last executing test programs:

5.100913595s ago: executing program 1 (id=311):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200", @ANYBLOB="0000000000000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x104000, 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r0], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000540)=r0, 0xfffffffffffffe02)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500))
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x17) (async)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000)
r4 = socket$alg(0x26, 0x5, 0x0) (async)
mknod$loop(&(0x7f0000000140)='./bus\x00', 0x8fff, 0x0) (async)
execve(&(0x7f0000002540)='./file0\x00', 0x0, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, 0x0}, 0x8400) (async)
sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x4, 0x0}, 0x8004) (async, rerun: 64)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 64)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9) (rerun: 64)
r6 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x10d4, 0x5, 0x8, 0xfa, "39c2e3", 0x8}}) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10020) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 32)

5.100382882s ago: executing program 1 (id=312):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e0b, 0x4a3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf495}}}, 0x108)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xa5)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100006d775ed019a5e7240200040000000800000008"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockname$packet(r2, &(0x7f00000004c0), &(0x7f0000000500)=0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
syz_usb_connect(0x1, 0xabb, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xa4, 0x2a, 0x21, 0x8, 0x1199, 0x6809, 0x9845, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa9, 0x4, 0x1, 0x80, 0x30, 0x1, [{{0x9, 0x4, 0x6d, 0x9, 0xa, 0x90, 0x98, 0x9f, 0xd, [], [{{0x9, 0x5, 0x9, 0x2, 0x20, 0xd, 0xd3, 0x1, [@generic={0x5c, 0x4, "90ea1544c82dfd3e9565e14dd37b817bdf9d704ab95691a7790c629b7df4f0c9ca77e341d9f9c327ccd3e923f7a575fb1256eb8f72160d6fe9e48337776ba5eb03708f92258b1bf182ddc22d04ffda76f3d7eb2febd2cfa2bd3d"}, @generic={0x1d, 0x6, "d00efece43915495b52f48ba767d374683869fd8ad13100d656a15"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0xc, 0x4}}, {{0x9, 0x5, 0xe, 0x3, 0x30, 0xf, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x0, 0x10, 0x9b}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x56, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x8, 0x2, [@generic={0x7b, 0xe, "37c22dd5ff12c5ce933aae7853fdaccb1e753dc6cba2edcc77cc3898b6abb7fec44dac5400c33b3957c55b29b3a5e7d6878a611a79ec2b928bcd079a0a3e153944a12d19c938eb89271faff60a88eb2a5ed1b0ba73242a3c3f42e3f855615fd3f8fb4d4d117cc80db47d0230243ce2a6dbb495e2afbfa05402"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x3, 0xed, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0xa, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x90, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa9, 0x5f35}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3ff}, @generic={0x2, 0x30}]}}]}}, {{0x9, 0x4, 0xbb, 0xf9, 0x0, 0x19, 0xae, 0x9b, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '0'}, {0x5, 0x24, 0x0, 0x987}, {0xd, 0x24, 0xf, 0x1, 0x39fc085f, 0x1, 0x5, 0x9}, [@acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x4, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x800, 0x39}]}, @hid_hid={0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x102}}]}}, {{0x9, 0x4, 0x99, 0x5, 0x6, 0xd0, 0xd6, 0x69, 0x2, [@generic={0xd4, 0x22, "6bcf4101003736af6bf6816af0bd2190423feb9284b06cf2df5b22d696e293c983f772eabe892101ee5ca7743c406e7afc5407edf16c8b0afa807aaacc653353ca088b04f1cb2ec6e0f2090e7f3249554c38f6ab19cc1ba16bb3b9e0c0308b0b8f6e1c1151c2f4f0d4ae6e4e3f195a5b35b1e8c19f50c25062e75b9123ea8e0198379b82dcd56ae8a6161afb8532e41587b309da69661b8680a0e0ce6a2b403a3a9665a131928481b8908f4c04735bcf9b7b1c5b7a7c88e11a56a9665ebb7dc727bfcb9884bd8ba3aed6ef7febbbf2d51cfb"}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "19"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x2eac, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfd7, 0x9, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x5, 0x33, 0x60}, @ncm={0x6, 0x24, 0x1a, 0xfff, 0x20}, @dmm={0x7, 0x24, 0x14, 0xa4bd, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}]}], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0x2, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x1, 0xc000}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9046}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x2, 0x7, 0x80, [@generic={0xa3, 0x21, "ac2794b921fc7fb1c3dfa7a1e930cc20b241bcf3fe829d66c17d88fcf99a221b506c29a2c73d06a7a643badaecd34ac4b49e88be849b0b8bbce8f3497c0be5fd2590eded547652ab5d955cb0678492d139075cdde1d6f254d7759d4e87f66e3106f9b2aace0004cf21da65910841a6612ed8c7eff1bdd3732a5d65d6db0503c03f5bfea615d27ae0a515bfdc0c7de5b4d79aa45dfb298e0cca0fc379220be40d14"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8972}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x1, 0x4c, 0x0, [@generic={0x35, 0xd, "b19776da6f31522606acf565c84dfa3262d8083cac2ac6741b90012a4f665d80cf7e242bdf0caa40d506591a29fb2e228a109a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x79, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x46, 0xc5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x80}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x7f, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x10}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0xbd, 0x27, 0x10, [@generic={0x65, 0xe, "5cc825c4a6c79deca1d5e93a98fc8919ed610d758aa2fd10285aebdb5bcef1d4f7dd770bf1d0284337cfa79d253b1755741e92dd49d3510e4b31306a0cd9260ec2cb149e122e4cd9bd2cedbc327ab54ba98131b597f17c1740a5192eb6d444b131c5f2"}, @generic={0x4e, 0x5a, "e84cff446492e19f85552cfb20f7a88c7d99a5c08901d8164ecd993e759c4fe4a708053239aa9e68f5dda5d680689c40b35cd72ed0e197ce05a929da8b6c871d573b21f8bc30cc197b4ab9e4"}]}}]}}, {{0x9, 0x4, 0x3d, 0x3, 0xc, 0x3a, 0x28, 0x6, 0x80, [@hid_hid={0x9, 0x21, 0xed2c, 0x25, 0x1, {0x22, 0x67d}}, @generic={0xd2, 0x8, "d6798d160f3f7dbe83d32cb7f0a93553b641fd7d61ec7e3235e901dde5a0b24583a1786f8e9894261825b771d0efacaee11e3d8f9509748aa62aedda7d2b3155fdf6fa4846dcd799e471d5fdbb60c5d9229601f08ceb368f11ab5ad155d7b5e844402b0cffa3d221b70297c923f1709b84edb66b23dd1f94ad451f65999c87b6c953ffef7868da2469676e993ac624a8f17399ea77aec11ad566bd3006e3d5fc7a4422879827da7ac7e31c01127cf0234f10282d669f379b1a7842f26aff932f00ef886009ac9a1a883103b999a19e6c"}], [{{0x9, 0x5, 0x9, 0x3, 0x200, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x7, 0x8, [@generic={0xad, 0x23, "acd5520855480ab36bef22cfb45b2cf4c9aa80ec0bc0f409be8ca5b0a66089d99acc7fbb7a9d83c24990f937ad6aaccc5d925803b228c852ad8793764669f07d725b4ab43c3d4ad3488c379a3ffba8570912469743f9475aeca63fecd9d11f781d75a28a192a66a5fb2deb0e190f0c53c6ee81c4ded992c7f2cef38c8abd2b576ac4caed99fa9d14b380309888fa4be20e1733f423a403f650d4cfdda17a5b43342fafb9a731deba13dd25"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x7f, 0xf, 0x5, [@generic={0x10, 0x16, "31c03fc6d44f20577c264530ce0b"}, @generic={0x47, 0x22, "f420986b261973b2dbd0aca2db3e84e28760be8f729f45d563ac539bced677aead91c7aaf12dd9e9917d778cac34c13dd3891d6c79f56cf6da7bb320b94befafe0a535607c"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x5, 0x40, [@generic={0x39, 0x5, "b6c02a62f8430289b8fe3a214511c68adffbff74d09f016d6f9c3c7d751e7a643a5689c0c2c1e7e14079ec4c65a16e86b5aba8e739c9f5"}, @generic={0x4e, 0x3, "72d033f91c74efe5b430818c349427ba1137c2099f7ef51a614d3403cf902eec450480fe25fbc35371ad08ef4ad37390f25997d088ac7d6280ff260653c1edb57006a971b589a6250f70d513"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7df, 0xc0, 0x1, 0x80}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0xd, 0xf3}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x6, 0x8, 0x6, [@generic={0xea, 0xf, "488aca18c07ecf82897790508caa1d73e0864b018f3359f37b72563d8e577782c7cac01c23cff4bc886ae2adb2d374fefe32b5880524e7a49c16debfbeee7f7dc23c6e1d966dccbf4c57eaeda89ba68e194b5a2bae7843ae37c765fdb18a635ccfac284003f75b1beb179d6e45c81395bdf18661881fe35b6edcd568af047dcf22667750fbd530626710b43ad9206f31d704ca83b239ab006e1f5b553dccd76492fb38e5b3ee7334a04875184fa9df7645bfe0562f1aefbc218008559b2c187525c5cde532ed33020d5a7e15f81bbc15b5a682684e3f4b3ae6b668b236fb99d12fd6018a37ae9055"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x9, 0xa, 0x6, [@generic={0xc8, 0x21, "9a628ed5f3c57563b4aa3ef65c2fbe39cd2316c78aecd5f242dc0ae679acc762061d338cd7ffabc8a4e42d50777e97ee0a55e497b6524cbc068f152fae9c88686c1c8776153f1d71473d7296ba770217154fa1dea918d249944df489093817c26472812a65ca3f4964be7915d57f266e262e078afa77fd6b72aeeec152e223887d4fe8cd72e35355a530e15068d43843ad574d1054e5078657b847606612a6e264f4bbc2f2c5e0303bb5441c5f7aa4c9733d4b6d33e8f3c7d0a1038e80af7a17d9de47aa7af6"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x5a, 0x1, 0x1}}, {{0x9, 0x5, 0xe, 0xb, 0x0, 0x6, 0xc, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x1}, @generic={0xaf, 0xb, "30f2e4cebe284f573cc752b5440bd6f8524884066ba3015905367965da96a2883d647a665bbf9f0a3631c60df520310753a4bf6d15bf3063d3d9c7a6e7047c8f5451bce904f12f8a5c6c33b2359d4062d320f9a306892d2c86719695935d68c0e2466ccf6690af5271ec13fca19dbfbf25ec49fddc29a03f3235cffbf5982d77a494ee5818929fee203432115f087717120e3c50e02a246e5550f0855ffc5c84e2c6dd5b17cce16d75e6a96955"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x10, 0xff, 0xb7, [@generic={0x96, 0xd, "0657c838a913c78cf28ad8bc7634c4977b4b958b23e64be240b6d2041f3f10052074bf88216a195eca9c58440ad8839f3043bff60a91417becb9f3e88ea25bea70dc3962a895ad2a3605ba559502bd47654f9235215c41d66dd30c22a0f24f59213403bee06fbc6924de6ad577ba86f7019522a6b0e3ad2093cbde95728549c1049df82e409a8429b3342e6c2904915958d5ea32"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3de8}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x7, 0x7000}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x3, 0x3, 0x8, 0x20, 0xb4}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x1, [{0x26, &(0x7f0000000300)=@string={0x26, 0x3, "5b0296856bb03cc0c40aeac628957536cf25cebd40e263f3d2515632397767b8fa9edfc2"}}]})
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendto(r1, &(0x7f00000003c0)="8c0553a259b6b24741", 0x9, 0x40088d1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
poll(&(0x7f0000000100)=[{r0, 0x302}, {r1, 0x8006}], 0x2, 0xfffffa2b)

2.02090874s ago: executing program 1 (id=349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000))
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x1c, r2, 0x400, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa799f2)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x70, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x75}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x30, 0x1}, {0x60, 0x1}, {0x4, 0x1}, {0x30, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x6}, {0x24, 0x1}, {0x30}, {0x9, 0x1}, {0xc, 0x1}, {0x1, 0x1}, {0xc, 0x1}, {0x5}, {0x13}, {0x6c}, {0x30}, {0xb}, {0x5, 0x1}, {0x5}, {0x16, 0x1}, {0x16}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x12}, {0x6fb83922047e464e, 0x1}, {0x2}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe8, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r9, &(0x7f00000000c0)=""/55, 0x37)
getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r11, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
recvmsg(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20)

1.165498038s ago: executing program 1 (id=361):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48d, 0x0, 0x8}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
pipe2$9p(&(0x7f00000005c0)={<r4=>0xffffffffffffffff}, 0x4000)
getresuid(&(0x7f0000000400), &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480))
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x3202452, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}, {@access_uid={'access', 0x3d, r5}}, {@privport}, {@posixacl}, {@ignoreqv}, {@msize={'msize', 0x3d, 0x6}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@directio}, {@version_u}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, 'mptcp_pm\x00'}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '#*'}}, {@measure}, {@dont_hash}, {@measure}, {@smackfsdef}]}})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = dup(r7)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0f20c035000000800f22c066baa000ec263e0fc7bb00000000b92d0200000f32c4c3791513a72e0f0159c10fc7af0000c0feb9800000c00f3235004000000f30f7baa8ac000064660f38816800", 0x4d}], 0x1, 0x11, 0x0, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000680)="02815c8edc872c4e4fa83d770ec18b39a030152d7bc57fe35d1fa7ec745786d5daf8454dcd82adb43257284f5ed0ee3303d61fc1960b3d00ba69652939e65437d8", 0x41)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000001380)={'team0\x00', &(0x7f0000001280)=@ethtool_drvinfo={0x3, "8e83cc9e88b009a8ced008a45a9b15655db53c38758b5d267d47b1a109528e05", "94ec533ac1530fb40d6713ad954eedb14180e9936a9d353caa877653bce1b892", "d39af0372b17ec044525bd6635d3fbdebcba911f0bc93222ad196c2097456bcb", "b039149dc172700e784f8e8f3aa3f18ce4081bf171e8077c02deb94d5f29bf66", "64c7a53e3a3b85ee0f3612d286625fe9778737fb81d24f685563b9e6fa32b055", "1f6869027ad2ecb6a95b1575", 0xfffff591, 0x4, 0x3, 0xa92c, 0x3}})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r14, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r14, 0xc018620c, &(0x7f0000000000))
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000)
ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000000c0)={0x7fff, 0xd, {}, {<r15=>0xee01}, 0x3ff80000000000, 0x3})
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r15, &(0x7f0000000140))
ioctl$KVM_RUN(r9, 0xae80, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x24, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@generic={0x2a, 0x7, 0x8, 0x5, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.100667788s ago: executing program 0 (id=363):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd66c79714cf73125}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x20, 0x7}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x1, 0x2, 0x0, {0x4002, 0x81, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x9, 0x7}}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0xc881}, 0x10040009)

