf601000)
syz_open_dev$evdev(0x0, 0x2, 0x402)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010101})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
fsopen(&(0x7f0000000080)='bpf\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040)

2m35.737556653s ago: executing program 5 (id=3327):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)

2m31.236190858s ago: executing program 5 (id=3336):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f00000000c0)=[0x0, <r1=>0xee00])
keyctl$chown(0x4, r0, 0x0, r1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000000000'], 0x86)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
dup3(r6, r5, 0x0)

2m30.160167378s ago: executing program 5 (id=3341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000440))
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x22044804}, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_pidfd_open(0x0, 0x0)
syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0)

2m29.523246265s ago: executing program 5 (id=3342):
r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
sync()
fchdir(r1)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
symlink(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='./cgroup\x00')

2m15.104771047s ago: executing program 34 (id=3342):
r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
sync()
fchdir(r1)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
symlink(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='./cgroup\x00')

1m26.098166646s ago: executing program 3 (id=3481):
r0 = syz_open_dev$video(0x0, 0x101, 0xab02)
socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

1m24.353773224s ago: executing program 3 (id=3484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x4e14, 0x913a, 0x41, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094)
socket(0x400000000010, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)

1m22.289227912s ago: executing program 3 (id=3486):
clock_gettime(0x73d120d1a3af8f7f, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
timer_create(0x0, 0x0, 0xffffffffffffffff)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getrandom(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="503fc6c6ea6150113f17c475b5940046c2144e3e47d52426f6d3c38ab98dde81f4fa68a23e93bc2e37faa4c57ebd43fcbb8db0e32b809345982e7a86f5892ce238a9c66211fdd2", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000004000880"], 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r4, 0x100000000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f0000000040)={0x0, 0x0})
ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000180))
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffeff, @empty, 0x20400}, 0x1c)
sendto$inet6(r9, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c)
pwritev2(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="6aede7e9bdb4e7ba0e6c59f8da67b761d10215c40bd2524f7c8b56a5bef4f9e7c0659b522cac7417f706e6be5c9dc3670db26cda0641733d36d3a2a0e63c69be071052976b508ba609ecf6e8819821ddad8e50db3fba1e8dc621e3b5f13ed64af6d5fe1586", 0x65}, {&(0x7f00000002c0)="506d1a30ab7bf5bdbf559809c0f39f41a9c64d9d814e7741a7904e044a005360ea8645126f64345b2c358c88a15fb6e385ab73c75e7e4ed0496f1799c0a7c9f2be7aa0178e69e5a95dbcf5256501d9a527698f27ecfaa6fb011477513ad4cb4bbd916c55", 0x64}, {&(0x7f0000000400)="7e8a8553e65b57ac86911a218b52a99728cc7ceece3222e3eaf4727e1fb6635d4d55e1df9bde29502912d37c025dbd7188edfcf7b81d4e225a296c8a0830c3b8feb64171b8be833417666361e100264adf929c9bba9996dfc08d3ee8d52b33c9fb56515160f1050bcc14cb3e1f4d0c806ac9326959d3b237e8f095540d9cd23fd87b27401d2c5d9497b3e66cd4cea027eedb4e4ddb575b4ddfa1b56a94c1117c99e517ef7118bd9ee3aa20e48cfa20f8e4fa3ecf58f99b8868675aa7c5211b87ea7b363f750db6adf747b5ac172eb1fbe5231a3b2171f03c917f923d1e69619b0b3b813bed4782e3520477dbcbe596250596fce7aae28be6", 0xf8}], 0x3, 0x7fffffff, 0x97, 0xd)

1m18.547275548s ago: executing program 3 (id=3496):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x4, 0x9, 0xcd, 0x9}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000010027bd7000fddbdf251a0000005d19291e2fedd63633c42d5665f2931df0618109f4eb4439594866c0988a0c2cc6892d49980057ab66046cbab614660134f13db478b78c96745e08000000262bbd8e0228d7e547b94575259203c13f730f46249b17939819bae66c7e4ee920a3"], 0x74}, 0x1, 0x0, 0x0, 0x4002}, 0x40000)
mkdirat(0xffffffffffffff9c, 0x0, 0x67)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc810)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='iso9660\x00', 0x21c000, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max'])
mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket(0x10, 0x3, 0x0)
pivot_root(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='./cgroup\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

1m16.535136339s ago: executing program 3 (id=3501):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x13, 0xa, &(0x7f0000000380)=@raw=[@tail_call, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3}], &(0x7f0000000400)='syzkaller\x00', 0xe42, 0x1b, &(0x7f0000000700)=""/27, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xc, 0x5a4b, 0xda2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000000c00)=[{0x1, 0x1, 0xe, 0x2}, {0x1, 0x4, 0x7, 0x2}, {0x2, 0x4, 0x4, 0x2}], 0x10, 0xc}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffb}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}]}}]}, 0x58}}, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x400)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r5, 0x8044610a, 0x0)
close(0x3)
r6 = syz_open_dev$vbi(0x0, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r7=>r6, {0x7ff}}, './file0\x00'})
clock_gettime(0x0, &(0x7f0000000580)={<r8=>0x0, <r9=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000640)=<r10=>0xffffffffffffffff)
ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000680)=@multiplanar_mmap={0x5, 0x5, 0x4, 0x100000, 0x10000, {r8, r9/1000+60000}, {0x3, 0xc, 0x6, 0x8, 0x6, 0x1, "62dcf502"}, 0x3, 0x1, {&(0x7f00000005c0)=[{0x4c2a, 0x100, {0x3}, 0x3}, {0x1, 0x3, {0x8000}, 0x8}]}, 0x3, 0x0, r10})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r11 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r13=>0x0})
add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b80900000000000000d6e24f37d5095f839fa4a3507df4f7526f2440eb988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e6125bb9a97e38b8beb84ef6d549eed", 0x89, 0xfffffffffffffffe)
sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff02181000", @ANYRES32=r13, @ANYBLOB="08000100ac1e010108000200e000000207004100ac14141e08000400e0000001080009000000010008000200ff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0)
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r14, 0x800448d4, &(0x7f00000001c0)={0x3, 0x2, '@#\x00', 0x87, 0x4})

1m15.064330521s ago: executing program 3 (id=3504):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000005e02, 0x20000000007ff, &(0x7f0000006680))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000980), 0xe)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xd, &(0x7f0000000040)=0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0)
sync()

1m0.449987413s ago: executing program 35 (id=3504):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000005e02, 0x20000000007ff, &(0x7f0000006680))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000980), 0xe)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xd, &(0x7f0000000040)=0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0)
sync()

57.224042682s ago: executing program 4 (id=3553):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x58, 0x4)
getpid()
getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000080)=""/236, &(0x7f0000000180)=0xec)
close(r0)
fcntl$getflags(r0, 0x3)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x4, [0x1, 0x3ff, 0xf, 0xbba5]}, &(0x7f0000000200)=0xc)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x1, 0x100)
ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000000280))
recvmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/117, 0x75}], 0x1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/254, 0xfe}], 0x1, &(0x7f0000000540)=""/84, 0x54}, 0x7fff}, {{&(0x7f00000005c0)=@nl=@proc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/185, 0xb9}, {&(0x7f0000000800)=""/112, 0x70}, {&(0x7f0000000880)=""/48, 0x30}], 0x5, &(0x7f0000000940)=""/155, 0x9b}}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/176, 0xb0}, {&(0x7f0000002bc0)=""/157, 0x9d}, {&(0x7f0000002c80)=""/86, 0x56}, {&(0x7f0000002d00)=""/9, 0x9}, {&(0x7f0000002d40)=""/124, 0x7c}, {&(0x7f0000002dc0)=""/210, 0xd2}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0xa, &(0x7f0000003f80)=""/37, 0x25}, 0x6}, {{&(0x7f0000003fc0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004040)=""/50, 0x32}, {&(0x7f0000004080)=""/152, 0x98}, {&(0x7f0000004140)=""/193, 0xc1}, {&(0x7f0000004240)=""/190, 0xbe}, {&(0x7f0000004300)=""/213, 0xd5}], 0x5, &(0x7f0000004480)=""/123, 0x7b}, 0x2}, {{&(0x7f0000004500)=@ieee802154, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004580)=""/178, 0xb2}, {&(0x7f0000004640)=""/72, 0x48}, {&(0x7f00000046c0)=""/210, 0xd2}, {&(0x7f00000047c0)=""/138, 0x8a}, {&(0x7f0000004880)=""/209, 0xd1}, {&(0x7f0000004980)=""/202, 0xca}], 0x6, &(0x7f0000004b00)=""/163, 0xa3}, 0xd7}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004bc0)=""/67, 0x43}, {&(0x7f0000004c40)=""/69, 0x45}], 0x2, &(0x7f0000004d00)=""/170, 0xaa}, 0x300000}], 0x7, 0x42, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000005100)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000050c0)={&(0x7f0000004fc0)={0xcc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000800)
ioctl$FE_READ_SIGNAL_STRENGTH(r1, 0x80026f47, &(0x7f0000005140))
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000005380)={0xf, &(0x7f0000005180)=[{0x1a, '\x00', @data=0x3, 0xb}, {0x3e, '\x00', @st={0x4, [{0x1, @uvalue=0x7ff}, {0x2, @uvalue=0x4}, {0x0, @uvalue=0x3}, {0x1, @svalue=0x2}]}, 0x8}, {0x33, '\x00', @data=0x3ff, 0x5}, {0x46, '\x00', @data=0x10, 0x7}, {0x20, '\x00', @data=0xe8000, 0x2}, {0x3c, '\x00', @buffer={"defc906db7746bdf23937064a1800dc17656328e31e4dde7c49bd2115e86433c", 0x20}, 0xaf1}]})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000053c0), &(0x7f0000005400)=0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005440)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000005540)=0xe8)
bind$alg(r0, &(0x7f0000005580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r3 = syz_io_uring_setup(0x20d, &(0x7f0000005600)={0x0, 0x22d0, 0x80, 0x1, 0x12c, 0x0, r0}, &(0x7f0000005680), &(0x7f00000056c0))
io_uring_enter(r3, 0x1120, 0xd4a5, 0x10, &(0x7f0000005700)={[0x1ee6000000000000]}, 0x8)
openat$audio(0xffffffffffffff9c, &(0x7f0000005740), 0x400, 0x0)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000005780)={0x4, 0x1, "808e92", 0x5f, 0x44})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000057c0), 0x240000, 0x0)
ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000005800))
ioctl$SNDCTL_TMR_START(r0, 0x5402)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000005880)={{0x1, 0x1, 0x18, <r5=>r3, {0x5}}, './file0\x00'})
ioctl$FE_READ_SIGNAL_STRENGTH(r5, 0x80026f47, &(0x7f00000058c0))
sendmsg$NFT_BATCH(r5, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0xe3004402}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x20000081)
syz_create_resource$binfmt(&(0x7f0000005a80)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x0)

57.108046835s ago: executing program 4 (id=3554):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746570000000080001"], 0xf4}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x7, {0x27, 0x100, 0x6, 0xfffffffffffffffe, 0x39}})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r2}, 0x18)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

56.810311685s ago: executing program 4 (id=3555):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

56.52861348s ago: executing program 4 (id=3556):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101402, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r4, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8)
close(r5)

55.609347232s ago: executing program 4 (id=3558):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x4, 0x9, 0xcd, 0x9}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000010027bd7000fddbdf251a0000005d19291e2fedd63633c42d5665f2931df0618109f4eb4439594866c0988a0c2cc6892d49980057ab66046cbab614660134f13db478b78c96745e08000000262bbd8e0228d7e547b94575259203c13f730f46249b17939819bae66c7e4ee920a3"], 0x74}, 0x1, 0x0, 0x0, 0x4002}, 0x40000)
mkdirat(0xffffffffffffff9c, 0x0, 0x67)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc810)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='iso9660\x00', 0x21c000, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max'])
mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
pivot_root(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='./cgroup\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

54.336920386s ago: executing program 4 (id=3561):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x40000)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0xfec5, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

39.776822939s ago: executing program 36 (id=3561):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x40000)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0xfec5, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

12.163621856s ago: executing program 1 (id=3673):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', <r0=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, 0x2, 0x20, 0x6, 0x100, 0x887e, 0x1, r0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000200)=@v2={0x3, 0x1, 0x10, 0x0, 0xe, "a10ba98afd55f23e10cbbebeb009"}, 0x17, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}}, 0x0)

11.920308101s ago: executing program 1 (id=3674):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"})
socket(0x29, 0x6, 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r4 = semget$private(0x0, 0x4, 0x96)
semop(r4, &(0x7f0000000180)=[{0x0, 0x203}], 0x1)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xee01, 0x0, 0x0, 0x0, 0x108}, 0x476f, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)

10.592134091s ago: executing program 1 (id=3676):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0x3f)
pipe2$9p(0x0, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
connect$inet6(r1, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
recvfrom$inet6(r7, &(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c)
splice(r0, &(0x7f0000000200)=0x7, r6, &(0x7f0000000240)=0xe, 0xe68, 0x9)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x20000001)
syz_open_procfs(0x0, 0x0)
ioctl$BLKTRACESTOP(r7, 0x1275, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

9.678447731s ago: executing program 1 (id=3679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000240)={0x9d0000, 0xfffffff8, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10903, 0x2, '\x00', @string=&(0x7f0000000140)=0x6}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000ec0)={0x0, 0x0, 0x80800})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60004, 0xc8)
getdents64(r3, &(0x7f0000000240)=""/253, 0xfd)
lseek(r3, 0xc3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10000000}, 0x10}, 0x94)

9.510291392s ago: executing program 6 (id=3681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x40688c5}, 0x44000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x54}, 0x1, 0x0, 0x0, 0x2004844}, 0x4000000)
r1 = socket(0x2b, 0x80801, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

9.399513465s ago: executing program 9 (id=3682):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x800000000000000, 0xf, 0x80000005}, 0x0, 0x0)

8.484396362s ago: executing program 9 (id=3683):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async, rerun: 64)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) (rerun: 64)
ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0x60, 0x8000000000000001}) (async)
ioctl$TCSBRKP(r3, 0x5425, 0x2) (async)
r4 = gettid() (async)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0x1, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})

8.39925987s ago: executing program 9 (id=3684):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc00000010000000fc00000000ffffffff000000000000000000000000000040000200000002002000000000000000000000000000000000deb235b327c5e2956dd05f83e92be02720212a4ea2b59eaeb685e2c1ef2043a8c1ac4c56002e8a84fbdba410c0bfae4a6c3701bc7d02dbea9dd8ca88c03bfd225c4ca9890c7c1c9457d6686f2ee91d787e9ffdf64efa48b4bb8e2ce4f48355c7b38a4cfccdabc6b9c331518f4c91b1a421c057d11829f100fe4b31bb014192cc28ae7f75bc11d1e48ca3ceb0d8817ab6f6d7660775e3abc1dfe403a50e8d523bcccb866135e659921b19838a534ed2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000000000000000000000b2303000000000000feffffffffffffff000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0002008c000000000000000c00080008000800008e0000"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0)
eventfd(0x401)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x60001, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x6a0, 0x0, 0x2}]})