1.099883553s ago: executing program 0 (id=365):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 32)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (rerun: 64)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f011f0f08c4c2e14509b9800000c00f3235000400000f30b9800000c00f3235000400000f300f01cb0f20e035084000080f01c92e660f380537c9", 0x3c}], 0x1, 0x41, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r9, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x1, 0x3, 0xf9, 0x5, 0xc}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3503, 0x2, 0x0, 0x0, 0x9, 0x247, 0xf}]}]}, 0x13c}}, 0x0) (async)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000003940)=0x10)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000003980)={0x7a0, 0x2, 0x0, 0x6, 0x14, "070000000000000000000000004843ff7700"}) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="780000001000010026bd5a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d300000000000003c00168038000180280001"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40)

897.266982ms ago: executing program 0 (id=371):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004550", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000080)={'dummy0\x00', @ifru_map={0x1, 0x9, 0x10d, 0x1, 0x1, 0x6}})
accept4(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000000)=0x80, 0x800) (async)
r2 = accept4(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000000)=0x80, 0x800)
ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000080)={'vxcan1\x00', @ifru_map={0x31, 0xec, 0x1, 0x4, 0x74, 0x6}})

820.148896ms ago: executing program 0 (id=374):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000000)=0x2)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x280080)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="ba274041304bb6560000080000000100008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f0000000240)={0x0, <r3=>0x0}}, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r3}, 0xc)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

819.898368ms ago: executing program 1 (id=375):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getpeername$inet(r2, 0x0, 0x0)
r3 = accept$alg(r1, 0x0, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x4}], 0x1, 0xcb, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d882dbd7000fddbdf250100000004000180100002800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="800000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010400000000000000000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

819.360166ms ago: executing program 0 (id=376):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa00000000200000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000000000140000000000000000000000000200000000000000001000000000000000000000000000005b000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff0000000001040000030000000000000000000000020001060000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040000004e204e220000e00000020000000000000000000000008e58"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

749.897579ms ago: executing program 0 (id=378):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async)
r2 = dup3(r1, r0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x1a1) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r5, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2, @ANYRES16=r3])

689.499309ms ago: executing program 1 (id=380):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x97bd, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000000}]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x56fa9599})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0xd000, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x81, @remote, 0x800000}, 0x1c)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

688.197661ms ago: executing program 2 (id=381):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
fsetxattr$trusted_overlay_redirect(r5, 0x0, 0x0, 0x0, 0x1)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept4(r6, 0x0, 0x0, 0x0)
recvmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xeb8, 0x30, 0x9, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x4, 0x10000000, 0x4, 0x9}, 0x0, 0x2}, [{0x2, 0x7fffffff, 0x5, 0xe036, 0x7, 0x7}, {0x5, 0xfffffffd, 0x3, 0x1, 0x1, 0x3}, {0x5, 0xbb, 0x40, 0x20000000, 0x230, 0x373fceac}, {0x4, 0x2, 0x8, 0x80, 0x80000001, 0x6}, {0x4, 0x6, 0xe, 0x800, 0x9, 0xfffffff4}, {0x7fff, 0x6, 0x1, 0x3b6, 0x4dc4, 0x7}, {0x7, 0xfff, 0x9, 0xb9, 0x0, 0x6}, {0xb7, 0x1a57, 0x4f4, 0x1, 0x5, 0xe98}, {0x5, 0x4, 0x1ff, 0x3, 0xd6f, 0x1}, {0x4, 0x2699, 0x7, 0x9, 0x31, 0x80}, {0xa502, 0x8, 0x80000000, 0xfffffffc, 0x7, 0x5307}, {0xd0a9, 0xd82b, 0x4, 0x5, 0x933, 0x6}, {0x4, 0xfffffff1, 0x0, 0x4, 0x7, 0x3}, {0x0, 0x73, 0x8, 0x7fff, 0x8, 0xab}, {0x1, 0xfffffff7, 0x3, 0x7f, 0x9, 0x3}, {0x4, 0x7, 0x5, 0x14, 0x1, 0x1000}, {0x5, 0x8000, 0x101, 0x59, 0x0, 0x4}, {0x7, 0x1ff, 0xc979, 0x1, 0x2, 0x2}, {0x7, 0x8, 0x1, 0x5, 0x3, 0x53d}, {0x81, 0x81, 0x5, 0xa, 0x9, 0x5}, {0x9, 0x81, 0x4, 0x5, 0x5, 0x3}, {0x10001, 0xfffffff5, 0x8, 0x473, 0x3, 0x80000000}, {0x7fff, 0x2, 0x4, 0x9, 0x400}, {0x2, 0x81, 0x81, 0x1, 0xa71, 0x2c}, {0x4, 0x9, 0x7, 0x6, 0x7, 0x8}, {0x5, 0x0, 0x1, 0x453d, 0x8, 0xa7abd46}, {0x8001, 0x9, 0x81, 0xffff, 0x37d6, 0x5}, {0x2, 0x3, 0x2, 0x9, 0xf9d5, 0x2}, {0xf, 0x2e, 0x3, 0xfffffff1, 0x3, 0x7}, {0x40f4, 0x1, 0x50aa, 0x2, 0x9, 0x1}, {0x2, 0x8, 0x9, 0x13c00, 0x0, 0x1}, {0x6df, 0x7, 0x3, 0x4818, 0x4, 0xffffff25}, {0x7fff, 0x2a, 0x3, 0xd28, 0x7fffffff, 0x1}, {0x10001, 0xffff, 0x7, 0x9, 0x273, 0x101}, {0x4, 0x6, 0x8, 0x6, 0x7, 0x2400}, {0x2, 0x174a, 0xc345, 0x5, 0x6, 0xb9cb51a}, {0x7, 0xffffffff, 0x3, 0x1, 0x3ff, 0x9}, {0x8, 0x76f, 0x8, 0x8, 0x0, 0x8000}, {0x5, 0x21, 0x100, 0x3, 0x6}, {0x72a6, 0x4, 0x4cb, 0x3, 0x7, 0x9}, {0x7, 0x2, 0x10, 0x80, 0xed, 0x5b}, {0xe, 0x7, 0x9, 0xfffffff7, 0x46e1, 0x81}, {0x5, 0x7, 0x1, 0x1e36, 0xfe, 0xfffffe84}, {0x7, 0x8, 0x4, 0x2, 0x8001, 0x1000}, {0x8, 0x8, 0x41d, 0xc, 0xfffffff8, 0xfffff001}, {0x9, 0x4688, 0x7, 0x7, 0x5, 0x5}, {0x8, 0x5, 0xffffffff, 0x6, 0xffffffff, 0x7fff}, {0xe, 0x5, 0x10e1, 0xb387, 0x40, 0x2}, {0x10000, 0x1, 0x89a9, 0x0, 0x2, 0x1}, {0x2, 0xfffffffc, 0x80000000, 0x0, 0x0, 0xc}, {0x3, 0x9, 0x3, 0xf, 0x0, 0x4}, {0x9, 0xb, 0x6aaeba77, 0x100, 0x7, 0x1}, {0x6, 0x10000, 0xe, 0xfff, 0x80, 0x6}, {0x0, 0xfffffffc, 0x2, 0x8, 0x1, 0x53e}, {0x6, 0x2, 0x5, 0x3, 0x0, 0x5}, {0x6, 0xfffffff8, 0x0, 0x81, 0x100, 0x7}, {0x3, 0x4, 0x8, 0x40, 0x9, 0x5}, {0x3, 0x8001, 0x3, 0x4, 0x7ff, 0x3}, {0x3, 0xfffffffa, 0x4, 0x9, 0x8, 0x3}, {0x2, 0x9, 0x7, 0xbf3f, 0x800, 0x7fff}, {0x80000001, 0x1, 0x9, 0xc, 0x200, 0xffff7fff}, {0x9, 0x7, 0x100, 0x8, 0x7, 0x1}, {0x3, 0x101, 0x2, 0xffffffcb, 0x8, 0xfffffffa}, {0x10000, 0x200, 0x2800000, 0x3, 0x401, 0x401}, {0x3, 0x1, 0x17, 0xbf7, 0xffff, 0x4}, {0x1c, 0xa1d, 0x1, 0x6, 0xffffffff, 0xc97f}, {0x8000, 0x98, 0x5, 0x4, 0x21c, 0xf}, {0xfffffff0, 0x5, 0x80000001, 0x5, 0x0, 0xdcf4}, {0x100000, 0x1, 0x2, 0xc1c, 0xdb, 0x3}, {0xe3, 0x4, 0x8, 0x8, 0x5, 0x6}, {0x7, 0x8, 0xca7f, 0x6, 0x10, 0x7}, {0x3, 0x92f, 0x9, 0x7, 0xc000, 0x5e2bd237}, {0xffffffff, 0x2, 0x800, 0x8, 0x0, 0x6}, {0x0, 0x6, 0x7, 0x100, 0x4dd, 0x8}, {0x5, 0x3, 0x9, 0x6, 0x7, 0x3}, {0x8, 0xa5, 0x6, 0x1, 0x3, 0x6}, {0x4, 0x0, 0x7, 0x10000, 0x401, 0x1}, {0xb0, 0x7, 0xfffffffe, 0x7fff, 0x9}, {0x7fff, 0x8, 0xd6, 0xffffffff, 0x5, 0x4}, {0x1ff, 0x2, 0x8, 0x7, 0xd24, 0x9}, {0x5, 0x4, 0x7000, 0xb, 0x1, 0x10001}, {0x7, 0x3, 0x9, 0x2403, 0xb5, 0x5}, {0xf9, 0x3, 0x4, 0x80000001, 0x2, 0x3}, {0x332, 0x80000000, 0x8, 0x3, 0x0, 0x80}, {0x7, 0x7fffffff, 0x8, 0x10001, 0x0, 0x4}, {0x4, 0x1, 0x3, 0x0, 0xc9, 0x3}, {0x7fffffff, 0x7fff, 0x6, 0x5, 0x3, 0x93}, {0xfffff001, 0x3, 0x2, 0x6f91, 0x1, 0x397}, {0x80, 0x1, 0x0, 0x8001, 0x52ef78a4, 0x100}, {0x2, 0x3, 0x1eee, 0x9, 0x6, 0xf31b}, {0x3ff, 0x10, 0x3, 0x9, 0x180, 0xa}, {0xa, 0x2, 0x6, 0x3ff, 0x7ff, 0x80000001}, {0xfffff9a7, 0x6, 0x10000, 0x3, 0xf71, 0x5}, {0xb15, 0x4, 0x4ae8, 0x1f0, 0x8454, 0xffff0001}, {0x101, 0x7795, 0xf99, 0x81, 0xa83, 0x8}, {0x1, 0x10, 0x4, 0x7fffffff, 0x8, 0x9}, {0x64, 0x2, 0x6, 0x400, 0x1ff, 0x5}, {0x80000000, 0x1ff, 0x10001, 0x7, 0x7f, 0x8}, {0x2, 0x7, 0xd, 0x3ff, 0x7, 0x9}, {0x80, 0x5, 0x3, 0xff, 0x7, 0xa}, {0x1c, 0x6, 0x6, 0x1ff, 0x0, 0xc990}, {0x710b, 0x2, 0x3, 0xa, 0x40, 0x10000}, {0x78, 0x1, 0x21, 0x0, 0x9, 0x3}, {0xbf, 0x0, 0x7f, 0x0, 0x3, 0x9}, {0xa, 0x10001, 0x2, 0x997, 0x8, 0x4}, {0x8, 0x5, 0x2, 0xf, 0x40, 0x5}, {0xffffffff, 0x1, 0x9, 0x7, 0x2, 0x401}, {0x5, 0x0, 0x1, 0x7, 0x8, 0xd}, {0xfff, 0x4, 0x8, 0x7, 0x5, 0x4}, {0xa, 0x3, 0x4, 0x8, 0x4, 0x90}, {0x4, 0x2, 0xfffffffe, 0x7, 0x6, 0xff14}, {0x3, 0x1, 0x1ff, 0x8, 0x10001, 0x351}, {0x6, 0x8fa, 0x7ff, 0x0, 0x0, 0x4}, {0x1, 0xffff8000, 0x200, 0xad, 0x6, 0x9}, {0x4, 0x2, 0x9, 0x5, 0x40, 0x6}, {0x7b, 0xc9, 0x2, 0x0, 0x7, 0x93e}, {0x4, 0x7, 0xd, 0x3, 0x4, 0x3}, {0x7fff, 0x81, 0xc, 0x5, 0xffff528a, 0x118}, {0x9, 0xd, 0x1, 0xa5, 0x0, 0x2}, {0x0, 0x2, 0x4, 0x0, 0x7, 0x80}, {0x0, 0xfffffff9, 0x2, 0x6}, {0xfffffffc, 0x5393, 0x9, 0xfff, 0x5, 0xbba}, {0x1, 0x8, 0x8, 0x0, 0x82, 0x8}, {0x7, 0x5, 0x10001, 0x2, 0x3ff, 0x3ff}, {0x1, 0x1, 0x9, 0x0, 0x6, 0x9}, {0x6, 0xfffffffc, 0x1, 0x3, 0x7, 0x5}, {0xc1, 0xb46e, 0x3, 0x8, 0x4, 0x9}, {0x8, 0x10001, 0xd, 0xf, 0x6, 0x5}], [{0x0, 0xacfc3e76f8145cfd}, {0x2}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x6}, {0x2}, {}, {0x6, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3255080e03fa1f2e, 0x1}, {0x5}, {0x3}, {}, {0x1}, {0x5}, {}, {}, {0x3}, {0x2}, {0x4}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x3}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xeb8}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x80)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0x8, 0x89110122, 0x0, 0x0)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x2001)

490.829415ms ago: executing program 2 (id=383):
r0 = socket$inet(0x2, 0x1, 0x100)
capset(&(0x7f0000000080)={0x7918e863d9ac2094}, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x0, 0x14da})
umount2(&(0x7f0000000040)='.\x00', 0x2)
listen(r0, 0x0)
getgid()
socket$inet(0x2, 0x1, 0x100) (async)
capset(&(0x7f0000000080)={0x7918e863d9ac2094}, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x0, 0x14da}) (async)
umount2(&(0x7f0000000040)='.\x00', 0x2) (async)
listen(r0, 0x0) (async)
getgid() (async)