8.108929583s ago: executing program 6 (id=3685):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x7, 0x0, 0x0, 0xfbfff024}, {0xffff, 0x0, 0x0, 0x3}]}, 0x10)
sendmmsg(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$nfc_llcp(r7, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xf, 0xbd, "4aa2940d2d313d8d264b584544b7862882233de393f57bb194a744e0bf6a373e9e4716b84800ec2b6f8ab865c3aac026c3060100", 0x29}, 0x60)
socket$phonet_pipe(0x23, 0x5, 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x12}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

7.803841857s ago: executing program 7 (id=3687):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xc}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0])
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
getpeername(r2, 0x0, &(0x7f0000000540))
r4 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
symlink(0x0, &(0x7f0000000200)='./file0\x00')
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r5, @ANYRESDEC], 0xa)

7.21640767s ago: executing program 1 (id=3688):
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
connect$inet(r2, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4046054, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
sendmsg$inet6(r0, 0x0, 0x4000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, 0xffffffffffffffff, 0x305b2000)
socket$inet6(0xa, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xf, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0x13, 0x4e, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x8, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102, @remote, @private=0xa010101]}]}}}}}}}, 0x0)

6.895742389s ago: executing program 7 (id=3689):
r0 = syz_open_dev$video(0x0, 0x101, 0xab02)
socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

6.430219126s ago: executing program 8 (id=3690):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = getpgid(r0)
getpriority(0x1, r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
rt_sigtimedwait(&(0x7f00000001c0)={[0x100000000023fa]}, 0x0, 0x0, 0x8)
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

4.990052383s ago: executing program 9 (id=3691):
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ptrace$poke(0x5, 0x0, 0x0, 0x16ac)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000000680)=[{&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/194, 0xc2}], 0x7, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000094003e850000000700", @ANYRESOCT=r3, @ANYRES32=r3, @ANYRESOCT=r4, @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4.773447707s ago: executing program 7 (id=3692):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fdfffc, 0x3})

3.832129853s ago: executing program 1 (id=3693):
syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x14f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13d, 0x1, 0x1, 0x24, 0x0, 0x10, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "32cfdabde8e6"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc, 0x6, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}, @mdlm_detail={0xdc, 0x24, 0x13, 0x7, "696bce07e1df319b41aedb27f7c086361f501dccc019cb3dcb47b453bb5a5a8cb21e80b3480742ef5b7ee68092f6e8f248fbe7ab738310e24601d34c48c2e88ddc64e32d34442218ddcf8e0f1f394946ceaabfad76ae389ce201c3b1ae24ef27d5a8cac62a7a29ea77a8d17962a58fece38f29f163ca94a27151b2c54fd58f98da0c6994585287e6a7d7f2bd73d3bcb2ef89de05c69204f19152a8974a09540743a3a00f387718727173027bc99c998c4e64245538da3f81df7aeda14d1f4a9b35010aa1fa7ecb4a1cf870dcf55bc7986ccfbd9651b531ce"}, @dmm={0x7, 0x24, 0x14, 0x3, 0xfffd}, @obex={0x5, 0x24, 0x15, 0x7}, @obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0xa, 0x24, 0x7, 0x3, 0x2, [0x10, 0x2]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xb0, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7f, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xd9, 0x9, 0x2, 0x40, 0x3}, 0xe9, &(0x7f0000000280)={0x5, 0xf, 0xe9, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7fff000, 0xf, 0x8, [0x1fe0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3e8e3b0d9d254dab30eec38820b8a211"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0xde5, 0xf1e, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x0, 0x9}, @generic={0x99, 0x10, 0x4, "97f327fe5bb5c6978c78d8737ec6bce182f18a834cfe3160906f0c4a43092f50e903496c47fce6179193f26d176873494aaed80c52145f3fa184f7d282060a7fdf425d0777ff6a31f0160cbfaa99bb148bd2e96890854d096ef823c8c244519585eb45f0772b6d1da2426991e2628e253ef76b4a7b85102a17a86b8e8bb9a959499e1e6a89b2a3cf770935e070ee3b2d4251449d340d"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "c9e74a6f41bc4925d463f563c1de64bb"}]}, 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x43f}}, {0x81, &(0x7f00000003c0)=@string={0x81, 0x3, "f8cc42d180e07a2c1a3c37cdb538a706e1aa27f14a6697565f4895848f5a9b396d7ea87f0c18aec5c47a016aa0e2c15cad5e1c81b543a868fa9e8a5abb076854ae0b0601a00373f1088b5b9c0dd5c88261011f1ba8e99cbe49650acedb2f18e7acf5de2f52f6f4054ce898bdaef59461821d48b12f64f0eab96646824c929d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xbd, &(0x7f0000000500)=@string={0xbd, 0x3, "233737d93ccc522be29424cb6ac968a578c61d495bfe3cceefc35c4a1538e98568362e587bce5df496651794bb4bebc4edf99bbc9ca6038e00615726134d1e1a31e50e79c49ce34efafcb9d3d91229f932a2b6e852923aaa89cf0785ed190e8c21e44d2011798c3463e5381690ee0664b4ed06a08ca76c8fef817ec450b0b9ee93b6d43214c4726c49b393f0e5c9e87c77d121318193df4b2758c6a4cf512494cbb3eb11e3fbc77426f707697858311baf87e8c2c0447eb60620eb"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40d}}]})

3.638856168s ago: executing program 6 (id=3694):
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
connect$inet(r2, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4046054, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
sendmsg$inet6(r0, 0x0, 0x4000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, 0xffffffffffffffff, 0x305b2000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)

3.451524418s ago: executing program 9 (id=3695):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe2(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={<r4=>0x0}, &(0x7f0000000300)=0xc)
sched_setscheduler(r4, 0x6, &(0x7f0000000040)=0x7fff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto={0x0, 0x1ffffffffffffede}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x10000000}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x6b, 0x8c, 0x1}, 0x28)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
sendmsg$inet_sctp(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@sndrcv={0x30, 0x84, 0x1, {0xa, 0x1, 0x8601, 0x1, 0xffff, 0x2, 0xffffffff, 0x3}}], 0x30, 0x40015}, 0x0)

2.969006753s ago: executing program 8 (id=3696):
prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x18, 0x0, 0x1)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
r1 = open(0x0, 0x80242, 0x1df2a23c5997fa7b)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0x400, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x3ff, 0x3fb, 0x8, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x45, 0x2, 0x9, 0xffb, 0x7, 0x10005, 0xff, 0x4, 0x15fc, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x1, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x2, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fallocate(r3, 0x0, 0x0, 0x8ffff)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)

2.921636532s ago: executing program 7 (id=3697):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x5000000, 0x3, 0x0, 0x0, r0, 0x0, 0x0, 0x16}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5, 0x3, r0, 0x0, 0x0, 0x1}])

2.163024827s ago: executing program 7 (id=3698):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000240)={0x9d0000, 0xfffffff8, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10903, 0x2, '\x00', @string=&(0x7f0000000140)=0x6}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000ec0)={0x0, 0x0, 0x80800})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60004, 0xc8)
getdents64(r3, &(0x7f0000000240)=""/253, 0xfd)
lseek(r3, 0xc3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10000000}, 0x10}, 0x94)

1.972992405s ago: executing program 7 (id=3699):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
timer_create(0x8, 0x0, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000200)={0x8, 0x63}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdde, &(0x7f00000001c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES16=r1], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000840)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070020010000000000000000000000000000140009000000653000"/56], 0x50}}, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")

1.912538517s ago: executing program 6 (id=3700):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"})
socket(0x29, 0x6, 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r4 = semget$private(0x0, 0x4, 0x96)
semop(r4, &(0x7f0000000180)=[{0x0, 0x203}], 0x1)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xee01, 0x0, 0x0, 0x0, 0x108}, 0x476f, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

1.52005629s ago: executing program 8 (id=3701):
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r2=>0x0, 0x20, 0x700, 0x2f896c46, 0xfff, {{0x15, 0x4, 0x3, 0x4, 0x54, 0x67, 0x0, 0x3e, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0x6, [{@multicast2, 0x45d}, {@local, 0x5e734843}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x82, 0x1, 0x6, [{@broadcast, 0x1}, {@private=0xa010102, 0x8001}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}]}]}}}}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000180100002020732500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000186700000b00000000000000090000008520000004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x99, &(0x7f0000000480)=""/153, 0x41100, 0x10, '\x00', r2, 0x17, r3, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0xb3a, 0x132da089}, 0x10, 0x248a2, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000600)=[{0x2, 0x4, 0x4, 0xd}, {0x2, 0x3, 0x2, 0xb}, {0x5, 0x2, 0x9, 0x9}, {0x4, 0x4, 0xc, 0xa}, {0x2, 0x5, 0x9, 0xb}, {0x3, 0x1, 0xc, 0xb}, {0x4, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x5}], 0x10, 0x5}, 0x94)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0xfffffffffffffff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r9, 0x11543}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

990.062934ms ago: executing program 8 (id=3702):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = epoll_create1(0x0)
r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
close(r3) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (rerun: 64)
shutdown(r1, 0x0) (async, rerun: 32)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1\x00', <r6=>0x0})
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r6}, {0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x100000001}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0xd4c3, @empty, 0x7}}, 0x5, 0x555e, 0x80000003, 0x3, 0xec9742544c25a00, 0x20000005, 0x7}, 0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x8, 0x2, 0x0, 0x20, 0x9, 0x6}, &(0x7f0000000040)=0x9c) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1ad1406, &(0x7f00000001c0)) (async, rerun: 64)
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r9 = fanotify_init(0xf00, 0x0)
fanotify_mark(r9, 0x1, 0x5000003a, r8, 0x0) (async)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r10, &(0x7f0000000140)='./file0\x00', r10, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
read$FUSE(r9, &(0x7f0000000f40)={0x2020}, 0x2020)

736.797878ms ago: executing program 8 (id=3703):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000440))
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x22044804}, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_pidfd_open(0x0, 0x0)
syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0)

735.271386ms ago: executing program 9 (id=3704):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x7, 0x0, 0x0, 0xfbfff024}, {0xffff, 0x0, 0x0, 0x3}]}, 0x10)
sendmmsg(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$nfc_llcp(r7, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xf, 0xbd, "4aa2940d2d313d8d264b584544b7862882233de393f57bb194a744e0bf6a373e9e4716b84800ec2b6f8ab865c3aac026c3060100", 0x29}, 0x60)
socket$phonet_pipe(0x23, 0x5, 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x12}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

221.412591ms ago: executing program 6 (id=3705):
socket$unix(0x1, 0x5, 0x0)
setuid(0xee00)
r0 = socket(0x1, 0x1, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = getpid()
sched_setscheduler(r3, 0x3, &(0x7f00000003c0)=0x4)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2, r6}, 0x94)
ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000600)={0x0, <r10=>0x0}, &(0x7f0000000640)=0xc)
mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000180)={[{@uid={'uid', 0x3d, r10}}]})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x6, 0x7, {r3}, {<r11=>0xffffffffffffffff}, 0x3fd, 0xba})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xfffffd43)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x5, 0x7, {r3}, {<r13=>0xffffffffffffffff}, 0x81, 0x7})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8)
getresgid(&(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r15=>0x0}, &(0x7f0000000280)=0xc)
setregid(r15, r15)
getgid()
fsetxattr$system_posix_acl(r9, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x2}, [{0x2, 0x0, r7}, {0x2, 0x0, r8}, {0x2, 0x2, r10}, {0x2, 0x5, r11}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x5, r12}, {0x2, 0x5, r13}, {0x2, 0x6, r14}, {0x2, 0x0, r8}], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x6c, 0x2)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)

175.318193ms ago: executing program 8 (id=3706):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4, 0x80000})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000000001000009cfce637114000780080001400000000608000240"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080)
r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6})
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$nci(r11, &(0x7f0000001180)=ANY=[@ANYBLOB="50040600d0ff41"], 0x7)

0s ago: executing program 6 (id=3707):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
fchdir(r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)
listen(r3, 0x9)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0)
syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709})
keyctl$get_persistent(0x16, 0x0, r6)
ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000240)={0x2, 0x0, @pic={0x6, 0x4, 0x3, 0x6, 0x1, 0x2, 0x5, 0xd, 0x4, 0x4, 0x0, 0xa, 0x0, 0x4, 0xc, 0xf0}})
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000303"], 0x1c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40c4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94)
gettid()
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x408202, 0x0)

kernel console output (not intermixed with test programs):