490.14074ms ago: executing program 2 (id=384):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
r1 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0xe6}, 0x4}}}, 0x7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000040), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
setregid(0x0, 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', r1)
keyctl$read(0xb, r1, &(0x7f0000002e80)=""/4096, 0x1000)
mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]})

410.902502ms ago: executing program 2 (id=385):
mlockall(0x6) (async)
mlockall(0x6)
munmap(&(0x7f0000ff0000/0x3000)=nil, 0x3000) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)

409.388799ms ago: executing program 2 (id=386):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @broadcast, <r1=>0x0}, &(0x7f0000000040)=0xc) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000150000032dbd7000fbdbdf25027f1500", @ANYRES32=0x0, @ANYBLOB="08000a000200000008efc0"], 0x28}, 0x1, 0x0, 0x0, 0x2004588d}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async)
r4 = dup(r3)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000500)={0x12b4, 0x12, 0x400, 0x70bd25, 0x25dfdbfc, {0x27, 0x61, 0x9, 0x1, {0x4e23, 0x4e21, [0x3, 0x1, 0x1, 0xfffffffa], [0x0, 0x8, 0x0, 0x2], r5, [0x0, 0x3]}, 0x7, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "2e12f6e991b3662cfae852d11836a616976fe6a2f84b847289d26be04a27cd63922a2dcab6ffcb77cdab65bf94adf07a795ce2ca379293b37a802bb87e1b956de04ed258a39cb6cd594484914f172d75283f12b29d14b09b61df9ab0fd58384cca6ff4ee018c65750d52a557a14bb7040e43241a5929a04645312dfa6493c2c7dcecc7d50ef1ada03872fb6e889c7d7ae347691edf6c02da685a"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "28394c6784dc2941dad794130b4007fd4438684c8afd56fcb5cd956d2e116ef503ee13eadf53dc6e51a7a21c149174a07ac7964a43d8559696665b05cc987aced92cd72f614325846954257d67a35f48014e2814313e1232411d7cc66fcdc6f8ea3d5a6484111eb14c2776095514ea57f5ad5229878d39eca0e1f33e2e6ae54eb26257de7c8082"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '//'}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "b18234f08f01538de071fc2a343f23953936925f9628b901a895e01b7665e02b9f6546b063589831678bdf519afc2b8238cffd230e2c5ce192dca2ad3bd104546948b491704f04f08e2fc0ecf4c6d298aded5358041d1e61e9cbbc9c18b5103656e25f0bf3d5c8f7f8af070c6006399d463cd60a55099ee6faaef5506b003e07e1ec5bf503b1cc867e33806b29d95e98832e0ddf6e85b0706b8c7111849055996efcd482ab049bc05550cce6085fc32dd633a6a0ed2726e53c3ccf2d051bab9df433c2752c4ee4b5d9e6a2e1024cdb30797b34787836faa6cdd03afa82122964d1aae12be3f23d8a991c4a3396d6b95c"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "406095e4fe136447cd98614c200ca5080c3de623dc6f1afbb5731b84a734088c42fbb7b7c7584a91ffe229cc4e42f972d2dff40eb02a918e"}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000851}, 0x4004040)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
open_tree(r4, &(0x7f0000001840)='./file0\x00', 0x1100) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

270.749761ms ago: executing program 3 (id=389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x1, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @rand_addr=0x64010101}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x88880, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0xffffff7b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8100}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}]}}}]}, 0x58}}, 0x40804)
r3 = socket$pppoe(0x18, 0x1, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000500))
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'bond0\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"})

269.058941ms ago: executing program 3 (id=390):
r0 = socket(0x8000000010, 0x2, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0), &(0x7f00000005c0)=0x2)
write(r0, &(0x7f00000004c0)="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", 0xfc)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x80000000, 0x0, 0xa}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/51, 0x33, <r2=>0x0, &(0x7f00000006c0)=""/116, 0x74}}, 0x10)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000400)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x7c}}, 0x120)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x11a)
r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec2b7)
mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f0000000040)='./bus\x00')
mkdirat(r4, &(0x7f0000000040)='./file2\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', <r6=>0x0, 0x7800, 0x710, 0x1, 0x7, {{0x1d, 0x4, 0x2, 0x3, 0x74, 0x67, 0x0, 0x57, 0x2f, 0x0, @multicast1, @empty, {[@noop, @timestamp_addr={0x44, 0xc, 0x90, 0x1, 0x0, [{@multicast1, 0xfffffffa}]}, @end, @noop, @noop, @ssrr={0x89, 0x17, 0xc0, [@private=0xa010100, @remote, @private=0xa010101, @broadcast, @broadcast]}, @noop, @rr={0x7, 0xf, 0xa4, [@loopback, @broadcast, @multicast1]}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x6, 0x11, "6416f4294a62cbd48a52a7080f0afb"}, {0x5, 0x8, "7356b974d6b9"}, {0x1, 0x9, "88113f5a5b5b24"}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00')
writev(r7, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000880)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

268.473404ms ago: executing program 2 (id=391):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x5, 0x5e)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)={0xcfb, 0x2, {0x2, 0x3, 0x8, 0x3}})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0xc0085508, &(0x7f00000000c0)=0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x2400c080)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000003c0)=<r9=>0x0)
setpgid(r8, r9)

90.650217ms ago: executing program 3 (id=392):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (rerun: 64)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r0, 0x1, 0x70bd0a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x464}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x77}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) (async, rerun: 64)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 64)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
signalfd(r2, &(0x7f0000001100)={[0x5]}, 0x8)

89.597154ms ago: executing program 3 (id=393):
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r0=>0xffffffffffffffff})
close(r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x10, 0x34, @random="aaffd70be612b91df30c1587"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x13, 0x34, @random="97174c66c543afde75436d91ae82d2"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2a57916d22f2"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x400c0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2dc, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57eb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "15e349edf7c9c665c7bc289be201d35520f0787a424aa727"}}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xde}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe09b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40010}, 0x8044)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'l2tp\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '!(\x88.$.#!'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c020)
syz_extract_tcp_res(&(0x7f00000008c0)={<r7=>0x41424344}, 0x1, 0xe7c5)
syz_emit_ethernet(0x18a, &(0x7f0000000900)={@random="fdbe165b46fa", @remote, @void, {@mpls_uc={0x8847, {[{0x9}, {0xa3a}, {0x6c14}, {0x4}, {}, {0x1, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}], @ipv6=@tcp={0x1, 0x6, "e51a68", 0x134, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, {[@srh={0x2c, 0x4, 0x4, 0x2, 0x8, 0x20, 0xfa6, [@loopback, @loopback]}, @hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}, @routing={0x21, 0xa, 0x1, 0xf, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2]}, @routing={0x8, 0x8, 0x2, 0x0, 0x0, [@loopback, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0xc, 0x0, 0x5, 0x1, 0x0, 0x8, 0x65}, @fragment={0x2b, 0x0, 0x5, 0x1, 0x0, 0x5, 0x65}], {{0x4e23, 0x4e23, r7, 0x41424344, 0x0, 0x0, 0x10, 0x80, 0x9, 0x0, 0x9, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x7}, @sack={0x5, 0x22, [0x0, 0x81, 0x9, 0x4, 0x0, 0x400, 0x3b63, 0x0]}]}}, {"decfae0224de528e22a8fd70"}}}}}}}}, 0x0)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000ac0))
syz_extract_tcp_res$synack(&(0x7f0000000b00), 0x1, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000b40), 0x100000000, 0x200000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3)
r9 = dup3(r8, r8, 0x80000)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0xc080661a, &(0x7f0000000bc0)={@desc={0x1, 0x0, @desc3}})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r11, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x488c1)
ioctl$SIOCAX25NOUID(r9, 0x89e3, &(0x7f0000000d80)=0x1)
fsetxattr$trusted_overlay_origin(r9, &(0x7f0000000dc0), &(0x7f0000000e00), 0x2, 0x0)
openat$ptp1(0xffffffffffffff9c, &(0x7f0000000e40), 0x125200, 0x0)
syz_emit_ethernet(0xe7, &(0x7f0000000e80)={@remote, @broadcast, @void, {@x25={0x805, {0x0, 0xf4, 0xf3, "d61d3f21f6fffb6272fcaebd819021f92caa0de196778a4609dd8b946e3cbb4d7e15e0028325fe67363ff7ef953347d5694d657139e60a168db72058abd8f40f766bf678b16208fda36b0da060ad720f406a54486c749a9863325d66ec1384bc7a61c162b6b97ea13c3a958ce0ab8476d69cd0327e0c65554fcc089017018ab9de7431a1c3f74e2014fcc42a975d0f5e536651741efb1e15dfd7c5060f86a4c6f0e512b1150b79f49dc20dec89a5a133368ed783dc9f86db56cce8d791cda502c3b9d80ef23135d80499f954ee0cb98fd5ea08ce4e5f"}}}}, &(0x7f0000000f80)={0x0, 0x2, [0xd10, 0xa16, 0xd2f, 0xda8]})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001000), r3)
sendmsg$IPVS_CMD_ZERO(r12, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x130, r13, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe0ad}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc412}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

352.961µs ago: executing program 3 (id=394):
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', <r1=>0x0, 0x4, 0x6, 0x9, 0x7d5, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x20, 0x7, 0x339, 0x7}})
sendmsg$kcm(r0, &(0x7f0000000880)={&(0x7f00000001c0)=@ll={0x11, 0x1, r1, 0x1, 0x5, 0x6, @random="7b6ca6d5428d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="062e88d3420d212619d1bb43c7e4e322b3554066fbe2ebaf3b59715194c9c8754cea214e2d44e22f69bfbce9af29d027de999d7de57ab69adbcac8c1166a557ec6099a41f49484a77b8a2f27966983a9dafb46091c57b36a1bb7790447cbc343294fc0b4a15522d340d790bd70b147bda093845a245e0a50c4872959166a8ebdaeaf4c2c05101535a1ef790c31beac4eb8966144f44c8048025c1e9cebb737fc101a887ec9f3582a7d9f312f8901dfdf36fef1a83604c236c1adf4b6bde1", 0xbe}, {&(0x7f0000000140)="4ad3ef05a9689aff8b47e95e33ca1eeed904c3899d4ad63e4f3d87e88c9fbae67fed4f656d760315df386181d1f801c92c85f3", 0x33}, {&(0x7f0000000300)="2093e8ddc76518e463a4ad1d6a937738ac34696d7017d06d6fab37868987eb7557d19692b1151dd59a3b0b141f40a0ad1fc0fc6246f76058c2cc7f750bc6eb77b16d12d97fa201fa127398357c8c085fe223a45b5ceb1eeeaae397f3c6bc88b1f785646cf73d3c6404a9756474f2247e6bdcd7a8bc336e961c9f26fea66ebc3b76b50239728b2405f10873662309e604cd692d092b28a15f42c88e92acb4082aa15709871610d76ff5cb7112bc5d6d2027d4805a3835ebc63b3f", 0xba}, {&(0x7f00000003c0)="35719c0c368e0388adc24de0a64d2f9c95f4fccd4e920731541af6144c60f0cdb25024273118589e8d4da19bb466b9bed66874c5893ab4464ce64f1d8823733162ae95e54139bef1f6362e6ec4df2220b36bcd6ba03a50ddef5dbd518f27597cd29b78cbe1d8161f07a470dfe2d23e649499c4b4834357c99cffafeca94abe96d9e7e13304de", 0x86}, {&(0x7f0000000480)="3e50e23d5bf061e2081c23c2822b40847c7729a8b95eb0e932dda26f7103de59a4dcf4d86b6a35d4deaecac941a833dc205f1859eadb6056ded4b9c54d293c86fbe4e206c0742ceb51eba43572ebe99b5c4be48aa5f04c9dc080e09831ee20957d20264c63d0864039", 0x69}], 0x5, &(0x7f0000000580)=[{0x90, 0x118, 0x3, "2e1411d83bdf4d85a104f92fef8a009546dc5745dce3c74c733af480ed742aa854fa9f45c15477ec1e9be2d7a4c3988df5dec785c516aa258a5c399b593115aaae0b56b07722a8d7a0fe84e3603810a13d25bad91385736847f2d615646cb687592576a28e1994f00ebe0211f09c62175e263a35785628c17553d2"}, {0xd8, 0x103, 0x10, "cb40563cba966b979924044febf7133d408abc613f190fc34eaf579d29af0ba049915968df1bd6c623f12721df120cdde11aafc613872c5ff5f12149357f605cf2be50b1bb9b236d091c0004fe95b62794219ddebeb0627bcb3b17630258b70ff18dea956ebf7dbf227d54fda2a484f38dda3e842803bd3f2a8c0ef231350a977f6d5ae5982abe55856d53937cb413870ab8109a15ce1689a6040217cdfadf1d39d89740e58960db4db13aff6daeef5da314c0fb25a033554541fe0869dccf9ec1"}, {0x90, 0x10b, 0x8e, "85f77de00c8bc4bf2341dc96d6afc1c60fa288fc150a40b7bcb29c531c4d2244f12121c54428b4165d518c30c9ae4a626690afc64ec2f46d77c572a66b2f76a4fa3db8071727a65942b9dec8fcd29a352d30d12e37c0eacf04f832e4021a2408c9ea5c7d39ee17ba6e432f42f58ca0edc0eb23fce9bf20a5f5596ac389"}, {0x10, 0x116, 0x6}, {0x18, 0x0, 0x400, "73c0"}, {0xc0, 0x1, 0x4, "433386c5dbe350750962be1778db6f0bb0329f121588d1e67f1a78016f2875fe6abdbdfa77b2ca5b8ebafdf2149ab6dc4c284c41013cc490b3f47d1b8f8ab59255eebc036cca06d434e324702e5127eb72bae005dfde7d3892e021710303dc867baead9464ffbc41cae21420784573e619f4675cd27d1ee506bab44a23d723722ef59eaad7eefc360a8a2d2be75af04dbc92e398690d406127ff59daf6de820e9134107811b53923885e4e9e8d70"}], 0x2e0}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800)

0s ago: executing program 3 (id=395):
r0 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
write$qrtrtun(r2, &(0x7f0000000400)="0b8ca3756ea769f253", 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000000)={0x2, 0x0, 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r6})

kernel console output (not intermixed with test programs):