[T19030] RSP: 002b:00007f393401f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1163.624404][T19030] RAX: ffffffffffffffda RBX: 00007f3933416180 RCX: 00007f393319bf79
[ 1163.624416][T19030] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000008
[ 1163.624432][T19030] RBP: 00007f393401f090 R08: 0000000000000000 R09: 0000000000000000
[ 1163.624442][T19030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1163.624452][T19030] R13: 00007f3933416218 R14: 00007f3933416180 R15: 00007ffe3ca77768
[ 1163.624477][T19030]  </TASK>
[ 1164.391771][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3210'.
[ 1164.393142][   T30] audit: type=1400 audit(1771181755.235:73984): avc:  denied  { ioctl } for  pid=19034 comm="syz.5.3210" path="socket:[61320]" dev="sockfs" ino=61320 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1164.438822][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3210'.
[ 1164.584125][   T30] audit: type=1400 audit(1771181755.235:73985): avc:  denied  { write } for  pid=19034 comm="syz.5.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1165.341940][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1166.494551][T19059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3213'.
[ 1166.545218][T19061] FAULT_INJECTION: forcing a failure.
[ 1166.545218][T19061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1166.590840][T19061] CPU: 1 UID: 0 PID: 19061 Comm: syz.4.3216 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1166.590869][T19061] Tainted: [L]=SOFTLOCKUP
[ 1166.590876][T19061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1166.590887][T19061] Call Trace:
[ 1166.590893][T19061]  <TASK>
[ 1166.590900][T19061]  dump_stack_lvl+0x100/0x190
[ 1166.590933][T19061]  should_fail_ex.cold+0x5/0xa
[ 1166.590957][T19061]  _copy_from_user+0x2e/0xd0
[ 1166.590978][T19061]  copy_msghdr_from_user+0x9f/0x4f0
[ 1166.591007][T19061]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1166.591045][T19061]  ___sys_sendmsg+0x106/0x1e0
[ 1166.591073][T19061]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1166.591128][T19061]  __sys_sendmsg+0x170/0x220
[ 1166.591149][T19061]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1166.591186][T19061]  do_syscall_64+0x106/0xf80
[ 1166.591206][T19061]  ? clear_bhb_loop+0x40/0x90
[ 1166.591228][T19061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.591247][T19061] RIP: 0033:0x7f56c8b9bf79
[ 1166.591261][T19061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.591277][T19061] RSP: 002b:00007f56c6df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1166.591295][T19061] RAX: ffffffffffffffda RBX: 00007f56c8e15fa0 RCX: 00007f56c8b9bf79
[ 1166.591306][T19061] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1166.591317][T19061] RBP: 00007f56c6df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1166.591327][T19061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1166.591337][T19061] R13: 00007f56c8e16038 R14: 00007f56c8e15fa0 R15: 00007ffca2844e88
[ 1166.591360][T19061]  </TASK>
[ 1166.915677][T19068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3217'.
[ 1168.244581][T19068] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1169.585161][   T30] audit: type=1400 audit(1771181760.568:73986): avc:  denied  { read } for  pid=19083 comm="syz.1.3221" path="socket:[61407]" dev="sockfs" ino=61407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1169.669400][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 270 seconds
[ 1169.680199][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 270 seconds
[ 1169.691206][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 270 seconds
[ 1169.702912][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 270 seconds
[ 1169.919347][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3225'.
[ 1169.928423][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3225'.
[ 1170.974829][   T30] audit: type=1400 audit(1771181762.143:73987): avc:  denied  { read } for  pid=19107 comm="syz.4.3228" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1171.149578][   T30] audit: type=1400 audit(1771181762.143:73988): avc:  denied  { write } for  pid=19107 comm="syz.4.3228" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1171.410892][T19114] FAULT_INJECTION: forcing a failure.
[ 1171.410892][T19114] name failslab, interval 1, probability 0, space 0, times 0
[ 1171.485091][T19114] CPU: 0 UID: 0 PID: 19114 Comm: syz.4.3230 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1171.485123][T19114] Tainted: [L]=SOFTLOCKUP
[ 1171.485130][T19114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1171.485140][T19114] Call Trace:
[ 1171.485146][T19114]  <TASK>
[ 1171.485153][T19114]  dump_stack_lvl+0x100/0x190
[ 1171.485186][T19114]  should_fail_ex.cold+0x5/0xa
[ 1171.485210][T19114]  should_failslab+0xc2/0x120
[ 1171.485235][T19114]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1171.485256][T19114]  ? alloc_empty_file+0x55/0x1c0
[ 1171.485280][T19114]  alloc_empty_file+0x55/0x1c0
[ 1171.485301][T19114]  alloc_file_pseudo+0x13a/0x230
[ 1171.485322][T19114]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1171.485343][T19114]  ? _raw_spin_unlock+0x28/0x50
[ 1171.485362][T19114]  ? alloc_fd+0x476/0x790
[ 1171.485391][T19114]  __anon_inode_getfile+0xe8/0x280
[ 1171.485415][T19114]  __anon_inode_getfd+0x5c/0xe0
[ 1171.485437][T19114]  __x64_sys_fsopen+0x190/0x220
[ 1171.485461][T19114]  do_syscall_64+0x106/0xf80
[ 1171.485486][T19114]  ? clear_bhb_loop+0x40/0x90
[ 1171.485508][T19114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1171.485526][T19114] RIP: 0033:0x7f56c8b9bf79
[ 1171.485541][T19114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1171.485557][T19114] RSP: 002b:00007f56c6df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[ 1171.485574][T19114] RAX: ffffffffffffffda RBX: 00007f56c8e15fa0 RCX: 00007f56c8b9bf79
[ 1171.485585][T19114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[ 1171.485595][T19114] RBP: 00007f56c6df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1171.485605][T19114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1171.485615][T19114] R13: 00007f56c8e16038 R14: 00007f56c8e15fa0 R15: 00007ffca2844e88
[ 1171.485639][T19114]  </TASK>
[ 1173.122390][   T30] audit: type=1400 audit(1771181764.410:73989): avc:  denied  { setopt } for  pid=19136 comm="syz.6.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1175.665091][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3241'.
[ 1175.702566][T19153] dummy0: entered promiscuous mode
[ 1176.833069][T19167] mkiss: ax0: crc mode is auto.
[ 1176.835000][T19171] netlink: 'syz.6.3245': attribute type 1 has an invalid length.
[ 1176.849508][   T30] audit: type=1400 audit(1771181768.326:73990): avc:  denied  { read } for  pid=5471 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1176.974313][T19173] bond1: (slave bridge2): making interface the new active one
[ 1176.997906][T19173] bond1: (slave bridge2): Enslaving as an active interface with an up link
[ 1177.030230][T19152] dummy0: left promiscuous mode
[ 1177.049028][T19171] macvlan2: entered promiscuous mode
[ 1177.145357][T19171] macvlan2: entered allmulticast mode
[ 1177.188545][T19171] bond1: entered promiscuous mode
[ 1177.468160][T19171] bridge2: entered promiscuous mode
[ 1177.483096][T19171] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1177.495340][T19171] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1177.513152][T19171] bond1: left promiscuous mode
[ 1177.556905][T19171] bridge2: left promiscuous mode
[ 1177.625892][T19183] mkiss: ax0: crc mode is auto.
[ 1177.649146][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3246'.
[ 1178.098937][T14744] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1178.586725][T14744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1178.600974][T14744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1178.620024][T14744] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1178.654178][T14744] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1178.665473][T14744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.685852][T14744] usb 5-1: config 0 descriptor??
[ 1178.777683][T19203] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1180.298502][T14744] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd
[ 1180.358677][T14744] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1180.599674][   T30] audit: type=1400 audit(1771181772.263:73991): avc:  denied  { write } for  pid=19189 comm="syz.4.3247" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1180.602264][T19190] random: crng reseeded on system resumption
[ 1182.108321][T19245] mkiss: ax0: crc mode is auto.
[ 1182.453087][   T29] usb 5-1: reset high-speed USB device number 27 using dummy_hcd
[ 1182.478894][   T30] audit: type=1326 audit(1771181774.226:73992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1182.502627][   T30] audit: type=1326 audit(1771181774.247:73993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1182.526421][   T30] audit: type=1326 audit(1771181774.247:73994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1182.563074][   T30] audit: type=1326 audit(1771181774.247:73995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1182.741061][   T30] audit: type=1326 audit(1771181774.247:73996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1182.771037][   T30] audit: type=1326 audit(1771181774.247:73997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1182.797631][   T30] audit: type=1326 audit(1771181774.247:73998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1183.114597][   T30] audit: type=1326 audit(1771181774.247:73999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1183.235444][   T30] audit: type=1326 audit(1771181774.247:74000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1183.259445][   T30] audit: type=1326 audit(1771181774.247:74001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1183.447611][T14744] usb 5-1: USB disconnect, device number 27
[ 1184.632084][T12467] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1184.814311][T12467] usb 7-1: Using ep0 maxpacket: 32
[ 1185.043741][   T29] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1185.091637][T12467] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1185.212793][T12467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.235881][T12467] usb 7-1: config 0 descriptor??
[ 1185.320774][   T29] usb 2-1: Using ep0 maxpacket: 8
[ 1185.356673][   T29] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1185.495654][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1185.512729][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1185.541463][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1185.737041][   T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1186.488945][T12467] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1186.500986][T12467] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1186.543416][T12467] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1186.690901][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1186.700614][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1186.711743][   T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1186.756376][   T29] usb 2-1: string descriptor 0 read error: -71
[ 1186.763654][   T29] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1186.779008][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.813207][   T29] usb 2-1: config 0 descriptor??
[ 1186.876420][   T29] usb 2-1: can't set config #0, error -71
[ 1186.988390][   T29] usb 2-1: USB disconnect, device number 71
[ 1187.119668][T14744] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1187.346842][T19307] mkiss: ax0: crc mode is auto.
[ 1187.357976][T14744] usb 6-1: Using ep0 maxpacket: 32
[ 1187.384833][T14744] usb 6-1: config 7 has an invalid interface number: 123 but max is 0
[ 1187.422689][T14744] usb 6-1: config 7 has no interface number 0
[ 1187.445027][T14744] usb 6-1: config 7 interface 123 has no altsetting 0
[ 1187.473198][T14744] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be
[ 1187.499429][T14744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.525853][T14744] usb 6-1: Product: syz
[ 1187.542796][T14744] usb 6-1: Manufacturer: syz
[ 1187.562569][T14744] usb 6-1: SerialNumber: syz
[ 1187.795403][T14744] kvaser_usb 6-1:7.123: error -ENODEV: Cannot get usb endpoint(s)
[ 1187.834769][T14744] usb 6-1: USB disconnect, device number 20
[ 1187.899396][T19317] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1188.553257][   T30] kauditd_printk_skb: 33 callbacks suppressed
[ 1188.553276][   T30] audit: type=1400 audit(1771181780.609:74035): avc:  denied  { read write } for  pid=19322 comm="syz.4.3280" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1189.004813][   T30] audit: type=1400 audit(1771181780.756:74036): avc:  denied  { open } for  pid=19322 comm="syz.4.3280" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1191.173644][T19350] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1191.207347][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3291'.
[ 1191.230771][T19352] block nbd1: Unsupported socket: should be TCP or UNIX.
[ 1191.501417][T14744] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1191.853958][T14744] usb 5-1: Using ep0 maxpacket: 8
[ 1191.885258][T14744] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 1191.947334][T14744] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1191.956551][T14744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.968141][T14744] usb 5-1: Product: syz
[ 1191.974783][T14744] usb 5-1: Manufacturer: syz
[ 1191.979474][T14744] usb 5-1: SerialNumber: syz
[ 1191.991344][T14744] usb 5-1: config 0 descriptor??
[ 1192.002195][T14744] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1192.049796][T14744] usb 5-1: setting power ON
[ 1192.067789][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3288'.
[ 1192.071175][T14744] dvb-usb: bulk message failed: -22 (2/0)
[ 1192.095070][T14744] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1192.104945][T14744] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1192.113449][T14744] usb 5-1: media controller created
[ 1192.120860][T19364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1192.142565][T14744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1192.142820][T19364] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1192.159445][T14744] usb 5-1: selecting invalid altsetting 6
[ 1192.165557][T14744] usb 5-1: digital interface selection failed (-22)
[ 1192.172190][T14744] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1192.181541][T14744] usb 5-1: setting power OFF
[ 1192.186619][T14744] dvb-usb: bulk message failed: -22 (2/0)
[ 1192.206526][T14744] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1192.223550][T14744] (NULL device *): no alternate interface
[ 1192.316650][T19355] dvb-usb: bulk message failed: -22 (3/0)
[ 1192.439291][T19355] cxusb: i2c wr: len=79 is too big!
[ 1192.439291][T19355] 
[ 1192.570645][T14744] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1192.635483][T14744] usb 5-1: USB disconnect, device number 28
[ 1192.926566][T19372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1192.997093][T19374] cgroup: Bad value for 'name'
[ 1193.002161][   T30] audit: type=1400 audit(1771181785.280:74037): avc:  denied  { mounton } for  pid=19373 comm="syz.3.3296" path="/81/file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1193.042579][   T30] audit: type=1400 audit(1771181785.322:74038): avc:  denied  { name_bind 0x1000000 } for  pid=19373 comm="syz.3.3296" path="socket:[62838]" dev="sockfs" ino=62838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1194.015288][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3298'.
[ 1194.417919][T19395] mkiss: ax0: crc mode is auto.
[ 1196.140455][   T36] bond0: (slave bond_slave_0): interface is now down
[ 1197.065692][   T36] bond0: (slave bond_slave_1): interface is now down
[ 1198.413496][   T36] bond0: now running without any active interface!
[ 1198.977128][T19415] binder: 19410:19415 ioctl c0306201 200000000640 returned -22
[ 1199.442570][T19413] serio: Serial port ptm0
[ 1199.447327][T19419] netlink: 'syz.6.3306': attribute type 1 has an invalid length.
[ 1199.447349][T19419] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3306'.
[ 1199.476687][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 300 seconds
[ 1199.488822][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 300 seconds
[ 1199.616309][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 300 seconds
[ 1199.646091][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 300 seconds
[ 1199.858147][T19426] openvswitch: netlink: EtherType 0 is less than min 600
[ 1200.091078][T19438] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[ 1201.556421][T19451] mkiss: ax0: crc mode is auto.
[ 1201.862195][T19454] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[ 1203.198792][T19465] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[ 1203.659878][T14288] bond0: (slave bond_slave_0): interface is now down
[ 1204.504119][T14288] bond0: (slave bond_slave_1): interface is now down
[ 1205.026767][T19476] binder: 19473:19476 ioctl c0306201 200000000640 returned -22
[ 1205.418527][T19474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1205.485574][T14288] bond0: now running without any active interface!
[ 1205.771229][T14744] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1205.914599][T10338] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1205.942529][T14744] usb 4-1: Using ep0 maxpacket: 8
[ 1205.969824][T14744] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1205.986214][T14744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.036741][T14744] usb 4-1: Product: syz
[ 1206.044765][T14744] usb 4-1: Manufacturer: syz
[ 1206.053405][T14744] usb 4-1: SerialNumber: syz
[ 1206.060546][T14744] usb 4-1: config 0 descriptor??
[ 1206.070190][T14744] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1206.082922][T14744] dvb-usb: bulk message failed: -22 (2/0)
[ 1206.094879][T10338] usb 2-1: Using ep0 maxpacket: 8
[ 1206.107977][T10338] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1206.128873][T14744] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1206.149333][T10338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1206.164302][T10338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1206.180953][T14744] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1206.193482][T10338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1206.205185][T14744] usb 4-1: media controller created