[   53.137079][   T40] audit: type=1400 audit(1765055258.626:61): avc:  denied  { siginh } for  pid=5909 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:26208' (ED25519) to the list of known hosts.
[   55.162903][   T40] audit: type=1400 audit(1765055260.676:62): avc:  denied  { name_bind } for  pid=5917 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   55.212780][   T40] audit: type=1400 audit(1765055260.726:63): avc:  denied  { execute } for  pid=5918 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   55.221437][   T40] audit: type=1400 audit(1765055260.726:64): avc:  denied  { execute_no_trans } for  pid=5918 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   57.328142][   T40] audit: type=1400 audit(1765055262.846:65): avc:  denied  { mounton } for  pid=5918 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   57.337097][   T40] audit: type=1400 audit(1765055262.856:66): avc:  denied  { mount } for  pid=5918 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.338870][ T5918] cgroup: Unknown subsys name 'net'
[   57.468251][ T5918] cgroup: Unknown subsys name 'cpuset'
[   57.473589][ T5918] cgroup: Unknown subsys name 'rlimit'
[   57.645593][ T5923] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   58.290782][ T5918] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.743461][   T40] kauditd_printk_skb: 15 callbacks suppressed
[   61.743475][   T40] audit: type=1400 audit(1765055267.256:82): avc:  denied  { execmem } for  pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   61.933810][   T40] audit: type=1400 audit(1765055267.446:83): avc:  denied  { create } for  pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.954127][   T40] audit: type=1400 audit(1765055267.446:84): avc:  denied  { read write } for  pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   61.965217][   T40] audit: type=1400 audit(1765055267.446:85): avc:  denied  { open } for  pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   61.966155][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.972615][   T40] audit: type=1400 audit(1765055267.456:86): avc:  denied  { ioctl } for  pid=5931 comm="syz-executor" path="socket:[5851]" dev="sockfs" ino=5851 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.977251][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.979280][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.979833][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.980841][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.998133][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.001658][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.004679][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.007589][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.007815][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.008015][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.008967][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.011677][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.021577][   T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.024199][   T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.025510][   T40] audit: type=1400 audit(1765055267.536:87): avc:  denied  { read } for  pid=5931 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   62.025711][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.027933][   T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.035795][   T40] audit: type=1400 audit(1765055267.546:88): avc:  denied  { open } for  pid=5931 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   62.039840][   T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.040691][   T40] audit: type=1400 audit(1765055267.546:89): avc:  denied  { mounton } for  pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   62.040925][ T5291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.041792][ T5291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.281759][   T40] audit: type=1400 audit(1765055267.796:90): avc:  denied  { module_request } for  pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   62.336570][ T5931] chnl_net:caif_netlink_parms(): no params data found
[   62.388753][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   62.393734][ T5932] chnl_net:caif_netlink_parms(): no params data found
[   62.481963][ T5944] chnl_net:caif_netlink_parms(): no params data found
[   62.579726][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.583190][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.585843][ T5931] bridge_slave_0: entered allmulticast mode
[   62.588650][ T5931] bridge_slave_0: entered promiscuous mode
[   62.598255][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.600568][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.602869][ T5932] bridge_slave_0: entered allmulticast mode
[   62.606844][ T5932] bridge_slave_0: entered promiscuous mode
[   62.613837][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.616405][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.618690][ T5932] bridge_slave_1: entered allmulticast mode
[   62.621447][ T5932] bridge_slave_1: entered promiscuous mode
[   62.624370][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.626802][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.629045][ T5931] bridge_slave_1: entered allmulticast mode
[   62.631689][ T5931] bridge_slave_1: entered promiscuous mode
[   62.644333][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.646822][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.649219][ T5940] bridge_slave_0: entered allmulticast mode
[   62.651844][ T5940] bridge_slave_0: entered promiscuous mode
[   62.674273][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.676697][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.678957][ T5940] bridge_slave_1: entered allmulticast mode
[   62.681612][ T5940] bridge_slave_1: entered promiscuous mode
[   62.710370][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.715712][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.720222][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.731521][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.736027][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.740033][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.742962][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.745342][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.747694][ T5944] bridge_slave_0: entered allmulticast mode
[   62.750395][ T5944] bridge_slave_0: entered promiscuous mode
[   62.758839][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.762073][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.765905][ T5944] bridge_slave_1: entered allmulticast mode
[   62.769826][ T5944] bridge_slave_1: entered promiscuous mode
[   62.812016][ T5932] team0: Port device team_slave_0 added
[   62.814718][ T5931] team0: Port device team_slave_0 added
[   62.823536][ T5940] team0: Port device team_slave_0 added
[   62.827621][ T5932] team0: Port device team_slave_1 added
[   62.830532][ T5931] team0: Port device team_slave_1 added
[   62.833679][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.837706][ T5940] team0: Port device team_slave_1 added
[   62.852001][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.883147][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.885472][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.893494][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.898284][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.900512][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.908587][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.918835][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.921872][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.932621][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.937930][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.940421][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.951264][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.955871][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.958195][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.966938][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.971718][ T5944] team0: Port device team_slave_0 added
[   62.974217][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.977232][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.987974][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.006081][ T5944] team0: Port device team_slave_1 added
[   63.043827][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.046197][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.054364][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.064794][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.067213][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.075531][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.087151][ T5931] hsr_slave_0: entered promiscuous mode
[   63.089808][ T5931] hsr_slave_1: entered promiscuous mode
[   63.112551][ T5932] hsr_slave_0: entered promiscuous mode
[   63.115949][ T5932] hsr_slave_1: entered promiscuous mode
[   63.118917][ T5932] debugfs: 'hsr0' already exists in 'hsr'
[   63.121360][ T5932] Cannot create hsr debugfs directory
[   63.160095][ T5944] hsr_slave_0: entered promiscuous mode
[   63.162502][ T5944] hsr_slave_1: entered promiscuous mode
[   63.164625][ T5944] debugfs: 'hsr0' already exists in 'hsr'
[   63.166773][ T5944] Cannot create hsr debugfs directory
[   63.171585][ T5940] hsr_slave_0: entered promiscuous mode
[   63.173985][ T5940] hsr_slave_1: entered promiscuous mode
[   63.176269][ T5940] debugfs: 'hsr0' already exists in 'hsr'
[   63.178306][ T5940] Cannot create hsr debugfs directory
[   63.497982][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.508079][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.518986][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.526375][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.560062][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.565460][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.571048][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.575954][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.668329][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.673444][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.679445][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.684675][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.740069][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.746967][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.756814][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.761141][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.769978][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.785666][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.799952][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[   63.822613][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.825610][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.835982][ T5932] 8021q: adding VLAN 0 to HW filter on device team0
[   63.843936][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.846359][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.854462][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.856978][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.872796][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.875305][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.919627][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.950827][ T5944] 8021q: adding VLAN 0 to HW filter on device team0
[   63.966985][   T40] audit: type=1400 audit(1765055269.486:91): avc:  denied  { sys_module } for  pid=5931 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   63.968886][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.975617][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.984521][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.990085][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.992397][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.011168][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   64.020590][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.022896][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.035551][ T5936] Bluetooth: hci0: command tx timeout
[   64.036018][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.040321][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.088628][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.115548][ T5291] Bluetooth: hci2: command tx timeout
[   64.115583][   T65] Bluetooth: hci3: command tx timeout
[   64.118588][ T5936] Bluetooth: hci1: command tx timeout
[   64.129901][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.189073][ T5931] veth0_vlan: entered promiscuous mode
[   64.202139][ T5931] veth1_vlan: entered promiscuous mode
[   64.212433][ T5932] veth0_vlan: entered promiscuous mode
[   64.223624][ T5932] veth1_vlan: entered promiscuous mode
[   64.229910][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.261358][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.269433][ T5931] veth0_macvtap: entered promiscuous mode
[   64.281476][ T5931] veth1_macvtap: entered promiscuous mode
[   64.293079][ T5932] veth0_macvtap: entered promiscuous mode
[   64.301327][ T5932] veth1_macvtap: entered promiscuous mode
[   64.317512][ T5944] veth0_vlan: entered promiscuous mode
[   64.321890][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.328029][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.338848][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.344716][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.354690][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.357464][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.360333][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.371049][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.375314][ T5944] veth1_vlan: entered promiscuous mode
[   64.389587][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.392718][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.399167][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.410289][ T5940] veth0_vlan: entered promiscuous mode
[   64.414918][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.446623][ T5940] veth1_vlan: entered promiscuous mode
[   64.450851][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.453740][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.493365][ T5944] veth0_macvtap: entered promiscuous mode
[   64.497665][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.498233][ T5944] veth1_macvtap: entered promiscuous mode
[   64.500739][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.518458][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.526121][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.558373][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.558524][ T5940] veth0_macvtap: entered promiscuous mode
[   64.561255][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.569088][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.569523][ T5940] veth1_macvtap: entered promiscuous mode
[   64.578755][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.586953][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.602963][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.607356][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.611900][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.618761][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.622158][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.632510][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.643212][ T4685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.647262][ T6022] fuse: Bad value for 'user_id'
[   64.648254][ T4685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.649303][ T6022] fuse: Bad value for 'user_id'
[   64.657462][ T4685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.658297][ T6023] =======================================================
[   64.658297][ T6023] WARNING: The mand mount option has been deprecated and
[   64.658297][ T6023]          and is ignored by this kernel. Remove the mand
[   64.658297][ T6023]          option from the mount to silence this warning.
[   64.658297][ T6023] =======================================================
[   64.660230][ T4685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.733378][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.741930][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.758093][ T6031] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET)
[   64.764123][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.767047][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.782322][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.786661][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.791989][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.794497][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.885541][ T6041] fuse: Unknown parameter '�@�S
'
[   64.899539][ T6041] fuse: Unknown parameter ''
[   65.040148][ T6053] netlink: 'syz.2.9': attribute type 83 has an invalid length.