[ 1206.215090][T10338] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1206.865838][T14744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1206.874297][T10338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1206.922358][T10338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1206.937727][T14744] cxusb: set interface failed
[ 1206.951480][T14744] dvb-usb: bulk message failed: -22 (1/0)
[ 1206.959518][T10338] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1206.976748][T10338] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1207.001669][T10338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.013756][T10338] usb 2-1: Product: syz
[ 1207.018072][T10338] usb 2-1: Manufacturer: syz
[ 1207.023454][T10338] usb 2-1: SerialNumber: syz
[ 1207.033412][T10338] usb 2-1: config 0 descriptor??
[ 1207.040491][T19484] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1207.086550][T19484] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1207.094013][T14744] DVB: Unable to find symbol mt352_attach()
[ 1207.111823][T10338] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1207.127318][T14744] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1208.333825][T14744] rc_core: IR keymap rc-dvico-portable not found
[ 1208.340216][T14744] Registered IR keymap rc-empty
[ 1208.355838][T10338] usb 2-1: USB disconnect, device number 72
[ 1208.374611][T14744] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1208.772631][T14744] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input44
[ 1208.821029][T14744] dvb-usb: schedule remote query interval to 100 msecs.
[ 1208.828080][T14744] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1208.877961][T16338] udevd[16338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1208.925716][   T30] audit: type=1400 audit(1771181801.983:74039): avc:  denied  { create } for  pid=19502 comm="syz.1.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1208.947637][   T29] dvb-usb: bulk message failed: -22 (1/0)
[ 1208.972878][T14744] usb 4-1: USB disconnect, device number 81
[ 1208.987685][T19508] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3323'.
[ 1209.082212][   T30] audit: type=1400 audit(1771181801.983:74040): avc:  denied  { listen } for  pid=19502 comm="syz.1.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1209.202326][T14744] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1209.252839][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'.
[ 1209.301215][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3332'.
[ 1209.799541][T19515] binder: 19512:19515 ioctl c0306201 200000000640 returned -22
[ 1210.236061][T19510] geneve2: entered promiscuous mode
[ 1210.284036][T19510] geneve2: entered allmulticast mode
[ 1210.777652][T19522] mkiss: ax0: crc mode is auto.
[ 1211.616148][   T30] audit: type=1400 audit(1771181804.817:74041): avc:  denied  { map } for  pid=19526 comm="syz.1.3335" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1211.816272][T19534] batman_adv: batadv0: Adding interface: dummy0
[ 1211.827362][T19534] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1211.860061][T19534] batman_adv: batadv0: Interface activated: dummy0
[ 1212.190907][T14744] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1212.372063][T14744] usb 4-1: Using ep0 maxpacket: 32
[ 1212.397177][T14744] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[ 1212.492026][T14744] usb 4-1: config 0 has no interface number 0
[ 1212.529856][T14744] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1212.570671][T19546] sp0: Synchronizing with TNC
[ 1212.578517][T14744] usb 4-1: config 0 interface 85 has no altsetting 0
[ 1212.594294][T19546] sp0: Found TNC
[ 1212.603051][T14744] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1212.625040][T14744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.652978][T14744] usb 4-1: Product: syz
[ 1212.705978][T14744] usb 4-1: Manufacturer: syz
[ 1212.766617][T14744] usb 4-1: SerialNumber: syz
[ 1212.958878][T14744] usb 4-1: config 0 descriptor??
[ 1213.188160][   T30] audit: type=1400 audit(1771181806.465:74042): avc:  denied  { mount } for  pid=19550 comm="syz.5.3342" name="/" dev="hugetlbfs" ino=63185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 1213.344914][   T29] IPVS: starting estimator thread 0...
[ 1213.352151][T19545] [U] �`
[ 1213.448481][T19554] IPVS: using max 41 ests per chain, 98400 per kthread
[ 1213.490455][T19557] FAULT_INJECTION: forcing a failure.
[ 1213.490455][T19557] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.503958][T19557] CPU: 0 UID: 0 PID: 19557 Comm: syz.4.3343 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1213.503987][T19557] Tainted: [L]=SOFTLOCKUP
[ 1213.503993][T19557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1213.504004][T19557] Call Trace:
[ 1213.504010][T19557]  <TASK>
[ 1213.504016][T19557]  dump_stack_lvl+0x100/0x190
[ 1213.504048][T19557]  should_fail_ex.cold+0x5/0xa
[ 1213.504070][T19557]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1213.504097][T19557]  should_failslab+0xc2/0x120
[ 1213.504123][T19557]  __kmalloc_noprof+0xe0/0x850
[ 1213.504150][T19557]  tomoyo_realpath_from_path+0xb6/0x690
[ 1213.504182][T19557]  tomoyo_path_number_perm+0x23c/0x580
[ 1213.504204][T19557]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1213.504229][T19557]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1213.504254][T19557]  ? __cgroup_account_cputime+0xd5/0x130
[ 1213.504302][T19557]  ? find_held_lock+0x2b/0x80
[ 1213.504323][T19557]  ? __fget_files+0x215/0x3d0
[ 1213.504348][T19557]  ? hook_file_ioctl_common+0x146/0x410
[ 1213.504372][T19557]  ? __fget_files+0x21f/0x3d0
[ 1213.504400][T19557]  security_file_ioctl+0xd3/0x230
[ 1213.504426][T19557]  __x64_sys_ioctl+0xb7/0x210
[ 1213.504450][T19557]  do_syscall_64+0x106/0xf80
[ 1213.504471][T19557]  ? clear_bhb_loop+0x40/0x90
[ 1213.504499][T19557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1213.504517][T19557] RIP: 0033:0x7f56c8b9bf79
[ 1213.504532][T19557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1213.504548][T19557] RSP: 002b:00007f56c6dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1213.504566][T19557] RAX: ffffffffffffffda RBX: 00007f56c8e16090 RCX: 00007f56c8b9bf79
[ 1213.504577][T19557] RDX: 0000200000000000 RSI: 00000000c00464b4 RDI: 0000000000000005
[ 1213.504587][T19557] RBP: 00007f56c6dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1213.504597][T19557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1213.504606][T19557] R13: 00007f56c8e16128 R14: 00007f56c8e16090 R15: 00007ffca2844e88
[ 1213.504630][T19557]  </TASK>
[ 1213.504771][T19557] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1213.685406][T14744] appletouch 4-1:0.85: Geyser mode initialized.
[ 1213.985157][T14744] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input45
[ 1214.015719][T14744] usb 4-1: USB disconnect, device number 82
[ 1214.503682][T19561] binder: 19559:19561 ioctl c0306201 200000000640 returned -22
[ 1215.023743][T14744] appletouch 4-1:0.85: input: appletouch disconnected
[ 1215.626825][T19578] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=19578 comm=syz.3.3350
[ 1216.268498][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'.
[ 1217.563209][   T30] audit: type=1400 audit(1771181811.053:74043): avc:  denied  { getopt } for  pid=19590 comm="syz.4.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1217.879145][   T30] audit: type=1400 audit(1771181811.389:74044): avc:  denied  { shutdown } for  pid=19590 comm="syz.4.3352" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1218.307809][T19596] tmpfs: Unknown parameter 'nsrquota'
[ 1218.346356][T19608] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1218.477409][T19610] 9p: Bad value for 'wfdno'
[ 1219.205550][T19613] binder: 19611:19613 ioctl c0306201 200000000640 returned -22
[ 1220.384608][T19623] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1220.630713][T19628] 9p: Bad value for 'wfdno'
[ 1221.598777][T19639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1221.605344][T19639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1221.618159][T19639] vhci_hcd vhci_hcd.0: Device attached
[ 1221.669661][T19640] vhci_hcd: connection closed
[ 1221.669906][T14290] vhci_hcd vhci_hcd.1: stop threads
[ 1221.706600][T14290] vhci_hcd vhci_hcd.1: release socket
[ 1221.725260][T14290] vhci_hcd vhci_hcd.1: disconnect device
[ 1222.135916][T19650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3364'.
[ 1222.666890][T19655] binder: 19651:19655 ioctl c0306201 200000000640 returned -22
[ 1223.221832][   T30] audit: type=1400 audit(1771181816.995:74045): avc:  denied  { create } for  pid=19659 comm="syz.1.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1223.250435][   T30] audit: type=1400 audit(1771181817.026:74046): avc:  denied  { bind } for  pid=19659 comm="syz.1.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1223.273494][T19665] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[ 1223.292864][   T30] audit: type=1400 audit(1771181817.026:74047): avc:  denied  { read } for  pid=19659 comm="syz.1.3369" path="socket:[63348]" dev="sockfs" ino=63348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1223.397350][T19660] x_tables: duplicate underflow at hook 1
[ 1223.438630][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'.
[ 1223.485176][   T30] audit: type=1400 audit(1771181817.226:74048): avc:  denied  { read } for  pid=19659 comm="syz.1.3369" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1223.507802][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'.
[ 1223.536684][T19660] netlink: 'syz.1.3369': attribute type 12 has an invalid length.
[ 1223.573122][T19660] netlink: 'syz.1.3369': attribute type 18 has an invalid length.
[ 1223.620195][   T30] audit: type=1400 audit(1771181817.226:74049): avc:  denied  { open } for  pid=19659 comm="syz.1.3369" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1223.708136][   T30] audit: type=1400 audit(1771181817.226:74050): avc:  denied  { ioctl } for  pid=19659 comm="syz.1.3369" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1223.830698][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'.
[ 1223.831687][   T30] audit: type=1400 audit(1771181817.635:74051): avc:  denied  { nlmsg_read } for  pid=19666 comm="syz.1.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1224.044580][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1224.136129][   T30] audit: type=1400 audit(1771181817.667:74052): avc:  denied  { getopt } for  pid=19666 comm="syz.1.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1224.556349][T19674] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1224.590879][ T5128] Bluetooth: hci0: unknown advertising packet type: 0x75
[ 1224.591089][ T5128] Bluetooth: hci0: Malformed LE Event: 0x02
[ 1224.712863][   T30] audit: type=1400 audit(1771181818.433:74053): avc:  denied  { connect } for  pid=19671 comm="syz.1.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1227.566311][T19690] netlink: 'syz.3.3375': attribute type 1 has an invalid length.
[ 1227.621060][T19695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3375'.
[ 1227.671074][T19694] netlink: 'syz.4.3377': attribute type 14 has an invalid length.
[ 1227.718556][T19690] bond1: (slave bridge2): making interface the new active one
[ 1227.738262][T19690] bond1: (slave bridge2): Enslaving as an active interface with an up link
[ 1227.787162][T19695] macvlan2: entered promiscuous mode
[ 1227.792487][T19695] macvlan2: entered allmulticast mode
[ 1227.832586][T19695] bond1: entered promiscuous mode
[ 1227.837642][T19695] bridge2: entered promiscuous mode
[ 1227.873382][T18712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1227.886518][T18712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1227.898631][T18712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1227.917644][T18712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1227.926553][T18712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1227.963390][   T30] audit: type=1400 audit(1771181821.971:74054): avc:  denied  { mounton } for  pid=19696 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1227.993462][T19695] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1228.015393][T19695] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1228.033626][T19695] bond1: left promiscuous mode
[ 1228.038476][T19695] bridge2: left promiscuous mode
[ 1228.220530][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 330 seconds
[ 1228.242700][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 330 seconds
[ 1228.253839][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 330 seconds
[ 1228.264874][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 330 seconds
[ 1228.920742][T19705] binder: 19703:19705 ioctl c0306201 200000000640 returned -22
[ 1229.707703][T19696] chnl_net:caif_netlink_parms(): no params data found
[ 1229.822284][T19696] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1229.848886][T19696] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1229.879145][T19696] bridge_slave_0: entered allmulticast mode
[ 1229.885140][T18712] Bluetooth: hci4: command tx timeout
[ 1229.942645][T19696] bridge_slave_0: entered promiscuous mode
[ 1229.981846][T19696] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1230.012566][T19696] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1230.045730][T19696] bridge_slave_1: entered allmulticast mode
[ 1230.075148][T19696] bridge_slave_1: entered promiscuous mode
[ 1230.325646][T19723] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1230.366424][   T30] audit: type=1400 audit(1771181824.459:74055): avc:  denied  { mounton } for  pid=19719 comm="syz.3.3382" path="/101/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1230.401993][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'.
[ 1230.435847][T19722] overlayfs: missing 'lowerdir'
[ 1230.457151][T19696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1230.494145][T19696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1230.548579][T19696] team0: Port device team_slave_0 added
[ 1230.557025][T19696] team0: Port device team_slave_1 added
[ 1230.590806][T19696] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1230.598039][T19696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1230.624496][T19696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1230.638018][T19696] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1230.653588][T19696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1230.680964][T19696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1230.731420][T19696] hsr_slave_0: entered promiscuous mode
[ 1230.738472][T19696] hsr_slave_1: entered promiscuous mode
[ 1230.744625][T19696] debugfs: 'hsr0' already exists in 'hsr'
[ 1230.752475][T19696] Cannot create hsr debugfs directory
[ 1230.766108][T17950] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1230.918270][ T5860] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1230.971851][T17950] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[ 1230.984882][T17950] usb 4-1: config 0 has no interface number 0
[ 1230.993076][T17950] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1231.871197][T18712] Bluetooth: hci4: command tx timeout
[ 1231.895776][T19696] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1231.908186][T19696] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1231.920582][T19696] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1231.934120][T19696] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1231.947582][T17950] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1231.958893][ T5860] usb 2-1: Using ep0 maxpacket: 8
[ 1231.965939][T17950] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[ 1231.980205][T17950] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[ 1231.991939][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1232.260255][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1232.271403][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1232.281344][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1232.292871][ T5860] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1232.305195][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1232.315520][T17950] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1232.324628][T17950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.348175][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[ 1232.359650][T17950] usb 4-1: Product: syz
[ 1232.363794][T17950] usb 4-1: Manufacturer: syz
[ 1232.373781][T17950] usb 4-1: SerialNumber: syz
[ 1232.378886][ T5860] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1232.390291][T17950] usb 4-1: config 0 descriptor??
[ 1232.401561][T19721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1232.409839][ T5860] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1232.423537][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.431647][ T5860] usb 2-1: Product: syz
[ 1232.440487][ T5860] usb 2-1: Manufacturer: syz
[ 1232.447310][ T5860] usb 2-1: SerialNumber: syz
[ 1232.462083][ T5860] usb 2-1: config 0 descriptor??
[ 1232.469094][T19725] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1232.478279][T19725] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1232.493829][ T5860] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1232.505987][T19696] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1232.564703][T19696] 8021q: adding VLAN 0 to HW filter on device team0
[ 1232.603437][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1232.610637][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1232.910612][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1232.917775][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1232.956813][T19721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3382'.
[ 1233.588754][T19696] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1233.843129][T18712] Bluetooth: hci4: command tx timeout
[ 1233.959040][T10338] usb 2-1: USB disconnect, device number 73
[ 1234.173943][   T30] audit: type=1400 audit(1771181828.490:74056): avc:  denied  { unmount } for  pid=17470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1234.197483][T19761] netlink: 'syz.1.3387': attribute type 1 has an invalid length.
[ 1234.274737][T19763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3387'.
[ 1234.428753][T19766] bond1: (slave bridge1): making interface the new active one
[ 1234.431297][   T30] audit: type=1400 audit(1771181828.763:74057): avc:  denied  { read } for  pid=19765 comm="syz.6.3389" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1234.501278][T19766] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1234.782834][T19773] binder: 19767:19773 ioctl c018937b 2000000005c0 returned -22
[ 1235.020819][T19763] macvlan2: entered promiscuous mode
[ 1235.033024][T19763] macvlan2: entered allmulticast mode
[ 1235.038789][   T30] audit: type=1400 audit(1771181828.763:74058): avc:  denied  { open } for  pid=19765 comm="syz.6.3389" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1235.056151][T19763] bond1: entered promiscuous mode
[ 1235.100532][T19763] bridge1: entered promiscuous mode
[ 1235.222481][T19763] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1235.290163][T19763] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1235.385747][   T30] audit: type=1400 audit(1771181829.771:74059): avc:  denied  { bind } for  pid=19765 comm="syz.6.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1235.997738][T19780] binder: 19777:19780 ioctl c0306201 200000000640 returned -22
[ 1236.580648][T19763] bond1: left promiscuous mode
[ 1236.585430][T19763] bridge1: left promiscuous mode
[ 1236.604958][T18712] Bluetooth: hci4: command tx timeout
[ 1236.630068][   T30] audit: type=1400 audit(1771181829.771:74060): avc:  denied  { name_bind } for  pid=19765 comm="syz.6.3389" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1236.739080][   T30] audit: type=1400 audit(1771181829.771:74061): avc:  denied  { node_bind } for  pid=19765 comm="syz.6.3389" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 1236.858066][T19696] veth0_vlan: entered promiscuous mode
[ 1236.935445][T19696] veth1_vlan: entered promiscuous mode
[ 1237.054159][T19696] veth0_macvtap: entered promiscuous mode
[ 1237.076142][T19696] veth1_macvtap: entered promiscuous mode
[ 1237.144433][T19696] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1237.197934][T19696] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1237.555139][T13855] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.585993][T13855] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.690952][T13855] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.723181][T13855] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.908422][T15062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1237.970496][T15062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.100093][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1238.147158][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.214550][T19797] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[ 1239.899940][   T30] audit: type=1400 audit(1771181834.506:74062): avc:  denied  { read } for  pid=19811 comm="syz.7.3397" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1239.912256][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3397'.
[ 1241.587218][   T30] audit: type=1400 audit(1771181834.506:74063): avc:  denied  { open } for  pid=19811 comm="syz.7.3397" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1241.879308][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'.
[ 1242.177714][T19827] openvswitch: netlink: EtherType 0 is less than min 600
[ 1242.470873][T19832] netlink: 'syz.4.3402': attribute type 1 has an invalid length.
[ 1242.536963][T19835] netlink: 'syz.1.3401': attribute type 7 has an invalid length.
[ 1242.545505][T19835] netlink: 'syz.1.3401': attribute type 8 has an invalid length.
[ 1242.787232][T19834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3402'.
[ 1242.941777][T19832] bond1: (slave bridge1): making interface the new active one
[ 1242.996301][T19832] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1243.333065][T19834] macvlan2: entered promiscuous mode
[ 1243.339429][T19834] macvlan2: entered allmulticast mode
[ 1243.583545][T19834] bond1: entered promiscuous mode
[ 1243.645836][T19844] netlink: 'syz.6.3403': attribute type 7 has an invalid length.
[ 1243.653706][T19844] netlink: 'syz.6.3403': attribute type 8 has an invalid length.
[ 1243.862316][T19834] bridge1: entered promiscuous mode
[ 1243.870329][T19834] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1244.039165][T19834] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1244.231123][T19834] bond1: left promiscuous mode
[ 1244.237004][T19834] bridge1: left promiscuous mode
[ 1244.501718][T10338] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1245.692488][   T30] audit: type=1400 audit(1771181840.552:74064): avc:  denied  { mounton } for  pid=19856 comm="syz.6.3408" path="/74/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1245.845621][T10338] usb 2-1: device descriptor read/64, error -71
[ 1246.092531][T10338] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1246.432568][T19866] infiniband syz1: set active
[ 1246.437395][T19866] infiniband syz1: added veth1_vlan
[ 1246.697043][T19866] RDS/IB: syz1: added
[ 1246.701144][T19866] smc: adding ib device syz1 with port count 1
[ 1246.707402][T19866] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[ 1248.965356][T12467] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1248.984774][   T13] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex
[ 1249.031291][T12467] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1249.108681][T12467] usb 7-1: USB disconnect, device number 4
[ 1249.160692][   T13] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex
[ 1249.364250][   T13] bond0: active interface up!
[ 1249.469336][T19880] FAULT_INJECTION: forcing a failure.
[ 1249.469336][T19880] name failslab, interval 1, probability 0, space 0, times 0
[ 1249.500180][T19880] CPU: 0 UID: 0 PID: 19880 Comm: syz.4.3412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1249.500200][T19880] Tainted: [L]=SOFTLOCKUP
[ 1249.500204][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1249.500211][T19880] Call Trace:
[ 1249.500215][T19880]  <TASK>
[ 1249.500220][T19880]  dump_stack_lvl+0x100/0x190
[ 1249.500241][T19880]  should_fail_ex.cold+0x5/0xa
[ 1249.500256][T19880]  ? constrain_params_by_rules+0x175/0xcc0
[ 1249.500268][T19880]  should_failslab+0xc2/0x120
[ 1249.500288][T19880]  __kmalloc_noprof+0xe0/0x850
[ 1249.500302][T19880]  ? lockdep_hardirqs_on+0x78/0x100
[ 1249.500319][T19880]  constrain_params_by_rules+0x175/0xcc0
[ 1249.500337][T19880]  ? __pfx_constrain_params_by_rules+0x10/0x10
[ 1249.500352][T19880]  ? __pfx_constrain_params_by_rules+0x10/0x10
[ 1249.500372][T19880]  snd_pcm_hw_refine+0x7e7/0xad0
[ 1249.500386][T19880]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[ 1249.500400][T19880]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[ 1249.500414][T19880]  ? snd_pcm_hw_param_value+0x27b/0x5b0
[ 1249.500434][T19880]  snd_pcm_hw_param_first+0x2b0/0x680
[ 1249.500452][T19880]  ? trace_hw_mask_param+0x84/0x240
[ 1249.500470][T19880]  snd_pcm_hw_params+0x496/0x1cb0
[ 1249.500486][T19880]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[ 1249.500499][T19880]  ? snd_pcm_hw_param_near.constprop.0+0x578/0x850
[ 1249.500519][T19880]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[ 1249.500540][T19880]  snd_pcm_kernel_ioctl+0x167/0x2e0
[ 1249.500553][T19880]  snd_pcm_oss_change_params_locked+0x1973/0x39f0
[ 1249.500578][T19880]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1249.500604][T19880]  ? get_pid_task+0xfc/0x250
[ 1249.500621][T19880]  ? get_pid_task+0xfc/0x250
[ 1249.500639][T19880]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[ 1249.500658][T19880]  snd_pcm_oss_write+0x4bb/0xa30
[ 1249.500677][T19880]  ? bpf_lsm_file_permission+0x9/0x10
[ 1249.500692][T19880]  ? security_file_permission+0x76/0x210
[ 1249.500714][T19880]  vfs_write+0x2aa/0x1070
[ 1249.500730][T19880]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1249.500749][T19880]  ? __pfx_vfs_write+0x10/0x10
[ 1249.500763][T19880]  ? find_held_lock+0x2b/0x80
[ 1249.500776][T19880]  ? __fget_files+0x215/0x3d0
[ 1249.500792][T19880]  ? __fget_files+0x215/0x3d0
[ 1249.500812][T19880]  ? __fget_files+0x21f/0x3d0
[ 1249.500832][T19880]  ksys_write+0x12a/0x250
[ 1249.500852][T19880]  ? __pfx_ksys_write+0x10/0x10
[ 1249.500872][T19880]  do_syscall_64+0x106/0xf80
[ 1249.500885][T19880]  ? clear_bhb_loop+0x40/0x90
[ 1249.500900][T19880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.500911][T19880] RIP: 0033:0x7f56c8b9bf79
[ 1249.500922][T19880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1249.500933][T19880] RSP: 002b:00007f56c6dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1249.500946][T19880] RAX: ffffffffffffffda RBX: 00007f56c8e16090 RCX: 00007f56c8b9bf79
[ 1249.500953][T19880] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000007
[ 1249.500959][T19880] RBP: 00007f56c6dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1249.500966][T19880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1249.500972][T19880] R13: 00007f56c8e16128 R14: 00007f56c8e16090 R15: 00007ffca2844e88
[ 1249.500987][T19880]  </TASK>
[ 1250.241451][T19887] tmpfs: Bad value for 'mpol'
[ 1250.560526][   T30] audit: type=1400 audit(1771181845.696:74065): avc:  denied  { name_bind } for  pid=19877 comm="syz.6.3411" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1251.903923][T17950] iguanair 4-1:0.255: failed to get version
[ 1251.915434][T17950] iguanair 4-1:0.255: probe with driver iguanair failed with error -110
[ 1251.975066][T17950] usb 4-1: USB disconnect, device number 83
[ 1252.053997][T19900] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1252.105823][   T30] audit: type=1400 audit(1771181847.303:74066): avc:  denied  { name_bind } for  pid=19897 comm="syz.4.3417" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1252.412400][T19902] netlink: 'syz.3.3418': attribute type 2 has an invalid length.
[ 1252.424060][   T30] audit: type=1400 audit(1771181847.660:74067): avc:  denied  { read write } for  pid=19901 comm="syz.3.3418" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1252.467368][   T30] audit: type=1400 audit(1771181847.660:74068): avc:  denied  { open } for  pid=19901 comm="syz.3.3418" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1252.472625][T19904] netlink: 'syz.1.3419': attribute type 1 has an invalid length.
[ 1252.492078][   T30] audit: type=1400 audit(1771181847.691:74069): avc:  denied  { create } for  pid=19901 comm="syz.3.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1252.530972][   T30] audit: type=1400 audit(1771181847.691:74070): avc:  denied  { write } for  pid=19901 comm="syz.3.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1252.547913][T19906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3419'.
[ 1252.727537][   T30] audit: type=1400 audit(1771181847.765:74071): avc:  denied  { setopt } for  pid=19901 comm="syz.3.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1253.259089][T19913] bond2: (slave bridge2): making interface the new active one
[ 1253.319333][T19913] bond2: (slave bridge2): Enslaving as an active interface with an up link
[ 1253.517565][T19904] macvlan2: entered promiscuous mode
[ 1253.523805][T19904] macvlan2: entered allmulticast mode
[ 1253.534574][T19904] bond2: entered promiscuous mode
[ 1253.551237][T19904] bridge2: entered promiscuous mode
[ 1253.608915][T19904] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1253.642017][T19904] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1253.767049][T19904] bond2: left promiscuous mode
[ 1253.797784][T19904] bridge2: left promiscuous mode
[ 1255.269618][T19927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=19927 comm=syz.3.3422
[ 1255.415918][T19931] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1255.465980][   T30] audit: type=1400 audit(1771181850.851:74072): avc:  denied  { bind } for  pid=19932 comm="syz.3.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1255.532880][   T30] audit: type=1400 audit(1771181850.903:74073): avc:  denied  { read } for  pid=19934 comm="syz.1.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1255.551537][ T5868] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1256.213489][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.237751][ T5868] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1256.257777][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1256.275045][ T5868] usb 7-1: Product: syz
[ 1256.280078][ T5868] usb 7-1: Manufacturer: syz
[ 1256.376345][ T5868] usb 7-1: SerialNumber: syz
[ 1256.383586][ T5868] usb 7-1: config 0 descriptor??
[ 1256.858520][ T5868] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1257.113388][T16334] udevd[16334]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1257.599147][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 360 seconds
[ 1257.619714][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 360 seconds
[ 1257.632856][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 360 seconds
[ 1257.643882][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 360 seconds
[ 1258.803198][T10338] usb 7-1: USB disconnect, device number 5
[ 1259.391234][T19973] netlink: 'syz.3.3437': attribute type 1 has an invalid length.
[ 1259.721426][T19966] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3434'.
[ 1259.752022][T19973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3437'.
[ 1259.878442][T19973] bond2: (slave bridge3): making interface the new active one
[ 1259.886571][T19973] bond2: (slave bridge3): Enslaving as an active interface with an up link
[ 1260.285195][T19973] macvlan2: entered promiscuous mode
[ 1260.296208][T19973] macvlan2: entered allmulticast mode
[ 1260.308761][T19973] bond2: entered promiscuous mode
[ 1260.394667][T19973] bridge3: entered promiscuous mode
[ 1260.442837][T19973] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1260.587571][T19973] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1260.620285][T19986] netlink: 'syz.6.3438': attribute type 7 has an invalid length.
[ 1260.628030][T19986] netlink: 'syz.6.3438': attribute type 8 has an invalid length.
[ 1260.653947][T19973] bond2: left promiscuous mode
[ 1260.670318][T19973] bridge3: left promiscuous mode
[ 1260.694525][T19992] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1261.711113][   T30] audit: type=1400 audit(1771181857.370:74074): avc:  denied  { create } for  pid=20000 comm="syz.3.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1261.787599][   T30] audit: type=1400 audit(1771181857.381:74075): avc:  denied  { setattr } for  pid=20000 comm="syz.3.3443" name="TIPC" dev="sockfs" ino=65320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1263.083763][T20023] MPI: mpi too large (130952 bits)
[ 1263.284768][   T30] audit: type=1400 audit(1771181859.060:74076): avc:  denied  { getopt } for  pid=20022 comm="syz.3.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1263.652921][ T5868] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1264.153071][ T5868] usb 7-1: Using ep0 maxpacket: 16
[ 1264.162159][ T5868] usb 7-1: config 0 has no interfaces?
[ 1264.182165][ T5868] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1264.235552][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.259062][T20039] netlink: 'syz.7.3451': attribute type 2 has an invalid length.
[ 1264.271214][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3451'.
[ 1264.345893][ T5868] usb 7-1: Product: syz
[ 1264.350094][ T5868] usb 7-1: Manufacturer: syz
[ 1264.363070][ T5868] usb 7-1: SerialNumber: syz
[ 1264.382870][ T5868] usb 7-1: config 0 descriptor??
[ 1264.554347][T20042] netlink: 'syz.7.3453': attribute type 1 has an invalid length.
[ 1264.574480][T20042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3453'.
[ 1264.588693][T20044] netlink: 'syz.1.3452': attribute type 7 has an invalid length.
[ 1264.596511][T20044] netlink: 'syz.1.3452': attribute type 8 has an invalid length.
[ 1264.660469][   T30] audit: type=1400 audit(1771181860.509:74077): avc:  denied  { append } for  pid=20045 comm="syz.4.3454" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1264.805281][T20048] macvlan2: entered promiscuous mode
[ 1264.810820][T20048] macvlan2: entered allmulticast mode
[ 1265.020197][   T30] audit: type=1400 audit(1771181860.814:74078): avc:  denied  { ioctl } for  pid=20045 comm="syz.4.3454" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1265.724712][ T5868] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1265.973725][ T5868] usb 4-1: Using ep0 maxpacket: 16
[ 1266.909499][ T5868] usb 4-1: config 14 has an invalid interface number: 37 but max is 0
[ 1266.922506][ T5868] usb 4-1: config 14 has no interface number 0
[ 1266.928878][ T5868] usb 4-1: config 14 interface 37 has no altsetting 0
[ 1266.936319][ T5868] usb 4-1: language id specifier not provided by device, defaulting to English
[ 1266.959180][ T5868] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=a7.4a
[ 1266.976565][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.989264][ T5868] usb 4-1: Product: 鹸玠衯ܚ髼삺㪆ᾅڗᶩ
[ 1266.999411][ T5868] usb 4-1: SerialNumber: syz
[ 1267.417143][T12467] usb 7-1: USB disconnect, device number 6
[ 1267.437429][ T5868] uvcvideo 4-1:14.37: Found UVC 0.00 device 鹸玠衯ܚ髼삺㪆ᾅڗᶩ (152d:0310)
[ 1267.493423][ T5868] uvcvideo 4-1:14.37: No valid video chain found.
[ 1267.567720][T20068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3459'.
[ 1267.591907][ T5868] usb 4-1: USB disconnect, device number 84
[ 1269.475272][T20103] netlink: 'syz.4.3466': attribute type 7 has an invalid length.
[ 1269.483250][T20103] netlink: 'syz.4.3466': attribute type 8 has an invalid length.
[ 1270.399278][T20117] rdma_rxe: rxe_newlink: failed to add syz_tun
[ 1270.751091][T20122] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[ 1273.526266][   T30] audit: type=1400 audit(1771181868.803:74079): avc:  denied  { mount } for  pid=20123 comm="syz.6.3470" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1276.679265][T14744] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1276.687393][T20162] netlink: 'syz.6.3479': attribute type 7 has an invalid length.
[ 1276.695149][T20162] netlink: 'syz.6.3479': attribute type 8 has an invalid length.
[ 1276.851039][T14744] usb 2-1: device descriptor read/64, error -71
[ 1277.117692][T14744] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1278.069969][T14744] usb 2-1: device descriptor read/64, error -71