[   65.079622][ T6058] sctp: [Deprecated]: syz.2.11 (pid 6058) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.079622][ T6058] Use struct sctp_sack_info instead
[   65.143296][ T6067] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13'.
[   65.208686][ T6075] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2
[   65.273769][ T6075] binder: BINDER_SET_CONTEXT_MGR already set
[   65.276556][ T6075] binder: 6074:6075 ioctl 4018620d 200000004a80 returned -16
[   65.289715][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'.
[   65.341555][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.361597][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'.
[   65.368635][ T6085] Zero length message leads to an empty skb
[   65.381992][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.384906][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.389552][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.393209][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.401018][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.404362][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.408833][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   65.593616][ T6109] netlink: 'syz.2.26': attribute type 1 has an invalid length.
[   65.700458][ T6121] binder: BINDER_SET_CONTEXT_MGR already set
[   65.702964][ T6121] binder: 6120:6121 ioctl 4018620d 200000000100 returned -16
[   65.711862][ T6121] binder: BINDER_SET_CONTEXT_MGR already set
[   65.714520][ T6121] binder: 6120:6121 ioctl 4018620d 200000000100 returned -16
[   65.718470][ T6121] binder: BINDER_SET_CONTEXT_MGR already set
[   65.721071][ T6121] binder: 6120:6121 ioctl 4018620d 200000000100 returned -16
[   65.724467][ T6121] binder: BINDER_SET_CONTEXT_MGR already set
[   65.743237][ T6121] binder: 6120:6121 ioctl 4018620d 200000000100 returned -16
[   65.748808][ T6121] binder: BINDER_SET_CONTEXT_MGR already set
[   65.751752][ T6121] binder: 6120:6121 ioctl 4018620d 200000000100 returned -16
[   65.755370][ T6121] binder: BINDER_SET_CONTEXT_MGR already set
[   65.757759][ T6121] binder: 6120:6121 ioctl 4018620d 200000000100 returned -16
[   65.767179][ T6128] 9pnet_virtio: no channels available for device syz
[   66.006438][ T6147] binder: 6146:6147 ioctl c0306201 200000001040 returned -14
[   66.009001][ T6147] binder: 6146:6147 ioctl c0306201 200000000300 returned -11
[   66.045076][ T6151] erofs: Unknown parameter 'jJv4Q���W1]I���ebarrier<���Ϯ\f*Y'
[   66.079436][ T6151] erofs: Unknown parameter 'jJv4Q���W1]I���ebarrier<���Ϯ\f*Y'
[   66.115243][ T5936] Bluetooth: hci0: command tx timeout
[   66.199266][ T6166] No control pipe specified
[   66.204935][ T5936] Bluetooth: hci1: command tx timeout
[   66.206618][   T65] Bluetooth: hci2: command tx timeout
[   66.206638][ T5291] Bluetooth: hci3: command tx timeout
[   66.239480][ T6172] overlayfs: unescaped trailing colons in lowerdir mount option.
[   66.505069][ T6194] nbd0: detected capacity change from 0 to 127
[   66.510024][   T65] block nbd0: Receive control failed (result -32)
[   66.510265][ T5938] block nbd0: Send control failed (result -32)
[   66.519564][ T5938] block nbd0: Request send failed, requeueing
[   66.527149][   T25] block nbd0: Dead connection, failed to find a fallback
[   66.530608][   T25] block nbd0: shutting down sockets
[   66.532487][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.536145][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[   66.538754][ T5938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.543917][ T5938] Buffer I/O error on dev nbd0, logical block 1, async page read
[   66.546933][ T5938] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.551082][ T5938] Buffer I/O error on dev nbd0, logical block 2, async page read
[   66.553664][ T5938] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.556658][ T5938] Buffer I/O error on dev nbd0, logical block 3, async page read
[   66.559176][ T5938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.562020][ T5938] Buffer I/O error on dev nbd0, logical block 0, async page read
[   66.564431][ T5938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.567326][ T5938] Buffer I/O error on dev nbd0, logical block 1, async page read
[   66.569834][ T5938] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.572631][ T5938] Buffer I/O error on dev nbd0, logical block 2, async page read
[   66.576202][ T5938] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.579161][ T5938] Buffer I/O error on dev nbd0, logical block 3, async page read
[   66.581805][ T5938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.584697][ T5938] Buffer I/O error on dev nbd0, logical block 0, async page read
[   66.587577][ T5938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   66.588515][ T6217] team0: Port device team_slave_1 removed
[   66.590492][ T5938] Buffer I/O error on dev nbd0, logical block 1, async page read
[   66.600233][ T5938] ldm_validate_partition_table(): Disk read failed.
[   66.606362][ T5938] Dev nbd0: unable to read RDB block 0
[   66.609209][ T5938]  nbd0: unable to read partition table
[   66.624915][ T5938] ldm_validate_partition_table(): Disk read failed.
[   66.627811][ T5938] Dev nbd0: unable to read RDB block 0
[   66.630333][ T5938]  nbd0: unable to read partition table
[   66.680604][ T6223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.708289][ T6223] tmpfs: Unknown parameter 'hash'
[   66.742166][ T6226] netlink: 'syz.2.59': attribute type 11 has an invalid length.
[   66.788844][ T6229] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   67.126746][   T40] kauditd_printk_skb: 153 callbacks suppressed
[   67.126758][   T40] audit: type=1326 audit(1765055272.646:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6183 comm="syz.1.48" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3538f7c9 code=0x7fc00000
[   67.169881][   T40] audit: type=1400 audit(1765055272.686:246): avc:  denied  { create } for  pid=6231 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   67.341007][   T40] audit: type=1400 audit(1765055272.856:247): avc:  denied  { write } for  pid=6231 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.585963][   T40] audit: type=1400 audit(1765055273.106:248): avc:  denied  { create } for  pid=6241 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   67.594547][   T40] audit: type=1400 audit(1765055273.106:249): avc:  denied  { write } for  pid=6241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   67.606613][   T40] audit: type=1400 audit(1765055273.106:250): avc:  denied  { append } for  pid=6241 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   67.630506][   T40] audit: type=1400 audit(1765055273.146:251): avc:  denied  { unlink } for  pid=6244 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   67.670993][ T6239] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   67.743521][   T40] audit: type=1400 audit(1765055273.256:252): avc:  denied  { create } for  pid=6250 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.757281][   T40] audit: type=1400 audit(1765055273.256:253): avc:  denied  { setopt } for  pid=6250 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.818141][   T40] audit: type=1400 audit(1765055273.336:254): avc:  denied  { mounton } for  pid=6250 comm="syz.2.63" path="/proc/64/task" dev="proc" ino=8783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   67.852916][ T6260] random: crng reseeded on system resumption
[   67.864233][ T6260] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   67.873362][ T6260] 8021q: adding VLAN 0 to HW filter on device team0
[   67.883520][ T6260] bond0: (slave team0): Enslaving as an active interface with an up link
[   67.889592][ T6260] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   67.898689][ T6260] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   67.910127][ T6260] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.916853][ T6260] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.973688][ T6267] netlink: 'syz.2.65': attribute type 16 has an invalid length.
[   67.977229][ T6267] warning: `syz.2.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.066957][ T6275] input: syz1 as /devices/virtual/input/input5
[   68.194838][   T65] Bluetooth: hci0: command tx timeout
[   68.275151][   T65] Bluetooth: hci1: command tx timeout
[   68.275274][ T5939] Bluetooth: hci2: command tx timeout
[   68.276340][ T5291] Bluetooth: hci3: command tx timeout
[   68.484906][ T6018] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   68.515097][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   68.583430][ T6302] openvswitch: netlink: Flow key attr not present in new flow.
[   68.590317][ T5936] Bluetooth: hci3: unexpected cc 0x203c length: 9 > 1
[   68.590556][ T6302] netlink: 'syz.3.73': attribute type 6 has an invalid length.
[   68.634851][ T6018] usb 7-1: Using ep0 maxpacket: 8
[   68.639715][ T6018] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   68.642758][ T6018] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   68.645923][ T6018] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   68.649043][ T6018] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   68.653041][ T6018] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   68.656501][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.866794][ T6018] usb 7-1: GET_CAPABILITIES returned 0
[   68.869163][ T6018] usbtmc 7-1:16.0: can't read capabilities
[   69.257751][ T6325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.658717][ T6334] veth1_to_batadv: entered promiscuous mode
[   70.056959][ T6363] fuse: Bad value for 'fd'
[   70.275789][ T5936] Bluetooth: hci0: command tx timeout
[   70.342801][ T6373] __nla_validate_parse: 17 callbacks suppressed
[   70.342812][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'.
[   70.355269][ T5936] Bluetooth: hci1: command tx timeout
[   70.355290][ T5939] Bluetooth: hci2: command tx timeout
[   70.641301][ T6388] netlink: 52 bytes leftover after parsing attributes in process `syz.1.101'.
[   70.646764][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.650146][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.659234][ T6388] random: crng reseeded on system resumption
[   71.034976][ T6404] netlink: 'syz.0.105': attribute type 2 has an invalid length.
[   71.204197][   T54] usb 7-1: USB disconnect, device number 2
[   71.314837][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.465216][   T10] usb 5-1: Using ep0 maxpacket: 16
[   71.470115][   T10] usb 5-1: config 0 has an invalid interface number: 141 but max is 3
[   71.472819][   T10] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[   71.476058][   T10] usb 5-1: config 0 has an invalid interface number: 80 but max is 3
[   71.478752][   T10] usb 5-1: config 0 has an invalid interface number: 225 but max is 3
[   71.481584][   T10] usb 5-1: config 0 has an invalid interface number: 20 but max is 3
[   71.484285][   T10] usb 5-1: config 0 has no interface number 0
[   71.487412][   T10] usb 5-1: config 0 has no interface number 1
[   71.494411][   T10] usb 5-1: config 0 has no interface number 2
[   71.496824][   T10] usb 5-1: config 0 has no interface number 3
[   71.498820][   T10] usb 5-1: config 0 interface 141 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   71.502283][   T10] usb 5-1: config 0 interface 141 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64
[   71.505892][   T10] usb 5-1: config 0 interface 141 altsetting 4 endpoint 0x8 has an invalid bInterval 0, changing to 7
[   71.509453][   T10] usb 5-1: config 0 interface 141 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   71.512934][   T10] usb 5-1: config 0 interface 141 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[   71.516705][   T10] usb 5-1: config 0 interface 80 altsetting 9 has a duplicate endpoint with address 0xE, skipping
[   71.520238][   T10] usb 5-1: config 0 interface 80 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[   71.523677][   T10] usb 5-1: config 0 interface 80 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   71.527496][   T10] usb 5-1: config 0 interface 80 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[   71.531460][   T10] usb 5-1: config 0 interface 80 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   71.535332][   T10] usb 5-1: config 0 interface 225 altsetting 253 has a duplicate endpoint with address 0x9, skipping
[   71.538960][   T10] usb 5-1: config 0 interface 225 altsetting 253 has a duplicate endpoint with address 0x7, skipping
[   71.542462][   T10] usb 5-1: config 0 interface 225 altsetting 253 has an invalid descriptor for endpoint zero, skipping
[   71.546891][   T10] usb 5-1: config 0 interface 225 altsetting 253 has a duplicate endpoint with address 0xD, skipping
[   71.550671][   T10] usb 5-1: config 0 interface 20 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[   71.554146][   T10] usb 5-1: config 0 interface 20 altsetting 64 has a duplicate endpoint with address 0xD, skipping
[   71.558025][   T10] usb 5-1: config 0 interface 20 altsetting 64 has a duplicate endpoint with address 0x5, skipping
[   71.561545][   T10] usb 5-1: config 0 interface 20 altsetting 64 has a duplicate endpoint with address 0x7, skipping
[   71.565324][   T10] usb 5-1: config 0 interface 20 altsetting 64 bulk endpoint 0x6 has invalid maxpacket 1024
[   71.568864][   T10] usb 5-1: config 0 interface 20 altsetting 64 has a duplicate endpoint with address 0xD, skipping
[   71.572515][   T10] usb 5-1: config 0 interface 20 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 32
[   71.575855][   T10] usb 5-1: config 0 interface 20 altsetting 64 has a duplicate endpoint with address 0xC, skipping
[   71.579756][   T10] usb 5-1: config 0 interface 20 altsetting 64 has a duplicate endpoint with address 0x9, skipping
[   71.583218][   T10] usb 5-1: config 0 interface 141 has no altsetting 0
[   71.585634][   T10] usb 5-1: config 0 interface 80 has no altsetting 0
[   71.587765][   T10] usb 5-1: config 0 interface 225 has no altsetting 0
[   71.588436][ T6426] netlink: 248 bytes leftover after parsing attributes in process `syz.1.114'.
[   71.589949][   T10] usb 5-1: config 0 interface 20 has no altsetting 0
[   71.591509][   T10] usb 5-1: New USB device found, idVendor=056e, idProduct=abc1, bcdDevice=a2.50
[   71.598566][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.601178][   T10] usb 5-1: Product: syz
[   71.602542][   T10] usb 5-1: Manufacturer: ж
[   71.604063][   T10] usb 5-1: SerialNumber: syz
[   71.608956][   T10] usb 5-1: config 0 descriptor??
[   71.623141][ T6426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.641335][ T6429] loop7: detected capacity change from 0 to 16384
[   71.722296][ T6426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.818348][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.822323][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.834166][ T6426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.856297][ T6431] loop7: detected capacity change from 16384 to 16383
[   71.935355][ T6426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.023342][ T4685] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.031234][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.040601][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.050018][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.086756][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'.
[   72.131140][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'.
[   72.134592][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'.
[   72.146173][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.154955][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'.
[   72.155799][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.157846][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'.
[   72.170152][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.173950][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.258679][   T40] kauditd_printk_skb: 71 callbacks suppressed
[   72.258695][   T40] audit: type=1400 audit(1765055286.775:326): avc:  denied  { create } for  pid=6456 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   72.312500][   T40] audit: type=1400 audit(1765055286.825:327): avc:  denied  { write } for  pid=6460 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   72.316725][ T6461] Bluetooth: MGMT ver 1.23
[   72.320495][   T40] audit: type=1400 audit(1765055286.835:328): avc:  denied  { bind } for  pid=6460 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   72.329259][   T40] audit: type=1400 audit(1765055286.835:329): avc:  denied  { write } for  pid=6460 comm="syz.1.125" path="socket:[11104]" dev="sockfs" ino=11104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   72.375428][ T6468] openvswitch: netlink: Key type 1030 is out of range max 32
[   72.383547][   T10] pegasus 5-1:0.141: probe with driver pegasus failed with error -71
[   72.393575][   T10] pegasus 5-1:0.80: probe with driver pegasus failed with error -71
[   72.412865][   T10] pegasus 5-1:0.225: probe with driver pegasus failed with error -71
[   72.419617][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'.
[   72.425782][ T6473] process 'syz.0.128' launched '/dev/fd/5' with NULL argv: empty string added