[ 1278.242751][T14744] usb usb2-port1: attempt power cycle
[ 1278.660545][T14744] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1279.943626][T15062] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex
[ 1280.155995][T14744] usb 2-1: device not accepting address 78, error -71
[ 1280.328127][T15062] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex
[ 1280.358715][T15062] bond0: active interface up!
[ 1281.775036][   T30] audit: type=1400 audit(1771181878.461:74080): avc:  denied  { map } for  pid=20187 comm="syz.3.3486" path="socket:[66904]" dev="sockfs" ino=66904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1281.813144][T20196] block device autoloading is deprecated and will be removed.
[ 1282.020149][   T30] audit: type=1400 audit(1771181878.461:74081): avc:  denied  { read } for  pid=20187 comm="syz.3.3486" path="socket:[66904]" dev="sockfs" ino=66904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1282.262975][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3489'.
[ 1282.263264][   T30] audit: type=1400 audit(1771181878.986:74082): avc:  denied  { create } for  pid=20202 comm="syz.7.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1282.371575][T20203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3489'.
[ 1282.398510][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1283.716885][T20218] netlink: 'syz.6.3493': attribute type 7 has an invalid length.
[ 1283.725155][T20218] netlink: 'syz.6.3493': attribute type 8 has an invalid length.
[ 1283.937693][   T30] audit: type=1400 audit(1771181880.739:74083): avc:  denied  { read } for  pid=20219 comm="syz.4.3495" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1284.050856][   T30] audit: type=1400 audit(1771181880.739:74084): avc:  denied  { open } for  pid=20219 comm="syz.4.3495" path="/196/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1284.196310][   T30] audit: type=1400 audit(1771181880.739:74085): avc:  denied  { ioctl } for  pid=20219 comm="syz.4.3495" path="/196/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1284.916008][T20232] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1285.049339][T20235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'.
[ 1286.719959][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 390 seconds
[ 1286.732046][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 390 seconds
[ 1286.754457][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 390 seconds
[ 1286.771666][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 390 seconds
[ 1287.745301][T20265] netlink: 'syz.7.3503': attribute type 2 has an invalid length.
[ 1287.786571][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3503'.
[ 1288.953015][T20280] netlink: 'syz.1.3507': attribute type 7 has an invalid length.
[ 1288.960896][T20280] netlink: 'syz.1.3507': attribute type 8 has an invalid length.
[ 1290.217272][T20294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3510'.
[ 1290.284975][T20297] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication
[ 1290.924381][T20302] netlink: 'syz.7.3513': attribute type 1 has an invalid length.
[ 1290.975325][T20302] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1291.007629][T20302] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1291.145679][T20307] macvlan2: entered promiscuous mode
[ 1291.158627][T20307] macvlan2: entered allmulticast mode
[ 1291.197320][T20307] bond2: entered promiscuous mode
[ 1291.229402][T20307] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1291.256135][T20307] bond2: left promiscuous mode
[ 1291.256750][T20311] rdma_op ffff8880339f29f0 conn xmit_rdma 0000000000000000
[ 1292.874732][T20327] netlink: 'syz.6.3519': attribute type 7 has an invalid length.
[ 1292.882638][T20327] netlink: 'syz.6.3519': attribute type 8 has an invalid length.
[ 1294.981441][T20349] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[ 1295.142483][T20353] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1296.264130][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1296.393436][T20367] netlink: 'syz.4.3529': attribute type 1 has an invalid length.
[ 1296.436241][    T9] usb 7-1: config 252 has an invalid interface number: 254 but max is 0
[ 1296.444626][    T9] usb 7-1: config 252 has no interface number 0
[ 1296.474246][    T9] usb 7-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1296.492171][    T9] usb 7-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0
[ 1296.504153][    T9] usb 7-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1296.514814][    T9] usb 7-1: config 252 interface 254 has no altsetting 0
[ 1296.555436][T20369] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1296.574350][T20369] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1296.646829][    T9] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29
[ 1296.656057][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1296.664012][    T9] usb 7-1: Product: syz
[ 1297.641362][    T9] usb 7-1: Manufacturer: syz
[ 1297.646458][    T9] usb 7-1: SerialNumber: syz
[ 1297.661097][    T9] bfusb 7-1:252.254: probe with driver bfusb failed with error -5
[ 1297.681616][T20372] macvlan2: entered promiscuous mode
[ 1297.687179][T20372] macvlan2: entered allmulticast mode
[ 1297.857491][T10338] usb 7-1: USB disconnect, device number 7
[ 1298.496344][T20372] bond2: entered promiscuous mode
[ 1298.509336][T20372] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1298.520447][T20372] bond2: left promiscuous mode
[ 1298.727291][T20384] netlink: 'syz.7.3533': attribute type 7 has an invalid length.
[ 1298.735049][T20384] netlink: 'syz.7.3533': attribute type 8 has an invalid length.
[ 1299.453555][T20399] cgroup: Unknown subsys name 'euid>00000000000000000000'
[ 1299.664063][   T30] audit: type=1326 audit(1771181896.979:74086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20393 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1299.746682][T20404] netlink: 'syz.7.3538': attribute type 1 has an invalid length.
[ 1299.802656][   T30] audit: type=1326 audit(1771181896.979:74087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20393 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1299.850154][   T30] audit: type=1326 audit(1771181896.979:74088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20393 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1299.963463][   T30] audit: type=1326 audit(1771181897.252:74089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20393 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1300.045962][T20409] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1300.056718][   T30] audit: type=1326 audit(1771181897.252:74090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20393 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823d9bf79 code=0x7ffc0000
[ 1300.056767][   T30] audit: type=1400 audit(1771181897.399:74091): avc:  denied  { wake_alarm } for  pid=20405 comm="syz.4.3537" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1300.301260][   T30] audit: type=1400 audit(1771181897.903:74092): avc:  denied  { read } for  pid=20406 comm="syz.6.3539" lport=52525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1300.325583][T20409] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1300.415860][T20415] CIFS mount error: No usable UNC path provided in device string!
[ 1300.415860][T20415] 
[ 1300.426018][T20415] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1300.436912][T20415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20415 comm=syz.6.3539
[ 1300.589937][T20404] macvlan2: entered promiscuous mode
[ 1300.609214][T20404] macvlan2: entered allmulticast mode
[ 1300.646710][T20404] bond3: entered promiscuous mode
[ 1300.668397][T20404] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1300.691554][T20404] bond3: left promiscuous mode
[ 1301.288576][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3542'.
[ 1301.311302][T20428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20428 comm=syz.4.3542
[ 1301.368775][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3543'.
[ 1301.498884][T20437] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3543'.
[ 1303.271677][ T5128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1303.282355][ T5128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1303.294941][ T5128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1303.304041][ T5128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1303.311387][ T5128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1303.371917][T20451] netlink: 'syz.7.3547': attribute type 1 has an invalid length.
[ 1303.474177][T20453] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1303.490987][T20453] bond4: (slave vxcan3): Error -95 calling set_mac_address
[ 1303.621373][T20456] macvlan2: entered promiscuous mode
[ 1303.629388][T20456] macvlan2: entered allmulticast mode
[ 1303.630015][T20456] bond4: entered promiscuous mode
[ 1303.630664][T20456] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1303.634140][T20456] bond4: left promiscuous mode
[ 1303.787984][T20447] chnl_net:caif_netlink_parms(): no params data found
[ 1303.904994][T20447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.914177][T20447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1303.922227][T20447] bridge_slave_0: entered allmulticast mode
[ 1303.936185][T20447] bridge_slave_0: entered promiscuous mode
[ 1303.945303][T20447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.953410][T20447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.961708][T20447] bridge_slave_1: entered allmulticast mode
[ 1303.969325][T20447] bridge_slave_1: entered promiscuous mode
[ 1304.004816][T20447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1304.019632][T20447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.055142][T20447] team0: Port device team_slave_0 added
[ 1304.065868][T20447] team0: Port device team_slave_1 added
[ 1304.097073][T20447] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1304.104401][T20447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1304.131097][T12467] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1304.138810][T20447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1304.153423][T20447] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1304.160514][T20447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1304.187717][T20447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1304.317856][T12467] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1304.336004][T20447] hsr_slave_0: entered promiscuous mode
[ 1304.341783][T12467] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1304.353565][T20447] hsr_slave_1: entered promiscuous mode
[ 1304.359151][T12467] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1304.788903][T20447] debugfs: 'hsr0' already exists in 'hsr'
[ 1304.807074][T20447] Cannot create hsr debugfs directory
[ 1304.812916][T12467] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1304.837844][T12467] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1304.847401][T12467] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1304.856053][T12467] usb 7-1: Manufacturer: syz
[ 1304.870541][T12467] usb 7-1: config 0 descriptor??
[ 1305.019773][T20447] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1305.030312][T20447] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1305.042337][T20447] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1305.052459][T20447] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1305.136458][T20447] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1305.172693][T20447] 8021q: adding VLAN 0 to HW filter on device team0
[ 1305.194767][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1305.201934][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1305.234229][T20069] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1305.241389][T20069] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1305.277130][T12467] appleir 0003:05AC:8243.000A: unknown main item tag 0x0
[ 1305.303145][T20447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1305.318568][T12467] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 1305.331182][T18712] Bluetooth: hci6: command tx timeout
[ 1305.475131][   T29] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1305.548032][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3554'.
[ 1305.588499][T20447] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1305.637586][   T29] usb 2-1: Using ep0 maxpacket: 8
[ 1305.648418][   T29] usb 2-1: config 53 has an invalid interface number: 242 but max is 3
[ 1305.676017][   T29] usb 2-1: config 53 has an invalid interface number: 108 but max is 3
[ 1305.684325][   T29] usb 2-1: config 53 contains an unexpected descriptor of type 0x2, skipping
[ 1305.733885][   T29] usb 2-1: config 53 has an invalid interface number: 154 but max is 3
[ 1305.761253][   T29] usb 2-1: config 53 contains an unexpected descriptor of type 0x1, skipping
[ 1305.789817][   T29] usb 2-1: config 53 has an invalid interface number: 43 but max is 3
[ 1305.798034][   T29] usb 2-1: config 53 has no interface number 0
[ 1305.830250][   T29] usb 2-1: config 53 has no interface number 1
[ 1305.836445][   T29] usb 2-1: config 53 has no interface number 2
[ 1305.865371][   T29] usb 2-1: config 53 has no interface number 3
[ 1305.896637][   T29] usb 2-1: config 53 interface 108 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32
[ 1305.925998][   T29] usb 2-1: config 53 interface 108 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1305.940400][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'.
[ 1305.951995][   T29] usb 2-1: config 53 interface 154 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64
[ 1305.966779][   T29] usb 2-1: config 53 interface 154 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 1305.967896][T20501] block nbd1: Unsupported socket: should be TCP or UNIX.
[ 1305.978021][   T29] usb 2-1: config 53 interface 154 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1305.990179][T20447] veth0_vlan: entered promiscuous mode
[ 1306.003394][   T29] usb 2-1: config 53 interface 154 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1306.003428][   T29] usb 2-1: config 53 interface 154 altsetting 6 endpoint 0xA has invalid maxpacket 33103, setting to 64
[ 1306.003452][   T29] usb 2-1: config 53 interface 154 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[ 1306.003486][   T29] usb 2-1: config 53 interface 43 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[ 1306.003507][   T29] usb 2-1: config 53 interface 242 has no altsetting 0
[ 1306.003524][   T29] usb 2-1: config 53 interface 108 has no altsetting 0
[ 1306.003538][   T29] usb 2-1: config 53 interface 154 has no altsetting 0
[ 1306.003554][   T29] usb 2-1: config 53 interface 43 has no altsetting 0
[ 1306.010981][   T29] usb 2-1: New USB device found, idVendor=05e0, idProduct=200a, bcdDevice=60.88
[ 1306.045760][T20447] veth1_vlan: entered promiscuous mode
[ 1306.092426][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.102915][   T29] usb 2-1: Product: syz
[ 1306.104812][ T5860] usb 7-1: USB disconnect, device number 8
[ 1306.108041][   T29] usb 2-1: Manufacturer: syz
[ 1306.135858][   T29] usb 2-1: SerialNumber: syz
[ 1306.280617][T20447] veth0_macvtap: entered promiscuous mode
[ 1306.294904][T20447] veth1_macvtap: entered promiscuous mode
[ 1306.313015][T20447] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1306.337837][T20447] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1306.589103][   T30] audit: type=1400 audit(1771181904.517:74093): avc:  denied  { bind } for  pid=20479 comm="syz.1.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1306.618422][   T30] audit: type=1400 audit(1771181904.548:74094): avc:  denied  { connect } for  pid=20479 comm="syz.1.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1306.678195][   T80] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.687122][   T80] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.701366][   T80] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.710568][   T80] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.736329][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1306.750140][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1306.800061][T13855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1306.817276][T13855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1307.313556][T18712] Bluetooth: hci6: command tx timeout
[ 1307.575183][T20522] /dev/nullb0: Can't open blockdev
[ 1308.203467][T20528] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[ 1308.257759][T20528] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1308.337187][   T29] usb 2-1: USB disconnect, device number 80
[ 1308.343853][T20528] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1308.635340][T20535] macvlan2: entered promiscuous mode
[ 1308.660599][T20535] macvlan2: entered allmulticast mode
[ 1308.688246][T20535] bond3: entered promiscuous mode
[ 1308.721425][T20535] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1308.767704][T20535] bond3: left promiscuous mode
[ 1308.939212][T20541] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3562'.
[ 1309.371289][T18712] Bluetooth: hci6: command tx timeout
[ 1309.535493][T20547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3563'.
[ 1309.639553][T20549] loop7: detected capacity change from 0 to 8
[ 1309.695615][T18084] blk_print_req_error: 6 callbacks suppressed
[ 1309.695630][T18084] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1309.793828][T18084] buffer_io_error: 6 callbacks suppressed
[ 1309.793846][T18084] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1309.816123][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1309.841185][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1309.849397][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1309.859059][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1309.868692][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1309.879124][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1309.887265][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1309.896905][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1310.125947][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1310.146949][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1310.156172][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1310.166790][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1310.175110][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1310.184765][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1310.192751][T20549] ldm_validate_partition_table(): Disk read failed.