[   72.426419][   T10] pegasus 5-1:0.20: probe with driver pegasus failed with error -71
[   72.431926][   T40] audit: type=1400 audit(1765055286.945:330): avc:  denied  { execute_no_trans } for  pid=6472 comm="syz.0.128" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   72.450489][   T10] usb 5-1: USB disconnect, device number 2
[   72.494018][ T6476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.549164][   T40] audit: type=1400 audit(1765055287.065:331): avc:  denied  { ioctl } for  pid=6480 comm="syz.0.131" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   72.558677][ T6481] macvlan0: entered promiscuous mode
[   72.565091][ T6481] netlink: 'syz.0.131': attribute type 1 has an invalid length.
[   72.567796][ T6481] netlink: 'syz.0.131': attribute type 2 has an invalid length.
[   72.614258][   T40] audit: type=1400 audit(1765055287.125:332): avc:  denied  { read } for  pid=6483 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   72.625874][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'.
[   72.630805][ T6486] futex_wake_op: syz.0.133 tries to shift op by -1; fix this program
[   72.666346][ T6476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.713243][ T6494] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   72.780274][   T40] audit: type=1400 audit(1765055287.295:333): avc:  denied  { name_bind } for  pid=6503 comm="syz.1.139" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   72.791384][ T6476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.836379][   T40] audit: type=1400 audit(1765055287.345:334): avc:  denied  { mount } for  pid=6506 comm="syz.1.140" name="/" dev="hugetlbfs" ino=11756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   72.847324][ T6500] netlink: 'syz.0.137': attribute type 3 has an invalid length.
[   72.850455][ T6500] netlink: 'syz.0.137': attribute type 3 has an invalid length.
[   72.882686][   T40] audit: type=1400 audit(1765055287.395:335): avc:  denied  { setopt } for  pid=6511 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.905156][ T6476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.012976][ T1148] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.016486][ T1148] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.027248][ T4685] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.038474][ T4685] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.686705][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6547 comm=syz.1.153
[   73.691041][ T6547] program syz.1.153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.693932][ T6547] ata1.00: invalid command format 0
[   73.784695][ T6561] ksmbd: Unknown IPC event: 1, ignore.
[   73.806750][ T6561] blk_print_req_error: 138 callbacks suppressed
[   73.806763][ T6561] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.812314][ T6561] buffer_io_error: 138 callbacks suppressed
[   73.812324][ T6561] Buffer I/O error on dev nbd0, logical block 0, async page read
[   73.817775][ T6561] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.820770][ T6561] Buffer I/O error on dev nbd0, logical block 1, async page read
[   73.823372][ T6561] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.826474][ T6561] Buffer I/O error on dev nbd0, logical block 2, async page read
[   73.829368][ T6561] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.832242][ T6561] Buffer I/O error on dev nbd0, logical block 3, async page read
[   73.834971][   T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   73.835052][ T6561] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.841723][ T6561] Buffer I/O error on dev nbd0, logical block 0, async page read
[   73.844240][ T6561] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.847078][ T6561] Buffer I/O error on dev nbd0, logical block 1, async page read
[   73.849747][ T6561] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.852607][ T6561] Buffer I/O error on dev nbd0, logical block 2, async page read
[   73.856016][ T6561] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.859861][ T6561] Buffer I/O error on dev nbd0, logical block 3, async page read
[   73.862482][ T6561] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.865638][ T6561] Buffer I/O error on dev nbd0, logical block 0, async page read
[   73.868319][ T6561] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.871353][ T6561] Buffer I/O error on dev nbd0, logical block 1, async page read
[   73.875671][ T6561] ldm_validate_partition_table(): Disk read failed.
[   73.879979][ T6561] Dev nbd0: unable to read RDB block 0
[   73.882732][ T6561]  nbd0: unable to read partition table
[   73.885866][ T6561] F2FS-fs (nbd0): Unable to read 1th superblock
[   73.888111][ T6561] F2FS-fs (nbd0): Unable to read 2th superblock
[   73.888383][ T6569] trusted_key: syz.1.159 sent an empty control message without MSG_MORE.
[   73.975749][ T6574] openvswitch: netlink: IP tunnel dst address not specified
[   74.007500][   T54] usb 7-1: config 0 has no interfaces?
[   74.009980][   T54] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   74.016588][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.030531][   T54] usb 7-1: config 0 descriptor??
[   74.098239][   T53] IPVS: starting estimator thread 0...
[   74.184896][ T6581] IPVS: using max 45 ests per chain, 108000 per kthread
[   74.238519][   T53] usb 7-1: USB disconnect, device number 3
[   75.224884][   T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   75.374960][   T61] usb 5-1: Using ep0 maxpacket: 16
[   75.379713][   T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.384165][   T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.389357][   T61] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   75.394617][   T61] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   75.398832][   T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.404098][   T61] usb 5-1: config 0 descriptor??
[   75.805015][  T141] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   75.818564][   T61] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0002/input/input6
[   75.899394][   T61] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[   75.957991][  T141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.961508][  T141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.964536][  T141] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   75.971246][  T141] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   75.974114][  T141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.978198][  T141] usb 6-1: config 0 descriptor??
[   76.167674][   T24] usb 5-1: USB disconnect, device number 3
[   76.278255][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[   76.280594][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[   76.393445][  T141] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   76.559776][ T6620] netlink: 'syz.2.175': attribute type 11 has an invalid length.
[   76.562586][ T6620] __nla_validate_parse: 4 callbacks suppressed
[   76.562596][ T6620] netlink: 44 bytes leftover after parsing attributes in process `syz.2.175'.
[   76.979569][ T6644] ucma_write: process 124 (syz.0.182) changed security contexts after opening file descriptor, this is not allowed.
[   77.312534][   T40] kauditd_printk_skb: 48 callbacks suppressed
[   77.312546][   T40] audit: type=1400 audit(1765055291.825:384): avc:  denied  { remount } for  pid=6668 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   77.312547][ T6669] hugetlbfs: Unknown parameter 's�ze'
[   77.416431][   T40] audit: type=1400 audit(1765055291.935:385): avc:  denied  { unmount } for  pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   77.452744][   T40] audit: type=1400 audit(1765055291.965:386): avc:  denied  { map_create } for  pid=6670 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.459787][   T40] audit: type=1400 audit(1765055291.965:387): avc:  denied  { map_read map_write } for  pid=6670 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.462170][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'.
[   77.472101][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'.
[   77.476392][ T6672] netlink: 'syz.2.190': attribute type 11 has an invalid length.
[   77.504919][ T6671] team0 (unregistering): Port device team_slave_0 removed
[   77.512443][ T6671] team0 (unregistering): Port device team_slave_1 removed
[   77.697598][ T6678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.193'.
[   77.735620][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'.
[   78.457378][ T6019] usb 6-1: USB disconnect, device number 2
[   78.526451][   T40] audit: type=1400 audit(1765055293.045:388): avc:  denied  { getopt } for  pid=6684 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   78.565539][ T6680] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   78.568135][ T6680] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   78.574004][ T6680] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   78.579676][ T6680] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   78.582054][ T6680] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   78.585643][ T6680] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   78.588569][ T6680] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   78.590886][ T6680] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   78.593709][ T6680] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   78.599733][ T6680] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   78.601870][ T6680] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   78.605850][ T6680] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   78.649288][   T40] audit: type=1400 audit(1765055293.165:389): avc:  denied  { mounton } for  pid=6690 comm="syz.2.198" path="/59/file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   78.664095][   T40] audit: type=1400 audit(1765055293.175:390): avc:  denied  { getopt } for  pid=6689 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   78.767364][   T40] audit: type=1400 audit(1765055293.285:391): avc:  denied  { setopt } for  pid=6696 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   78.775438][   T40] audit: type=1400 audit(1765055293.285:392): avc:  denied  { bind } for  pid=6696 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   78.781669][   T40] audit: type=1400 audit(1765055293.285:393): avc:  denied  { listen } for  pid=6696 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   78.924048][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 200
[   79.033874][ T6715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6715 comm=syz.1.205
[   79.041036][ T6715] netlink: 360 bytes leftover after parsing attributes in process `syz.1.205'.
[   79.071710][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'.
[   79.118931][ T6725] qnx6: unable to read the first superblock
[   79.121101][ T6725] qnx6: unable to read the first superblock
[   79.123384][ T6725] qnx6: unable to read the first superblock
[   79.159535][ T6732] binder: 6728:6732 ioctl 4018620d 0 returned -22
[   79.164037][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.164260][ T6730] binder_alloc: binder_alloc_mmap_handler: 6729 200000ffd000-200001000000 already mapped failed -16
[   79.166850][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.166942][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.166959][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.167025][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.172563][ T6730] binder_alloc: binder_alloc_mmap_handler: 6729 200000ffd000-200001000000 already mapped failed -16
[   79.174126][ T6733] binder_alloc: 6729: binder_alloc_buf, no vma
[   79.177652][ T6732] binder: 6728:6732 ioctl c0306201 0 returned -14
[   79.179827][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.210'.
[   79.182550][ T6730] binder_alloc: binder_alloc_mmap_handler: 6729 200000ffd000-200001000000 already mapped failed -16
[   79.184610][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.195036][ T6730] binder_alloc: binder_alloc_mmap_handler: 6729 200000ffd000-200001000000 already mapped failed -16
[   79.197503][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.202785][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.205450][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.207667][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.210081][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.212022][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.214411][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.216656][ T6730] binder_alloc: binder_alloc_mmap_handler: 6729 200000ffd000-200001000000 already mapped failed -16
[   79.216698][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.220419][ T6730] binder_alloc: binder_alloc_mmap_handler: 6729 200000ffd000-200001000000 already mapped failed -16
[   79.222665][ T6731] binder: BINDER_SET_CONTEXT_MGR already set
[   79.228342][ T6731] binder: 6729:6731 ioctl 4018620d 200000004a80 returned -16
[   79.334080][ T5939] Bluetooth: hci0: unexpected event for opcode 0x200a
[   79.430384][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   79.433288][ T6760] bridge_slave_1: left allmulticast mode
[   79.435082][ T6760] bridge_slave_1: left promiscuous mode
[   79.437859][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.442158][ T6760] bridge_slave_0: left allmulticast mode
[   79.443975][ T6760] bridge_slave_0: left promiscuous mode
[   79.446057][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.480689][ T6763] EXT4-fs (nbd3): unable to read superblock
[   79.547078][ T6768] netlink: 120 bytes leftover after parsing attributes in process `syz.3.220'.
[   79.866970][ T6794] netlink: 'syz.1.228': attribute type 4 has an invalid length.
[   79.903916][ T6796] smc: net device bond0 applied user defined pnetid SYZ2
[   79.920476][ T6796] smc: removing net device bond0 with user defined pnetid SYZ2
[   79.923877][ T6796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.930551][ T6796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.936722][ T6796] bond0 (unregistering): Released all slaves
[   79.986411][ T6799] binder: BINDER_SET_CONTEXT_MGR already set
[   79.988341][ T6799] binder: 6797:6799 ioctl 4018620d 2000000002c0 returned -16
[   80.263569][ T6803] overlayfs: failed to resolve './file0': -2
[   80.264401][ T6804] overlayfs: failed to resolve './file0': -2
[   80.475257][ T6809] kvm: pic: non byte read
[   80.605163][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout
[   80.607910][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[   80.685022][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.217725][ T6802] orangefs_mount: mount request failed with -4
[   81.530539][ T6875] loop5: detected capacity change from 0 to 128
[   81.830330][ T6906] ip6t_srh: unknown srh match flags  4000
[   81.912247][ T6911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6911 comm=syz.0.260
[   81.921166][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6911 comm=syz.0.260
[   81.926736][ T6911] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[   81.935035][ T1144] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   81.955471][ T6918] __nla_validate_parse: 4 callbacks suppressed
[   81.955488][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   81.956873][ T6911] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.971039][ T6911] bond1: (slave dummy0): making interface the new active one
[   81.974521][ T6911] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   82.026323][ T6922] binder: 6921:6922 ioctl 8010671f 200000000280 returned -22
[   82.050684][ T6924] netlink: 344 bytes leftover after parsing attributes in process `syz.2.263'.
[   82.094823][ T1144] usb 6-1: Using ep0 maxpacket: 8
[   82.098550][ T1144] usb 6-1: config 0 interface 0 has no altsetting 0
[   82.100636][ T1144] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   82.104153][ T1144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.108150][ T1144] usb 6-1: config 0 descriptor??
[   82.200800][ T6937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.268'.
[   82.209297][ T6937] tmpfs: Bad value for 'mpol'
[   82.358445][   T40] kauditd_printk_skb: 33 callbacks suppressed
[   82.358462][   T40] audit: type=1400 audit(1765055296.875:427): avc:  denied  { write } for  pid=6950 comm="syz.0.272" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   82.358535][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.411397][ T6955] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[   82.414106][ T6955] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.274'.
[   82.439326][   T40] audit: type=1400 audit(1765055296.955:428): avc:  denied  { connect } for  pid=6956 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   82.492341][   T40] audit: type=1400 audit(1765055297.005:429): avc:  denied  { accept } for  pid=6956 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   82.505720][   T40] audit: type=1400 audit(1765055297.025:430): avc:  denied  { read } for  pid=6956 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   82.512345][ T6895] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   82.515642][   T40] audit: type=1400 audit(1765055297.035:431): avc:  denied  { bind } for  pid=6956 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   82.518103][ T1144] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[   82.523808][   T40] audit: type=1400 audit(1765055297.035:432): avc:  denied  { listen } for  pid=6956 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   82.537521][ T6962] netlink: 'syz.0.277': attribute type 3 has an invalid length.
[   82.674900][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout
[   82.676855][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[   82.681210][   T40] audit: type=1400 audit(1765055297.195:433): avc:  denied  { setopt } for  pid=6971 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   82.713686][ T6964] mmap: syz.0.278 (6964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   82.730626][ T1144] usb 6-1: USB disconnect, device number 3
[   82.754972][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[   82.821212][ T6984] bond0: (slave team0): Releasing backup interface
[   82.837206][ T6984] team0 (unregistering): Port device team_slave_0 removed
[   82.865902][ T6987] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   82.881016][   T40] audit: type=1400 audit(1765055297.395:434): avc:  denied  { accept } for  pid=6983 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   82.907346][ T6992] fuse: Unknown parameter ''
[   82.998126][ T7003] fuse: Bad value for 'rootmode'
[   83.032807][   T40] audit: type=1400 audit(1765055297.545:435): avc:  denied  { mount } for  pid=7008 comm="syz.2.292" name="/" dev="ramfs" ino=17429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   83.043304][ T7009] openvswitch: netlink: Key type 262 is out of range max 32
[   83.072138][ T7012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=7012 comm=syz.2.293
[   83.077009][ T7012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7012 comm=syz.2.293
[   83.233718][ T7020] xt_hashlimit: size too large, truncated to 1048576
[   83.309555][   T40] audit: type=1400 audit(1765055297.825:436): avc:  denied  { ioctl } for  pid=7023 comm="syz.3.297" path="socket:[15443]" dev="sockfs" ino=15443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   83.483099][ T7047] tmpfs: User quota block hardlimit too large.
[   83.920483][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   84.194840][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   84.225797][ T7069] 9pnet_virtio: no channels available for device syz
[   84.229408][ T7068] No control pipe specified
[   84.298079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.300974][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.303915][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.407619][ T7071] syzkaller1: entered promiscuous mode
[   84.409507][ T7071] syzkaller1: entered allmulticast mode
[   84.754871][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[   84.754940][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout
[   84.805917][ T1144] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   84.835006][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout
[   84.938877][ T7104] evm: overlay not supported
[   84.990236][ T1144] usb 6-1: config 1 has an invalid interface number: 109 but max is 3
[   84.992613][ T1144] usb 6-1: config 1 has an invalid interface number: 144 but max is 3
[   84.995473][ T1144] usb 6-1: config 1 has an invalid interface number: 187 but max is 3
[   84.998070][ T1144] usb 6-1: config 1 has an invalid interface number: 153 but max is 3
[   85.000412][ T1144] usb 6-1: config 1 has an invalid interface number: 61 but max is 3
[   85.002739][ T1144] usb 6-1: config 1 has 5 interfaces, different from the descriptor's value: 4
[   85.006249][ T1144] usb 6-1: config 1 has no interface number 0
[   85.008260][ T1144] usb 6-1: config 1 has no interface number 1
[   85.010182][ T1144] usb 6-1: config 1 has no interface number 2
[   85.012360][ T1144] usb 6-1: config 1 has no interface number 3
[   85.014532][ T1144] usb 6-1: config 1 has no interface number 4
[   85.017116][ T1144] usb 6-1: config 1 interface 109 altsetting 9 endpoint 0x9 is Bulk; changing to Interrupt
[   85.020712][ T1144] usb 6-1: config 1 interface 109 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[   85.025310][ T1144] usb 6-1: config 1 interface 144 altsetting 234 endpoint 0xC has invalid maxpacket 512, setting to 8
[   85.029166][ T1144] usb 6-1: config 1 interface 144 altsetting 234 endpoint 0xE has invalid maxpacket 48, setting to 8
[   85.033075][ T1144] usb 6-1: config 1 interface 144 altsetting 234 has a duplicate endpoint with address 0x9, skipping
[   85.037318][ T1144] usb 6-1: config 1 interface 144 altsetting 234 has a duplicate endpoint with address 0x9, skipping
[   85.041380][ T1144] usb 6-1: config 1 interface 144 altsetting 234 endpoint 0x8 has invalid wMaxPacketSize 0
[   85.045226][ T1144] usb 6-1: config 1 interface 144 altsetting 234 has a duplicate endpoint with address 0x9, skipping
[   85.050240][ T1144] usb 6-1: config 1 interface 144 altsetting 234 has a duplicate endpoint with address 0x7, skipping
[   85.054205][ T1144] usb 6-1: config 1 interface 144 altsetting 234 has 9 endpoint descriptors, different from the interface descriptor's value: 21
[   85.059254][ T1144] usb 6-1: config 1 interface 153 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[   85.063145][ T1144] usb 6-1: config 1 interface 153 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[   85.067116][ T1144] usb 6-1: config 1 interface 153 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   85.070985][ T1144] usb 6-1: config 1 interface 153 altsetting 5 endpoint 0xA has invalid maxpacket 64, setting to 8
[   85.074942][ T1144] usb 6-1: config 1 interface 153 altsetting 5 endpoint 0x1 is Bulk; changing to Interrupt
[   85.078598][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[   85.082477][ T1144] usb 6-1: config 1 interface 61 altsetting 3 endpoint 0x5 has invalid maxpacket 64, setting to 8
[   85.086424][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[   85.090279][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[   85.093581][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has an endpoint descriptor with address 0xB6, changing to 0x86
[   85.097295][ T1144] usb 6-1: config 1 interface 61 altsetting 3 endpoint 0x86 has invalid maxpacket 25130, setting to 8
[   85.100731][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[   85.104035][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   85.107456][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[   85.110876][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   85.114282][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[   85.117744][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[   85.121158][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[   85.124460][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   85.127940][ T1144] usb 6-1: config 1 interface 61 altsetting 3 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[   85.132114][ T1144] usb 6-1: config 1 interface 109 has no altsetting 0
[   85.134255][ T1144] usb 6-1: config 1 interface 144 has no altsetting 0
[   85.136426][ T1144] usb 6-1: config 1 interface 187 has no altsetting 0
[   85.138578][ T1144] usb 6-1: config 1 interface 153 has no altsetting 0
[   85.140771][ T1144] usb 6-1: config 1 interface 61 has no altsetting 0
[   85.278547][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'.
[   85.354691][ T7128] random: crng reseeded on system resumption
[   85.363300][ T7128] Restarting kernel threads ...
[   85.369426][ T7128] Done restarting kernel threads.
[   85.372648][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'.
[   85.388707][ T7130] x_tables: ip_tables: osf match: only valid for protocol 6
[   85.421095][ T5936] Bluetooth: hci1: ACL packet for unknown connection handle 201
[   85.659203][ T7142] hpfs: Bad magic ... probably not HPFS
[   85.662579][ T7142] hpfs: Bad magic ... probably not HPFS
[   85.736191][ T6018] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   85.904846][ T6018] usb 5-1: Using ep0 maxpacket: 8
[   85.909669][ T6018] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   85.912704][ T6018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.916831][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.920078][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.920095][ T6018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.920125][ T6018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.934130][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.032094][ T7160] overlay: Unknown parameter 'fsuuid'
[   86.076701][ T7165] netlink: 220 bytes leftover after parsing attributes in process `syz.2.343'.
[   86.080052][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'.
[   86.083272][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'.
[   86.148284][ T6018] usb 5-1: GET_CAPABILITIES returned 0
[   86.150185][ T6018] usbtmc 5-1:16.0: can't read capabilities
[   86.186389][ T7167] comedi: valid board names for 8255 driver are:
[   86.188474][ T7167]  8255
[   86.189410][ T7167] comedi: valid board names for vmk80xx driver are:
[   86.191468][ T7167]  vmk80xx
[   86.192417][ T7167] comedi: valid board names for usbduxsigma driver are:
[   86.194561][ T7167]  usbduxsigma
[   86.196393][ T7167] comedi: valid board names for usbduxfast driver are:
[   86.198712][ T7167]  usbduxfast
[   86.199936][ T7167] comedi: valid board names for usbdux driver are:
[   86.202017][ T7167]  usbdux
[   86.202997][ T7167] comedi: valid board names for ni6501 driver are:
[   86.210086][ T7167]  ni6501
[   86.211114][ T7167] comedi: valid board names for dt9812 driver are:
[   86.213260][ T7167]  dt9812
[   86.214240][ T7167] comedi: valid board names for ni_labpc_cs driver are:
[   86.216599][ T7167]  ni_labpc_cs
[   86.218397][ T7167] comedi: valid board names for ni_daq_700 driver are:
[   86.221843][ T7167]  ni_daq_700
[   86.223461][ T7167] comedi: valid board names for labpc_pci driver are:
[   86.226345][ T7167]  labpc_pci
[   86.227680][ T7167] comedi: valid board names for adl_pci9118 driver are:
[   86.230590][ T7167]  pci9118dg
[   86.231937][ T7167]  pci9118hg
[   86.233357][ T7167]  pci9118hr
[   86.234720][ T7167] comedi: valid board names for 8255_pci driver are:
[   86.237650][ T7167]  8255_pci
[   86.238936][ T7167] comedi: valid board names for s526 driver are:
[   86.241564][ T7167]  s526
[   86.242735][ T7167] comedi: valid board names for multiq3 driver are:
[   86.245629][ T7167]  multiq3
[   86.246947][ T7167] comedi: valid board names for pcmuio driver are:
[   86.249744][ T7167]  pcmuio48
[   86.251091][ T7167]  pcmuio96
[   86.252455][ T7167] comedi: valid board names for pcmmio driver are:
[   86.255234][ T7167]  pcmmio
[   86.256452][ T7167] comedi: valid board names for pcmda12 driver are:
[   86.259081][ T7167]  pcmda12
[   86.260415][ T7167] comedi: valid board names for pcmad driver are:
[   86.262966][ T7167]  pcmad12
[   86.264236][ T7167]  pcmad16
[   86.265635][ T7167] comedi: valid board names for ni_labpc driver are:
[   86.268508][ T7167]  lab-pc-1200
[   86.269996][ T7167]  lab-pc-1200ai
[   86.271457][ T7167]  lab-pc+
[   86.272734][ T7167] comedi: valid board names for atmio16 driver are:
[   86.276025][ T7167]  atmio16
[   86.277443][ T7167]  atmio16d
[   86.278760][ T7167] comedi: valid board names for ni_at_ao driver are:
[   86.281445][ T7167]  at-ao-6
[   86.282795][ T7167]  at-ao-10
[   86.284124][ T7167] comedi: valid board names for ni_at_a2150 driver are:
[   86.287011][ T7167]  ni_at_a2150
[   86.288413][ T7167] comedi: valid board names for adq12b driver are:
[   86.291021][ T7167]  adq12b
[   86.292251][ T7167] comedi: valid board names for mpc624 driver are:
[   86.294980][ T7167]  mpc624
[   86.296200][ T7167] comedi: valid board names for c6xdigio driver are:
[   86.298990][ T7167]  c6xdigio
[   86.300317][ T7167] comedi: valid board names for aio_iiro_16 driver are:
[   86.303104][ T7167]  aio_iiro_16
[   86.304505][ T7167] comedi: valid board names for aio_aio12_8 driver are:
[   86.307357][ T7167]  aio_aio12_8
[   86.308719][ T7167]  aio_ai12_8
[   86.310136][ T7167]  aio_ao12_4
[   86.311528][ T7167] comedi: valid board names for fl512 driver are:
[   86.314076][ T7167]  fl512
[   86.315341][ T7167] comedi: valid board names for dmm32at driver are:
[   86.318103][ T7167]  dmm32at
[   86.319456][ T7167] comedi: valid board names for dt282x driver are:
[   86.321701][ T7167]  dt2821
[   86.322662][ T7167]  dt2821-f
[   86.323692][ T7167]  dt2821-g
[   86.324826][ T7167]  dt2823
[   86.325798][ T7167]  dt2824-pgh
[   86.326873][ T7167]  dt2824-pgl
[   86.327940][ T7167]  dt2825
[   86.328845][ T7167]  dt2827
[   86.329773][ T7167]  dt2828
[   86.330684][ T7167]  dt2829
[   86.331622][ T7167]  dt21-ez
[   86.332689][ T7167]  dt23-ez
[   86.333693][ T7167]  dt24-ez
[   86.334655][ T7167]  dt24-ez-pgl
[   86.335780][ T7167] comedi: valid board names for dt2817 driver are:
[   86.337805][ T7167]  dt2817
[   86.338723][ T7167] comedi: valid board names for dt2815 driver are:
[   86.340718][ T7167]  dt2815
[   86.341685][ T7167] comedi: valid board names for dt2814 driver are:
[   86.343648][ T7167]  dt2814
[   86.344569][ T7167] comedi: valid board names for dt2811 driver are:
[   86.346632][ T7167]  dt2811-pgh
[   86.347673][ T7167]  dt2811-pgl
[   86.348417][ T7138] capability: warning: `syz.0.333' uses 32-bit capabilities (legacy support in use)
[   86.348708][ T7167] comedi: valid board names for dt2801 driver are:
[   86.348727][ T7167]  dt2801
[   86.348731][ T7167] comedi: valid board names for das6402 driver are:
[   86.348736][ T7167]  das6402-12
[   86.348740][ T7167]  das6402-16
[   86.358760][ T7167] comedi: valid board names for das1800 driver are:
[   86.360748][ T7167]  das-1701st
[   86.361810][ T7167]  das-1701st-da
[   86.362928][ T7167]  das-1702st
[   86.363948][ T7167]  das-1702st-da
[   86.365119][ T7167]  das-1702hr
[   86.366211][ T7167]  das-1702hr-da
[   86.367335][ T7167]  das-1701ao
[   86.368374][ T7167]  das-1702ao
[   86.369505][ T7167]  das-1801st
[   86.370560][ T7167]  das-1801st-da
[   86.371697][ T7167]  das-1802st
[   86.372728][ T7167]  das-1802st-da
[   86.373868][ T7167]  das-1802hr
[   86.374991][ T7167]  das-1802hr-da
[   86.376118][ T7167]  das-1801hc
[   86.377174][ T7167]  das-1802hc
[   86.378511][ T7167]  das-1801ao
[   86.379597][ T7167]  das-1802ao
[   86.380654][ T7167] comedi: valid board names for das800 driver are:
[   86.382644][ T7167]  das-800
[   86.383612][ T7167]  cio-das800
[   86.384637][ T7167]  das-801
[   86.385743][ T7167]  cio-das801
[   86.386779][ T7167]  das-802
[   86.387735][ T7167]  cio-das802
[   86.388782][ T7167]  cio-das802/16
[   86.389976][ T7167] comedi: valid board names for isa-das08 driver are:
[   86.392070][ T7167]  isa-das08
[   86.393131][ T7167]  das08-pgm
[   86.394178][ T7167]  das08-pgh
[   86.395278][ T7167]  das08-pgl
[   86.396283][ T7167]  das08-aoh
[   86.397323][ T7167]  das08-aol
[   86.398378][ T7167]  das08-aom
[   86.399499][ T7167]  das08/jr-ao
[   86.400538][ T7167]  das08jr-16-ao
[   86.401696][ T7167]  pc104-das08
[   86.402750][ T7167]  das08jr/16
[   86.403786][ T7167] comedi: valid board names for das16m1 driver are:
[   86.405910][ T7167]  das16m1
[   86.406870][ T7167] comedi: valid board names for dac02 driver are:
[   86.408814][ T7167]  dac02
[   86.409754][ T7167] comedi: valid board names for rti802 driver are:
[   86.411722][ T7167]  rti802
[   86.412650][ T7167] comedi: valid board names for rti800 driver are:
[   86.414671][ T7167]  rti800
[   86.415678][ T7167]  rti815
[   86.416587][ T7167] comedi: valid board names for pcm3724 driver are:
[   86.418628][ T7167]  pcm3724
[   86.419637][ T7167] comedi: valid board names for pcl818 driver are:
[   86.421553][ T7167]  pcl818l
[   86.422511][ T7167]  pcl818h
[   86.423466][ T7167]  pcl818hd
[   86.424469][ T7167]  pcl818hg
[   86.425559][ T7167]  pcl818
[   86.426480][ T7167]  pcl718
[   86.427403][ T7167]  pcm3718
[   86.428374][ T7167] comedi: valid board names for pcl816 driver are:
[   86.430408][ T7167]  pcl816
[   86.431344][ T7167]  pcl814b
[   86.432372][ T7167] comedi: valid board names for pcl812 driver are:
[   86.434380][ T7167]  pcl812
[   86.437168][ T7167]  pcl812pg
[   86.438185][ T7167]  acl8112pg
[   86.439210][ T7167]  acl8112dg
[   86.440253][ T7167]  acl8112hg
[   86.441268][ T7167]  a821pgl
[   86.442241][ T7167]  a821pglnda
[   86.443303][ T7167]  a821pgh
[   86.444277][ T7167]  a822pgl
[   86.445384][ T7167]  a822pgh
[   86.446360][ T7167]  a823pgl
[   86.447341][ T7167]  a823pgh
[   86.448311][ T7167]  pcl813
[   86.449297][ T7167]  pcl813b
[   86.450288][ T7167]  acl8113
[   86.451261][ T7167]  iso813
[   86.452200][ T7167]  acl8216
[   86.453191][ T7167]  a826pg
[   86.454114][ T7167] comedi: valid board names for pcl730 driver are:
[   86.456158][ T7167]  pcl730
[   86.457108][ T7167]  iso730
[   86.458020][ T7167]  acl7130
[   86.458996][ T7167]  pcm3730
[   86.459993][ T7167]  pcl725
[   86.460939][ T7167]  p8r8dio
[   86.461938][ T7167]  acl7225b
[   86.462962][ T7167]  p16r16dio
[   86.464008][ T7167]  pcl733