[ 1310.200405][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1310.210159][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1310.218321][T20549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1310.227946][T20549] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1310.250344][T20549] Dev loop7: unable to read RDB block 0
[ 1310.372799][T20549]  loop7: unable to read partition table
[ 1310.378606][T20549] loop7: partition table beyond EOD, truncated
[ 1310.392355][T20549] loop_reread_partitions: partition scan of loop7 (����	����C�j̖�P=ý?�}X�
) failed (rc=-5)
[ 1311.622397][T18712] Bluetooth: hci6: command tx timeout
[ 1311.791757][T20566] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3567'.
[ 1312.245688][T20581] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3571'.
[ 1312.334076][T20581] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3571'.
[ 1313.011455][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3573'.
[ 1313.804871][T20612] usb usb8: usbfs: process 20612 (syz.7.3575) did not claim interface 0 before use
[ 1314.112995][T20615] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1314.956962][   T30] audit: type=1400 audit(1771181913.304:74095): avc:  denied  { ioctl } for  pid=20609 comm="syz.8.3577" path="socket:[69116]" dev="sockfs" ino=69116 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1316.091293][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 420 seconds
[ 1316.102847][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 420 seconds
[ 1316.125232][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 420 seconds
[ 1316.136617][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 420 seconds
[ 1317.151103][   T30] audit: type=1400 audit(1771181915.067:74096): avc:  denied  { getopt } for  pid=20626 comm="syz.6.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1318.917861][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3582'.
[ 1319.006401][   T30] audit: type=1400 audit(1771181917.555:74097): avc:  denied  { getopt } for  pid=20653 comm="syz.8.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1319.036261][T20654] netlink: 268 bytes leftover after parsing attributes in process `syz.8.3587'.
[ 1319.049967][T20654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20654 comm=syz.8.3587
[ 1319.073302][T20655] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication
[ 1319.260505][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3589'.
[ 1319.506431][T14744] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1319.660467][T14744] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1319.683694][T14744] usb 9-1: config 12 has an invalid interface number: 251 but max is 0
[ 1319.705257][T14744] usb 9-1: config 12 has no interface number 0
[ 1319.720959][T14744] usb 9-1: config 12 interface 251 has no altsetting 0
[ 1319.943574][T20662] lo speed is unknown, defaulting to 1000
[ 1319.950362][T20662] lo speed is unknown, defaulting to 1000
[ 1319.956507][T20662] lo speed is unknown, defaulting to 1000
[ 1320.037118][T20662] infiniband syz0: set down
[ 1320.041671][T20662] infiniband syz0: added lo
[ 1320.047601][ T5879] lo speed is unknown, defaulting to 1000
[ 1320.067619][T20662] RDS/IB: syz0: added
[ 1320.071714][T20662] smc: adding ib device syz0 with port count 1
[ 1320.078947][T20662] smc:    ib device syz0 port 1 has no pnetid
[ 1320.097673][T20662] lo speed is unknown, defaulting to 1000
[ 1320.190923][T20662] lo speed is unknown, defaulting to 1000
[ 1320.281202][T20662] lo speed is unknown, defaulting to 1000
[ 1320.372827][T20662] lo speed is unknown, defaulting to 1000
[ 1320.464768][T20662] lo speed is unknown, defaulting to 1000
[ 1320.556830][T20662] lo speed is unknown, defaulting to 1000
[ 1320.678342][T20662] lo speed is unknown, defaulting to 1000
[ 1320.698342][   T24] lo speed is unknown, defaulting to 1000
[ 1320.738110][T14744] usb 9-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=83.04
[ 1320.748123][T14744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1320.756382][T14744] usb 9-1: Product: syz
[ 1320.760547][T14744] usb 9-1: Manufacturer: syz
[ 1320.895902][T14744] usb 9-1: SerialNumber: syz
[ 1320.999869][T20662] lo speed is unknown, defaulting to 1000
[ 1322.241117][T14744] gspca_main: spca501-2.14.0 probing 0506:00df
[ 1322.680987][T14744] gspca_spca501: reg write: error -71
[ 1322.708768][T14744] spca501 9-1:12.251: Reg write failed for 0x00,0xaa,0x00
[ 1322.719745][   T30] audit: type=1400 audit(1771181921.450:74098): avc:  denied  { write } for  pid=20671 comm="syz.6.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1322.743224][T14744] spca501 9-1:12.251: probe with driver spca501 failed with error -22
[ 1322.764899][T14744] usb 9-1: USB disconnect, device number 2
[ 1322.827667][   T30] audit: type=1400 audit(1771181921.566:74099): avc:  denied  { append } for  pid=20681 comm="syz.7.3595" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1322.971206][T20685] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1323.207945][T17950] IPVS: starting estimator thread 0...
[ 1323.383198][T20686] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1323.469338][   T30] audit: type=1400 audit(1771181922.238:74100): avc:  denied  { map } for  pid=20689 comm="syz.1.3598" path="socket:[69988]" dev="sockfs" ino=69988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1323.554951][   T30] audit: type=1400 audit(1771181922.238:74101): avc:  denied  { read accept } for  pid=20689 comm="syz.1.3598" path="socket:[69988]" dev="sockfs" ino=69988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1323.655270][ T5128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1323.666079][ T5128] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1323.674587][ T5128] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1323.682353][ T5128] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1323.692429][ T5128] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1323.988645][T20700] netlink: 'syz.6.3601': attribute type 1 has an invalid length.
[ 1324.021629][T14744] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[ 1324.024430][T20700] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1324.058554][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3601'.
[ 1324.133933][   T30] audit: type=1326 audit(1771181922.941:74102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20699 comm="syz.6.3601" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe823d9bf79 code=0x0
[ 1324.177305][T14744] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[ 1324.185656][T14744] usb 2-1: config 0 has no interface number 0
[ 1324.192048][T14744] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1324.213415][T14744] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1324.223085][T14744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.227453][T20694] lo speed is unknown, defaulting to 1000
[ 1324.231133][T14744] usb 2-1: Product: syz
[ 1324.231152][T14744] usb 2-1: Manufacturer: syz
[ 1324.231164][T14744] usb 2-1: SerialNumber: syz
[ 1324.256626][T14744] usb 2-1: config 0 descriptor??
[ 1324.262842][T20698] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1324.274556][T14744] usb-storage 2-1:0.20: USB Mass Storage device detected
[ 1324.292101][T14744] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[ 1324.480267][T14744] scsi host1: usb-storage 2-1:0.20
[ 1324.523701][T14744] usb 2-1: USB disconnect, device number 81
[ 1324.578101][T20694] chnl_net:caif_netlink_parms(): no params data found
[ 1324.689860][T20694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1324.697199][T20694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1324.704502][T20694] bridge_slave_0: entered allmulticast mode
[ 1324.712128][T20694] bridge_slave_0: entered promiscuous mode
[ 1324.720718][T20694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1324.728052][T20694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1324.735347][T20694] bridge_slave_1: entered allmulticast mode
[ 1324.743167][T20694] bridge_slave_1: entered promiscuous mode
[ 1324.795797][T20694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1324.816331][T20694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1324.863365][T20694] team0: Port device team_slave_0 added
[ 1324.871583][T20694] team0: Port device team_slave_1 added
[ 1324.885590][   T30] audit: type=1400 audit(1771181923.728:74103): avc:  denied  { create } for  pid=20713 comm="syz.6.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1324.900243][T20694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1324.912835][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1324.943031][T20694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1324.963819][T20694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1324.971361][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1325.001112][T20694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1325.123498][T20694] hsr_slave_0: entered promiscuous mode
[ 1325.131981][T20694] hsr_slave_1: entered promiscuous mode
[ 1325.141051][T20694] debugfs: 'hsr0' already exists in 'hsr'
[ 1325.158420][T20694] Cannot create hsr debugfs directory
[ 1325.442774][T20717] rdma_rxe: rxe_newlink: failed to add lo
[ 1325.562890][T20724] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1325.627308][T20694] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1325.689281][T18712] Bluetooth: hci7: command tx timeout
[ 1325.930479][T20694] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1325.960877][T20694] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1325.998775][T20694] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1326.267472][T20740] netlink: 'syz.8.3608': attribute type 2 has an invalid length.
[ 1326.296909][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3608'.
[ 1326.299407][T20694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1326.379577][T20694] 8021q: adding VLAN 0 to HW filter on device team0
[ 1326.413618][T14295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1326.420846][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1326.446133][T13855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1326.453277][T13855] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1327.039801][T20746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3609'.
[ 1327.639505][T20694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1327.656347][T18712] Bluetooth: hci7: command tx timeout
[ 1328.012829][   T30] audit: type=1400 audit(1771181927.014:74104): avc:  denied  { load_policy } for  pid=20759 comm="syz.1.3613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1328.034447][T20775] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[ 1328.138598][T20775] SELinux: failed to load policy
[ 1329.464535][T20694] veth0_vlan: entered promiscuous mode
[ 1329.670994][T18712] Bluetooth: hci7: command tx timeout
[ 1330.259748][T20694] veth1_vlan: entered promiscuous mode
[ 1330.547199][T20694] veth0_macvtap: entered promiscuous mode
[ 1330.562636][T20694] veth1_macvtap: entered promiscuous mode
[ 1330.608569][T20694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1330.639902][T20694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1330.679524][T14295] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.699451][T14295] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.721592][T14295] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.740242][T14295] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.938202][T13855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1330.962639][T13855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1331.011439][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1331.026190][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1331.614454][T18712] Bluetooth: hci7: command tx timeout
[ 1334.003432][T20828] siw: device registration error -23
[ 1334.034860][   T30] audit: type=1400 audit(1771181933.313:74105): avc:  denied  { map } for  pid=20832 comm="syz.8.3626" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1334.157043][    T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1334.209341][   T30] audit: type=1400 audit(1771181933.313:74106): avc:  denied  { execute } for  pid=20832 comm="syz.8.3626" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1334.261871][   T30] audit: type=1400 audit(1771181933.523:74107): avc:  denied  { getopt } for  pid=20834 comm="syz.8.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1334.328112][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1334.335393][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1334.359288][    T9] usb 2-1: config 8 has an invalid interface number: 184 but max is 0
[ 1334.377174][    T9] usb 2-1: config 8 has no interface number 0
[ 1334.394398][    T9] usb 2-1: config 8 interface 184 has no altsetting 0
[ 1334.428390][    T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= d.3d
[ 1334.456087][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1334.510790][    T9] usb 2-1: Product: syz
[ 1334.555592][    T9] usb 2-1: Manufacturer: syz
[ 1334.566376][    T9] usb 2-1: SerialNumber: syz
[ 1334.792697][T20844] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3630'.
[ 1335.252287][T20844] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3630'.
[ 1335.263438][T20844] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3630'.
[ 1335.290603][   T30] audit: type=1400 audit(1771181934.625:74108): avc:  denied  { write } for  pid=20843 comm="syz.8.3630" path="socket:[70856]" dev="sockfs" ino=70856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1336.348425][    T9] usb 2-1: USB disconnect, device number 82
[ 1336.537878][T16733] udevd[16733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.184/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1336.604101][T20851] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3632'.
[ 1338.269121][T20880] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1338.609135][T20885] 9p: Bad value for 'wfdno'
[ 1340.724153][T20908] overlayfs: missing 'lowerdir'
[ 1340.849567][T20911] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1340.914411][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1341.351409][   T30] audit: type=1400 audit(1771181941.018:74109): avc:  denied  { block_suspend } for  pid=20905 comm="syz.1.3644" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1341.418003][   T30] audit: type=1400 audit(1771181941.060:74110): avc:  denied  { read } for  pid=20905 comm="syz.1.3644" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1341.441619][T18712] Bluetooth: hci0: unexpected event for opcode 0x2027
[ 1341.569381][   T30] audit: type=1400 audit(1771181941.060:74111): avc:  denied  { watch } for  pid=20905 comm="syz.1.3644" path="/111/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1342.884839][   T30] audit: type=1400 audit(1771181942.520:74112): avc:  denied  { watch } for  pid=20936 comm="syz.7.3652" path="/54" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1343.091797][   T30] audit: type=1400 audit(1771181942.824:74113): avc:  denied  { setopt } for  pid=20926 comm="syz.8.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1343.158461][   T30] audit: type=1400 audit(1771181942.877:74114): avc:  denied  { write } for  pid=20926 comm="syz.8.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1343.396579][T20943] netlink: 'syz.9.3651': attribute type 7 has an invalid length.
[ 1343.404439][T20943] netlink: 'syz.9.3651': attribute type 8 has an invalid length.
[ 1344.177862][    T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 1344.399662][    T9] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1344.452205][    T9] usb 7-1: config 0 has no interface number 0
[ 1344.492496][    T9] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1344.578053][    T9] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1344.646489][    T9] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1344.701916][    T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1344.758996][    T9] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1344.797165][    T9] usb 7-1: Product: syz
[ 1344.818744][T20954] openvswitch: netlink: EtherType 0 is less than min 600
[ 1344.837705][    T9] usb 7-1: SerialNumber: syz
[ 1344.874181][    T9] usb 7-1: config 0 descriptor??
[ 1344.940974][    T9] cm109 7-1:0.8: invalid payload size 0, expected 4
[ 1344.996396][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input47
[ 1345.091526][   T30] audit: type=1326 audit(1771181944.934:74115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20955 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393319bf79 code=0x7ffc0000
[ 1345.181599][T15661] block nbd0: Possible stuck request ffff888027378000: control (read@0,1024B). Runtime 450 seconds
[ 1345.193516][T15661] block nbd0: Possible stuck request ffff888027378200: control (read@1024,1024B). Runtime 450 seconds
[ 1345.204627][T15661] block nbd0: Possible stuck request ffff888027378400: control (read@2048,1024B). Runtime 450 seconds
[ 1345.215683][T15661] block nbd0: Possible stuck request ffff888027378600: control (read@3072,1024B). Runtime 450 seconds
[ 1345.236127][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1345.274489][   T30] audit: type=1326 audit(1771181944.976:74116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20955 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393319bf79 code=0x7ffc0000
[ 1345.451864][   T30] audit: type=1326 audit(1771181944.976:74117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20955 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f393319bf79 code=0x7ffc0000
[ 1345.451907][   T30] audit: type=1326 audit(1771181945.029:74118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20955 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393319bf79 code=0x7ffc0000
[ 1345.902955][T20963] trusted_key: encrypted_key: master key parameter 'ḣ,\mX�1Պh��' is invalid