[   86.465028][ T7167]  pcl734
[   86.465975][ T7167]  opmm-1616-xt
[   86.467080][ T7167]  pearl-mm-p
[   86.468151][ T7167]  ir104-pbf
[   86.469198][ T7167] comedi: valid board names for pcl726 driver are:
[   86.471297][ T7167]  pcl726
[   86.472251][ T7167]  pcl727
[   86.473202][ T7167]  pcl728
[   86.474139][ T7167]  acl6126
[   86.475185][ T7167]  acl6128
[   86.476152][ T7167] comedi: valid board names for pcl724 driver are:
[   86.478180][ T7167]  pcl724
[   86.479118][ T7167]  pcl722
[   86.480387][ T7167]  pcl731
[   86.481341][ T7167]  acl7122
[   86.482384][ T7167]  acl7124
[   86.483333][ T7167]  pet48dio
[   86.484336][ T7167]  pcmio48
[   86.485349][ T7167]  onyx-mm-dio
[   86.486352][ T7167] comedi: valid board names for pcl711 driver are:
[   86.488361][ T7167]  pcl711
[   86.489294][ T7167]  pcl711b
[   86.490310][ T7167]  acl8112hg
[   86.491346][ T7167]  acl8112dg
[   86.492383][ T7167] comedi: valid board names for amplc_pc263 driver are:
[   86.494536][ T7167]  pc263
[   86.495761][ T7167] comedi: valid board names for amplc_pc236 driver are:
[   86.497928][ T7167]  pc36at
[   86.498944][ T7167] comedi: valid board names for amplc_dio200 driver are:
[   86.501239][ T7167]  pc212e
[   86.502197][ T7167]  pc214e
[   86.503235][ T7167]  pc215e
[   86.504170][ T7167]  pc218e
[   86.505211][ T7167]  pc272e
[   86.506145][ T7167] comedi: valid board names for comedi_parport driver are:
[   86.508365][ T7167]  comedi_parport
[   86.509564][ T7167] comedi: valid board names for comedi_test driver are:
[   86.511688][ T7167]  comedi_test
[   86.512773][ T7167] comedi: valid board names for comedi_bond driver are:
[   86.518182][ T7167]  comedi_bond
[   86.526246][   T29] cfg80211: failed to load regulatory.db
[   86.536287][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.562628][ T7172] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   86.564877][ T7172] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   86.568121][ T7172] vhci_hcd vhci_hcd.0: Device attached
[   86.582142][ T7173] vhci_hcd: connection closed
[   86.584013][ T4685] vhci_hcd: stop threads
[   86.588400][ T4685] vhci_hcd: release socket
[   86.590287][ T4685] vhci_hcd: disconnect device
[   87.097271][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'.
[   87.434941][ T6018] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   87.568849][ T1144] usb 6-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=98.45
[   87.572377][ T1144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.580906][ T1144] usb 6-1: can't set config #1, error -71
[   87.585186][ T1144] usb 6-1: USB disconnect, device number 4
[   87.594965][ T6018] usb 7-1: Using ep0 maxpacket: 8
[   87.597615][ T7185] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   87.598268][ T6018] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[   87.603737][ T6018] usb 7-1: config 0 has no interface number 0
[   87.605758][ T6018] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   87.609348][ T6018] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F
[   87.612846][ T6018] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 58059, setting to 1024
[   87.616333][ T6018] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   87.620355][ T6018] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   87.623170][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.628246][ T6018] usb 7-1: config 0 descriptor??
[   87.634239][ T6018] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[   87.833851][ T6018] usb 7-1: USB disconnect, device number 4
[   87.840276][ T6018] ldusb 7-1:0.55: LD USB Device #1 now disconnected
[   88.152352][   T40] kauditd_printk_skb: 31 callbacks suppressed
[   88.152362][   T40] audit: type=1400 audit(1765055302.665:468): avc:  denied  { mount } for  pid=7188 comm="syz.3.351" name="/" dev="pstore" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   88.203554][   T40] audit: type=1400 audit(1765055302.715:469): avc:  denied  { create } for  pid=7192 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   88.211601][   T40] audit: type=1400 audit(1765055302.725:470): avc:  denied  { write } for  pid=7192 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   88.250322][ T7195] tmpfs: Unknown parameter 'usrquota��'
[   88.319289][ T6018] IPVS: starting estimator thread 0...
[   88.386065][ T7202] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   88.391460][ T7202] bond1: (slave lo): speed changed to 0 on port 1
[   88.394347][ T7202] bond1: (slave lo): Enslaving as a backup interface with an up link
[   88.398555][ T7202] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   88.401871][ T7207] libceph: resolve '4' (ret=-3): failed
[   88.407753][   T40] audit: type=1400 audit(1765055302.925:471): avc:  denied  { map } for  pid=7206 comm="syz.2.358" path="net:[4026533030]" dev="nsfs" ino=4026533030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   88.415971][   T40] audit: type=1400 audit(1765055302.935:472): avc:  denied  { write } for  pid=7206 comm="syz.2.358" path="net:[4026533030]" dev="nsfs" ino=4026533030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   88.425154][ T7200] IPVS: using max 45 ests per chain, 108000 per kthread
[   88.482379][   T24] usb 5-1: USB disconnect, device number 4
[   88.544647][   T40] audit: type=1400 audit(1765055303.055:473): avc:  denied  { ioctl } for  pid=7214 comm="syz.1.361" path="socket:[15881]" dev="sockfs" ino=15881 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   88.545984][ T7228] binder: 7214:7228 ioctl c018620c 200000000000 returned -22
[   88.615550][ T7238] netlink: 'syz.2.367': attribute type 2 has an invalid length.
[   88.738617][ T7251] netlink: 5 bytes leftover after parsing attributes in process `syz.0.371'.
[   88.741519][ T7251] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[   88.886854][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[   88.890275][ T7260] netlink: 96 bytes leftover after parsing attributes in process `syz.1.375'.
[   88.895493][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[   88.898832][ T7260] nbd: must specify at least one socket
[   88.908374][ T7269] tmpfs: Unknown parameter '0x0000000000000003��'
[   88.996259][   T40] audit: type=1400 audit(1765055303.515:474): avc:  denied  { read } for  pid=7276 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.017285][ T7278] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   89.026851][ T7278] kvm: pic: level sensitive irq not supported
[   89.027501][ T7278] kvm: pic: non byte read
[   89.037233][ T7278] kvm: pic: level sensitive irq not supported
[   89.038041][ T7278] kvm: pic: non byte read
[   89.049817][ T7278] kvm: pic: level sensitive irq not supported
[   89.050250][ T7278] kvm: pic: non byte read
[   89.056466][ T7278] kvm: pic: level sensitive irq not supported
[   89.057098][ T7278] kvm: pic: non byte read
[   89.063241][ T7278] kvm: pic: level sensitive irq not supported
[   89.067200][ T7278] kvm: pic: non byte read
[   89.167448][ T5936] Bluetooth: hci1: unexpected event for opcode 0x080f
[   89.238041][ T7298] erspan1: entered promiscuous mode
[   89.324895][   T54] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   89.339094][   T40] audit: type=1400 audit(1765055303.855:475): avc:  denied  { create } for  pid=7306 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   89.345839][   T40] audit: type=1400 audit(1765055303.865:476): avc:  denied  { write } for  pid=7306 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   89.380421][ T7310] netlink: 'syz.3.390': attribute type 12 has an invalid length.
[   89.406776][ T7310] ALSA: seq fatal error: cannot create timer (-19)
[   89.410110][   T40] audit: type=1400 audit(1765055303.925:477): avc:  denied  { read write } for  pid=7308 comm="syz.3.390" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   89.420587][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.423111][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.424627][ T7311] geneve2: entered promiscuous mode
[   89.426094][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.427202][ T7311] geneve2: entered allmulticast mode
[   89.429564][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.433864][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.437371][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.439797][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.443177][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x2
[   89.445703][ T5999] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0
[   89.454147][ T5999] hid-generic 00A0:0006:0003.0005: hidraw1: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   89.474795][   T54] usb 6-1: Using ep0 maxpacket: 32
[   89.477681][   T54] usb 6-1: config 0 has an invalid interface number: 109 but max is 0
[   89.480261][   T54] usb 6-1: config 0 has no interface number 0
[   89.482216][   T54] usb 6-1: too many endpoints for config 0 interface 109 altsetting 47: 47, using maximum allowed: 30
[   89.483940][ T7315] fido_id[7315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   89.485827][   T54] usb 6-1: config 0 interface 109 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 47
[   89.494282][   T54] usb 6-1: config 0 interface 109 has no altsetting 0
[   89.496577][   T54] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[   89.499507][   T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.503338][   T54] usb 6-1: config 0 descriptor??
[   89.676584][ T7311] ------------[ cut here ]------------
[   89.678447][ T7311] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#3: syz.2.391/7311
[   89.681912][ T7311] Modules linked in:
[   89.683441][ T7311] CPU: 3 UID: 0 PID: 7311 Comm: syz.2.391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   89.687495][ T7311] Tainted: [L]=SOFTLOCKUP
[   89.689072][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.692582][ T7311] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430
[   89.695131][ T7311] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 ff 50 09 83 fe 0a 0f 86 0c fe ff ff 80 3d d9 a5 55 0e 00 75 0b c6 05 d0 a5 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[   89.701654][ T7311] RSP: 0018:ffffc900041779f8 EFLAGS: 00010246
[   89.703660][ T7311] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   89.706524][ T7311] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0
[   89.709156][ T7311] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009
[   89.712328][ T7311] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0
[   89.715005][ T7311] R13: 1ffff9200082ef55 R14: ffffffff9abe09c4 R15: 0000000000000013
[   89.717573][ T7311] FS:  00007f8f779676c0(0000) GS:ffff8880d6c56000(0000) knlGS:0000000000000000
[   89.720494][ T7311] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.722649][ T7311] CR2: 00007fcfc37156c0 CR3: 0000000024e90000 CR4: 0000000000352ef0
[   89.725276][ T7311] Call Trace:
[   89.726408][ T7311]  <TASK>
[   89.727418][ T7311]  ? find_held_lock+0x2b/0x80
[   89.728991][ T7311]  ? avc_has_extended_perms+0x33a/0x1090
[   89.730879][ T7311]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   89.732945][ T7311]  ? avc_has_extended_perms+0x47c/0x1090
[   89.734862][ T7311]  ? __pfx_avc_has_extended_perms+0x10/0x10
[   89.736811][ T7311]  ? lockdep_hardirqs_on+0x7c/0x110
[   89.738547][ T7311]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   89.740516][ T7311]  ? policy_nodemask+0xea/0x4e0
[   89.742127][ T7311]  alloc_pages_mpol+0x1fb/0x550
[   89.743740][ T7311]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   89.745553][ T7311]  ___kmalloc_large_node+0x10c/0x150
[   89.747295][ T7311]  __kmalloc_large_node_noprof+0x1c/0x70
[   89.749152][ T7311]  ? __might_fault+0xe3/0x190
[   89.750727][ T7311]  __kmalloc_noprof.cold+0xc/0x62
[   89.752391][ T7311]  ? raw_alloc_io_data+0x12c/0x1a0
[   89.754079][ T7311]  ? raw_alloc_io_data+0x12c/0x1a0
[   89.755785][ T7311]  raw_alloc_io_data+0x12c/0x1a0
[   89.757438][ T7311]  raw_ioctl+0x628/0x2bf0
[   89.758881][ T7311]  ? __pfx_raw_ioctl+0x10/0x10
[   89.760501][ T7311]  ? selinux_file_ioctl+0xb4/0x270
[   89.762205][ T7311]  ? __pfx_raw_ioctl+0x10/0x10
[   89.763793][ T7311]  __x64_sys_ioctl+0x18e/0x210
[   89.765470][ T7311]  do_syscall_64+0xcd/0xf80
[   89.766991][ T7311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.768919][ T7311] RIP: 0033:0x7f8f76b8f7c9
[   89.770424][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.776513][ T7311] RSP: 002b:00007f8f77967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.779212][ T7311] RAX: ffffffffffffffda RBX: 00007f8f76de5fa0 RCX: 00007f8f76b8f7c9
[   89.781802][ T7311] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000005
[   89.784332][ T7311] RBP: 00007f8f76c13f91 R08: 0000000000000000 R09: 0000000000000000
[   89.786903][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.789466][ T7311] R13: 00007f8f76de6038 R14: 00007f8f76de5fa0 R15: 00007ffdbbd72fa8
[   89.791994][ T7311]  </TASK>
[   89.793057][ T7311] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   89.795351][ T7311] CPU: 3 UID: 0 PID: 7311 Comm: syz.2.391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   89.798711][ T7311] Tainted: [L]=SOFTLOCKUP
[   89.800120][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.803475][ T7311] Call Trace:
[   89.804546][ T7311]  <TASK>
[   89.805520][ T7311]  dump_stack_lvl+0x3d/0x1f0
[   89.807009][ T7311]  vpanic+0x640/0x6f0
[   89.808305][ T7311]  ? __alloc_frozen_pages_noprof+0x309/0x2430
[   89.810256][ T7311]  panic+0xca/0xd0
[   89.811463][ T7311]  ? __pfx_panic+0x10/0x10
[   89.812904][ T7311]  check_panic_on_warn+0xab/0xb0
[   89.814496][ T7311]  __warn+0x108/0x3c0
[   89.815789][ T7311]  __report_bug+0x2a0/0x520
[   89.817306][ T7311]  ? __alloc_frozen_pages_noprof+0x309/0x2430
[   89.819238][ T7311]  ? __pfx___report_bug+0x10/0x10
[   89.820889][ T7311]  ? __kernel_text_address+0xd/0x40
[   89.822567][ T7311]  ? unwind_get_return_address+0x59/0xa0
[   89.824365][ T7311]  ? arch_stack_walk+0xa6/0x100
[   89.825944][ T7311]  ? __alloc_frozen_pages_noprof+0x309/0x2430
[   89.827938][ T7311]  report_bug+0xb2/0x220
[   89.829605][ T7311]  ? __alloc_frozen_pages_noprof+0x309/0x2430
[   89.831646][ T7311]  handle_bug+0x127/0x260
[   89.833060][ T7311]  exc_invalid_op+0x17/0x50
[   89.834519][ T7311]  asm_exc_invalid_op+0x1a/0x20
[   89.836073][ T7311] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430
[   89.838229][ T7311] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 ff 50 09 83 fe 0a 0f 86 0c fe ff ff 80 3d d9 a5 55 0e 00 75 0b c6 05 d0 a5 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8
[   89.844275][ T7311] RSP: 0018:ffffc900041779f8 EFLAGS: 00010246
[   89.846218][ T7311] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   89.848704][ T7311] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0
[   89.851240][ T7311] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009
[   89.853739][ T7311] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0
[   89.856231][ T7311] R13: 1ffff9200082ef55 R14: ffffffff9abe09c4 R15: 0000000000000013
[   89.858769][ T7311]  ? find_held_lock+0x2b/0x80
[   89.860321][ T7311]  ? avc_has_extended_perms+0x33a/0x1090
[   89.862127][ T7311]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   89.864138][ T7311]  ? avc_has_extended_perms+0x47c/0x1090
[   89.865935][ T7311]  ? __pfx_avc_has_extended_perms+0x10/0x10
[   89.867800][ T7311]  ? lockdep_hardirqs_on+0x7c/0x110
[   89.869505][ T7311]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   89.871395][ T7311]  ? policy_nodemask+0xea/0x4e0
[   89.872973][ T7311]  alloc_pages_mpol+0x1fb/0x550
[   89.874534][ T7311]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   89.876246][ T7311]  ___kmalloc_large_node+0x10c/0x150
[   89.877952][ T7311]  __kmalloc_large_node_noprof+0x1c/0x70
[   89.879752][ T7311]  ? __might_fault+0xe3/0x190
[   89.881273][ T7311]  __kmalloc_noprof.cold+0xc/0x62
[   89.882883][ T7311]  ? raw_alloc_io_data+0x12c/0x1a0
[   89.884529][ T7311]  ? raw_alloc_io_data+0x12c/0x1a0
[   89.886173][ T7311]  raw_alloc_io_data+0x12c/0x1a0
[   89.887757][ T7311]  raw_ioctl+0x628/0x2bf0
[   89.889155][ T7311]  ? __pfx_raw_ioctl+0x10/0x10
[   89.890717][ T7311]  ? selinux_file_ioctl+0xb4/0x270
[   89.892349][ T7311]  ? __pfx_raw_ioctl+0x10/0x10
[   89.893894][ T7311]  __x64_sys_ioctl+0x18e/0x210
[   89.895490][ T7311]  do_syscall_64+0xcd/0xf80
[   89.897023][ T7311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.898882][ T7311] RIP: 0033:0x7f8f76b8f7c9
[   89.900338][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.906337][ T7311] RSP: 002b:00007f8f77967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.908981][ T7311] RAX: ffffffffffffffda RBX: 00007f8f76de5fa0 RCX: 00007f8f76b8f7c9
[   89.911490][ T7311] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000005
[   89.913988][ T7311] RBP: 00007f8f76c13f91 R08: 0000000000000000 R09: 0000000000000000
[   89.916480][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.918980][ T7311] R13: 00007f8f76de6038 R14: 00007f8f76de5fa0 R15: 00007ffdbbd72fa8
[   89.921514][ T7311]  </TASK>
[   89.923341][ T7311] Kernel Offset: disabled
[   89.924716][ T7311] Rebooting in 86400 seconds..