[ 1346.288362][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.297243][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.304379][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.311491][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.318586][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.325684][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.332790][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.340280][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.347840][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.355260][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1346.369363][T14744] usb 7-1: USB disconnect, device number 9
[ 1346.369511][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1346.520120][T20965] 9p: Bad value for 'wfdno'
[ 1346.634234][T14744] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1347.772058][ T5128] Bluetooth: hci4: command 0x0406 tx timeout
[ 1349.229257][T21002] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3668'.
[ 1349.473948][T12467] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1349.596585][T21008] netlink: 'syz.7.3670': attribute type 7 has an invalid length.
[ 1349.604698][T21008] netlink: 'syz.7.3670': attribute type 8 has an invalid length.
[ 1349.765738][T12467] usb 7-1: Using ep0 maxpacket: 8
[ 1349.904623][T12467] usb 7-1: New USB device found, idVendor=446d, idProduct=0896, bcdDevice=3a.11
[ 1349.913867][T12467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.924874][T12467] usb 7-1: Product: syz
[ 1349.939160][T12467] usb 7-1: Manufacturer: syz
[ 1349.945117][T12467] usb 7-1: SerialNumber: syz
[ 1349.962994][T12467] usb 7-1: config 0 descriptor??
[ 1350.376167][T21013] netlink: 'syz.8.3672': attribute type 1 has an invalid length.
[ 1350.435818][T21013] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1350.499019][T21013] bond1: (slave vxcan3): Error -95 calling set_mac_address
[ 1350.549937][   T30] kauditd_printk_skb: 47 callbacks suppressed
[ 1350.549950][   T30] audit: type=1400 audit(1771181950.666:74166): avc:  denied  { setattr } for  pid=21016 comm="syz.1.3673" name="NETLINK" dev="sockfs" ino=71145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1350.608805][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'.
[ 1350.888754][T21030] openvswitch: netlink: EtherType 0 is less than min 600
[ 1351.544722][T21015] macvlan2: entered promiscuous mode
[ 1351.603365][T21015] macvlan2: entered allmulticast mode
[ 1351.616179][T21015] bond1: entered promiscuous mode
[ 1351.633082][T21034] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[ 1351.639607][T21034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1351.652591][T21015] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1351.703991][T21034] vhci_hcd vhci_hcd.0: Device attached
[ 1351.711383][T21015] bond1: left promiscuous mode
[ 1351.726640][T21037] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(11)
[ 1351.733241][T21037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1351.745195][T21037] vhci_hcd vhci_hcd.0: Device attached
[ 1351.789204][T21034] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(10)
[ 1351.795829][T21034] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1351.840039][T21037] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(15)
[ 1351.846646][T21037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1351.859159][T21034] vhci_hcd vhci_hcd.0: Device attached
[ 1351.879150][T21037] vhci_hcd vhci_hcd.0: Device attached
[ 1351.880750][T21034] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(14)
[ 1351.891248][T21034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1351.932093][   T24] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[ 1351.932138][T21034] vhci_hcd vhci_hcd.0: Device attached
[ 1353.036982][T10338] usb 7-1: USB disconnect, device number 10
[ 1353.359724][T21063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3681'.
[ 1354.744323][T21040] vhci_hcd: connection closed
[ 1354.748488][T21042] vhci_hcd: connection closed
[ 1354.761225][T21038] vhci_hcd: connection closed
[ 1354.766766][T21044] vhci_hcd: connection closed
[ 1354.780520][T21035] vhci_hcd: connection reset by peer
[ 1354.793495][   T13] vhci_hcd vhci_hcd.7: stop threads
[ 1354.821415][   T13] vhci_hcd vhci_hcd.7: release socket
[ 1354.840083][   T13] vhci_hcd vhci_hcd.7: disconnect device
[ 1355.400685][   T13] vhci_hcd vhci_hcd.7: stop threads
[ 1355.405919][   T13] vhci_hcd vhci_hcd.7: release socket
[ 1355.437276][   T13] vhci_hcd vhci_hcd.7: disconnect device
[ 1355.464450][T21086] openvswitch: netlink: EtherType 0 is less than min 600
[ 1355.521229][   T13] vhci_hcd vhci_hcd.7: stop threads
[ 1355.546941][   T13] vhci_hcd vhci_hcd.7: release socket
[ 1355.567042][   T13] vhci_hcd vhci_hcd.7: disconnect device
[ 1355.575044][T21088] netlink: 'syz.6.3685': attribute type 7 has an invalid length.
[ 1355.582922][T21088] netlink: 'syz.6.3685': attribute type 8 has an invalid length.
[ 1355.640865][   T13] vhci_hcd vhci_hcd.7: stop threads
[ 1355.662016][   T13] vhci_hcd vhci_hcd.7: release socket
[ 1355.688120][   T13] vhci_hcd vhci_hcd.7: disconnect device
[ 1355.704786][   T13] vhci_hcd vhci_hcd.7: stop threads
[ 1355.719152][   T13] vhci_hcd vhci_hcd.7: release socket
[ 1355.744931][   T13] vhci_hcd vhci_hcd.7: disconnect device
[ 1356.894530][   T24] vhci_hcd vhci_hcd.7: vhci_device speed not set
[ 1358.013784][   T30] audit: type=1400 audit(1771181958.498:74167): avc:  denied  { create } for  pid=21099 comm="syz.1.3688" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1358.017344][   T30] audit: type=1400 audit(1771181958.508:74168): avc:  denied  { associate } for  pid=21099 comm="syz.1.3688" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[ 1358.609304][   T30] audit: type=1400 audit(1771181958.624:74169): avc:  denied  { mounton } for  pid=21099 comm="syz.1.3688" path="/119/file0" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1358.799818][   T30] audit: type=1400 audit(1771181958.645:74170): avc:  denied  { setattr } for  pid=21099 comm="syz.1.3688" name="work" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1359.041320][   T30] audit: type=1400 audit(1771181958.645:74171): avc:  denied  { write } for  pid=21099 comm="syz.1.3688" name="work" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1359.183089][   T30] audit: type=1400 audit(1771181958.666:74172): avc:  denied  { write open } for  pid=21099 comm="syz.1.3688" path=2F202864656C6574656429 dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1359.341598][   T30] audit: type=1400 audit(1771181958.676:74173): avc:  denied  { write } for  pid=21099 comm="syz.1.3688" name="work" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1359.736862][   T30] audit: type=1400 audit(1771181958.676:74174): avc:  denied  { add_name } for  pid=21099 comm="syz.1.3688" name="#1e" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1359.876737][   T30] audit: type=1400 audit(1771181958.687:74175): avc:  denied  { create } for  pid=21099 comm="syz.1.3688" name="#1e" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[ 1360.212722][   T30] audit: type=1400 audit(1771181958.697:74176): avc:  denied  { write } for  pid=21099 comm="syz.1.3688" name="work" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[ 1360.853569][T21132] openvswitch: netlink: EtherType 0 is less than min 600
[ 1361.341996][T21140] ip6tnl1: entered promiscuous mode
[ 1361.401118][   T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1361.652503][   T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1361.679480][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1361.709987][   T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1361.747951][   T24] usb 2-1: config 1 has no interface number 1
[ 1361.764422][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1361.807532][   T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1361.871274][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1361.890339][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.060096][   T24] usb 2-1: Product: syz
[ 1362.064430][   T24] usb 2-1: Manufacturer: syz
[ 1362.343269][T21154] netlink: 'syz.9.3704': attribute type 7 has an invalid length.
[ 1362.351022][T21154] netlink: 'syz.9.3704': attribute type 8 has an invalid length.
[ 1362.364135][   T24] usb 2-1: SerialNumber: syz
[ 1362.584180][T21135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1362.608521][T21135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1362.666114][   T24] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0
[ 1362.697143][   T24] usb 2-1: MIDIStreaming interface descriptor not found
[ 1362.822287][   T24] usb 2-1: USB disconnect, device number 83
[ 1362.857810][   T31] INFO: task syz.5.3342:19551 blocked for more than 143 seconds.
[ 1362.885376][   T31]       Tainted: G             L      syzkaller #0
[ 1362.895498][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1362.904204][   T31] task:syz.5.3342      state:D stack:28136 pid:19551 tgid:19550 ppid:15174  task_flags:0x400140 flags:0x00080002
[ 1362.912399][T21169] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3706'.
[ 1362.924655][ T5868] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[ 1362.935712][T20268] udevd[20268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1362.960457][   T31] Call Trace:
[ 1362.973615][   T31]  <TASK>
[ 1362.976581][   T31]  __schedule+0xfee/0x60e0
[ 1362.999668][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1363.018906][   T31]  ? __pfx___schedule+0x10/0x10
[ 1363.041430][   T31]  ? find_held_lock+0x2b/0x80
[ 1363.065638][   T31]  ? schedule+0x2bf/0x390
[ 1363.086318][   T31]  schedule+0xdd/0x390
[ 1363.091976][ T5868] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1363.120351][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1363.137334][ T5868] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1363.157498][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1363.173449][   T31]  ? sync_bdevs+0x153/0x480
[ 1363.178080][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1363.183244][   T31]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1363.189019][   T31]  ? iput.part.0+0x1a0/0xf50
[ 1363.193826][ T5868] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1363.198256][   T31]  ? sync_bdevs+0x153/0x480
[ 1363.211662][   T31]  sync_bdevs+0x153/0x480
[ 1363.230782][   T31]  ksys_sync+0xb0/0xf0
[ 1363.231003][ T5868] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[ 1363.234973][   T31]  ? __pfx_ksys_sync+0x10/0x10
[ 1363.250213][   T31]  ? do_syscall_64+0x95/0xf80
[ 1363.254971][   T31]  __do_sys_sync+0xe/0x20
[ 1363.259712][   T31]  do_syscall_64+0x106/0xf80
[ 1363.264366][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1363.274223][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1363.280546][   T31] RIP: 0033:0x7fd15bf9bf79
[ 1363.285021][   T31] RSP: 002b:00007fd15a1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1363.286057][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.293674][   T31] RAX: ffffffffffffffda RBX: 00007fd15c215fa0 RCX: 00007fd15bf9bf79
[ 1363.341728][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1363.347473][ T5868] usb 7-1: config 0 descriptor??
[ 1363.359064][   T31] RBP: 00007fd15c215fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1363.390115][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1363.409720][   T31] R13: 00007fd15c216038 R14: 00007fd15c215fa0 R15: 00007ffcadc4c498
[ 1363.429366][   T31]  </TASK>
[ 1363.434702][   T31] 
[ 1363.434702][   T31] Showing all locks held in the system:
[ 1363.467590][   T31] 1 lock held by pool_workqueue_/3:
[ 1363.479437][   T31]  #0: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1363.500989][   T31] 1 lock held by khungtaskd/31:
[ 1363.512644][   T31]  #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1363.532719][   T31] 2 locks held by getty/5562:
[ 1363.541900][   T31]  #0: ffff888037e830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1363.573831][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1363.600517][   T31] 5 locks held by kworker/0:5/5868:
[ 1363.609803][   T31]  #0: ffff888023699948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1363.628855][   T31]  #1: ffffc90004977d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1363.640784][   T31]  #2: ffff88802ab4c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1363.651505][   T31]  #3: ffff88802985e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1363.673200][   T31]  #4: ffff888056743160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 1363.686264][   T31] 1 lock held by udevd/16091:
[ 1363.693194][   T31]  #0: ffff88802731b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1363.707897][   T31] 1 lock held by syz.5.3342/19551:
[ 1363.713118][   T31]  #0: ffff88802731b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[ 1363.724989][   T31] 1 lock held by syz.3.3504/20266:
[ 1363.731466][   T31]  #0: ffff88802731b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[ 1363.743089][   T31] 2 locks held by dhcpcd/21173:
[ 1363.747950][   T31]  #0: ffff888036586260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50
[ 1363.758627][   T31]  #1: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1363.769514][   T31] 
[ 1363.781342][   T31] =============================================
[ 1363.781342][   T31] 
[ 1363.790419][   T31] NMI backtrace for cpu 0
[ 1363.790432][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1363.790448][   T31] Tainted: [L]=SOFTLOCKUP
[ 1363.790452][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1363.790459][   T31] Call Trace:
[ 1363.790463][   T31]  <TASK>
[ 1363.790471][   T31]  dump_stack_lvl+0x100/0x190
[ 1363.790492][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1363.790504][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1363.790524][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1363.790544][   T31]  sys_info+0x141/0x190
[ 1363.790560][   T31]  watchdog+0xd25/0x1050
[ 1363.790578][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1363.790593][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1363.790610][   T31]  ? kthread+0x13a/0x450
[ 1363.790619][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1363.790632][   T31]  kthread+0x370/0x450
[ 1363.790641][   T31]  ? __pfx_kthread+0x10/0x10
[ 1363.790659][   T31]  ret_from_fork+0x754/0xd80
[ 1363.790678][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1363.790690][   T31]  ? __switch_to+0x7b4/0x1120
[ 1363.790706][   T31]  ? __pfx_kthread+0x10/0x10
[ 1363.790732][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1363.790761][   T31]  </TASK>
[ 1363.911063][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1363.917457][    C1] NMI backtrace for cpu 1
[ 1363.917474][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1363.917494][    C1] Tainted: [L]=SOFTLOCKUP
[ 1363.917499][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1363.917507][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1363.917527][    C1] Code: a8 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3c 1d 00 fb f4 <e9> bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1363.917540][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246
[ 1363.917552][    C1] RAX: 0000000007452abb RBX: ffff88801e69a480 RCX: ffffffff8b8e4c75
[ 1363.917561][    C1] RDX: 0000000000000000 RSI: ffffffff8de6ce9d RDI: ffffffff8c1adf20
[ 1363.917570][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
[ 1363.917578][    C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd3490
[ 1363.917587][    C1] R13: 0000000000000001 R14: ffffffff90d92f10 R15: 0000000000000000
[ 1363.917596][    C1] FS:  0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000
[ 1363.917610][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1363.917619][    C1] CR2: 00005632d5dbd168 CR3: 000000007feec000 CR4: 00000000003526f0
[ 1363.917628][    C1] Call Trace:
[ 1363.917632][    C1]  <TASK>
[ 1363.917637][    C1]  default_idle+0x9/0x10
[ 1363.917654][    C1]  default_idle_call+0x6c/0xb0
[ 1363.917672][    C1]  do_idle+0x35b/0x4b0
[ 1363.917689][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1363.917705][    C1]  ? do_idle+0x2b9/0x4b0
[ 1363.917720][    C1]  cpu_startup_entry+0x4f/0x60
[ 1363.917736][    C1]  start_secondary+0x21d/0x2d0
[ 1363.917755][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1363.917776][    C1]  common_startup_64+0x13e/0x148
[ 1363.917795][    C1]  </TASK>
[ 1364.101713][ T5868] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0
[ 1364.108779][ T5868] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0
[ 1364.115812][ T5868] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0
[ 1364.122768][ T5868] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0
[ 1364.129824][ T5868] lenovo 0003:17EF:60EE.000B: unknown main item tag 0x0
[ 1364.139458][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1364.146323][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1364.156999][   T31] Tainted: [L]=SOFTLOCKUP
[ 1364.161311][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1364.171345][   T31] Call Trace:
[ 1364.174604][   T31]  <TASK>
[ 1364.177516][   T31]  dump_stack_lvl+0x100/0x190
[ 1364.182187][   T31]  vpanic+0x552/0x970
[ 1364.186156][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1364.190654][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1364.196818][   T31]  panic+0xd1/0xe0
[ 1364.200540][   T31]  ? __pfx_panic+0x10/0x10
[ 1364.204946][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1364.211092][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1364.217233][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1364.223372][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1364.228125][   T31]  ? watchdog+0xd35/0x1050
[ 1364.232526][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1364.237104][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1364.241767][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1364.246779][   T31]  ? kthread+0x13a/0x450
[ 1364.250998][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1364.255671][   T31]  kthread+0x370/0x450
[ 1364.259720][   T31]  ? __pfx_kthread+0x10/0x10
[ 1364.264298][   T31]  ret_from_fork+0x754/0xd80
[ 1364.268870][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1364.273962][   T31]  ? __switch_to+0x7b4/0x1120
[ 1364.278622][   T31]  ? __pfx_kthread+0x10/0x10
[ 1364.283198][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1364.287954][   T31]  </TASK>
[ 1364.291221][   T31] Kernel Offset: disabled
[ 1364.295521][   T31] Rebooting in 86400 seconds..