last executing test programs:

1m12.552360788s ago: executing program 2 (id=141):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r3, {0x1, 0x1}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, 0x24, r4}, 0x94)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r7, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)})

1m12.497798871s ago: executing program 2 (id=142):
timerfd_create(0x0, 0x800)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0xc000, 0x1)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/188)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x5663, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
socket$alg(0x26, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0)
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)

1m11.632691236s ago: executing program 2 (id=163):
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x7, 0x0, 0x3, 0xfaa, 0xffffffff, 0x4, 0x4}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140), 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1d480, 0x0, 0x44a})
io_uring_enter(r3, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0xe)

1m11.282448887s ago: executing program 2 (id=168):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001b80)=ANY=[@ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="e0828951f5bd5ef521ae408ef059744da66f1079c60e55e3fed8a41a7172dfb3722735b023135ba30fd04fc04cf7e663b9d55b4e917d0fdaac4c2ef3a669f5dec51e8871232aabd865f5d73577a43867ca74c82154695f00e02567affc406e037c47d4e981bba3f43336e78113dca5939aca63d99612cd48e1c4482e30b9dcf9937f886acb60c5dffd3e95a30ceb9bb96bd9ed393ea14c247705aa30de24c1bcad93be4b3d8ffdfdf7da8caa601018203b2c302cfe2e0b", 0xb7}, {&(0x7f0000000100)="3428e55ae9a589b33ad96b6bb0df239bd67c83df26abcc256dee3c2bac27b1f121adc3558f53f224524a3ea75b0ead65447927db630cfcf3a3a4277866f65eafefce598cbc03c8158f90b48c42ac06f40ac809e679db842c6f3034be2187c8b4b8164796846237513758afa01604baab", 0x70}], 0x2, 0x10, 0x401)

1m11.084066528s ago: executing program 2 (id=176):
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10201, 0xd, 0x40000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000480)=0x4)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000004c0)) (async)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000540)=0xa0000)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffc000/0x4000)=nil) (async)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000005c0)={0x8, 0xff, 0x5, 0xb1, 0x2, 0x0, [{0x8, 0xe, 0x9, '\x00', 0x2}, {0x5, 0xfff, 0xaf, '\x00', 0x3}]})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000006c0))
ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) (async)
tee(r0, r2, 0x3, 0x0) (async)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000700)={{@hyper, 0x7}, 0xea7, 0x3, 0x8, 0x3, 0x6, 0x2, 0x3, 0x2})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000740)={0x0, 0x1ff, 0x240000, 0x5, 0x0, <r6=>0x0, 0x8001, 0x4})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r3, 0xc008644c, &(0x7f0000000780)={r6}) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000007c0)={0x1c, 0x1}, 0x0) (async)
r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000800), 0x4240, 0x0)
fstatfs(r7, &(0x7f0000000840)=""/19)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000880))
syslog(0x0, &(0x7f0000000900)=""/206, 0xce) (async)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0xf0, 0x0, &(0x7f0000000a00)="9e9f829a75bec334cf6014fa4596be637a73fa0074dc94135e94ad4e0b65e3726727c3afc3fb7644cf7c224e2714c6f395750e531ed0e8cfa6784cb44141915e3d77a93dfe63a5b565c00dae0acef70b1cf884ef2822b34c31ea623aa994738a7034c2ba889ac62b7d3144f7a2a6e10981eba63c181b80fa9912bb7b69930048c8cfd73e39efb895c313106b2bf30ec300e3d6f2904ea1ba7a59479b9377c0d6ce52ba8f70aae7a4966ba9e1c43a494124c046d313f5bd2e04e41815e8df93b70870c4dbe37b0b84a1cbe9298765a0a274aada564116fd61e6532281a74f823f04cdab0e1e949ed33d42f2e16a9f471d", 0x0, 0x8, 0x0, 0x41, 0x0, &(0x7f0000000b00)="cafbef58df89f2b43c9ad3c5a044a8502985c91ece104368eac01e6ed23dce85a64354d9b004dac1238ba819c18bfc5fcf62732428a267f876199f97557b01a98f", 0x0, 0x2, 0x0, 0x7}, 0x50) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000c00)={0x2, 0x8001})

1m10.77801917s ago: executing program 2 (id=177):
r0 = socket$key(0xf, 0x3, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0xba}}}, 0xa)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$BSG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140))
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b9000000", 0x0, 0x0, 0x1, 0x0, 0x0})
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
sendfile(r1, r3, &(0x7f0000000100)=0x28, 0xfffffffffffff801)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7)

1m10.691175398s ago: executing program 32 (id=177):
r0 = socket$key(0xf, 0x3, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0xba}}}, 0xa)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$BSG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140))
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b9000000", 0x0, 0x0, 0x1, 0x0, 0x0})
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
sendfile(r1, r3, &(0x7f0000000100)=0x28, 0xfffffffffffff801)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7)

1m4.805888188s ago: executing program 1 (id=252):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x5905c3314737a097)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000100))

1m4.557575466s ago: executing program 1 (id=256):
r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={<r2=>0x0, 0xd}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}}, 0x84)

1m4.507593637s ago: executing program 1 (id=257):
r0 = socket(0x10, 0x3, 0x6)
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="67ea4efc35203c37fe3136d276cf7f3119def140979f34fc8318e65aeb21ed979a7a06df1c9b07caeb5c87d1c44092d1409d61d716ca083965529505f55aefd6bbf3b78efd2bc9982f079f9712c65a4674b5ee6a919d8468e830b176846116210e3f10087147e9b3108c9677bcc766efffe80e46743b7a7865604e3b920090b7a406b16d9605779ce60dafebcf81e2a749a36fd54c999fd900340668c4f7f5b4aaf5f67c9918becb7655f5cae3410d3fe9b4ea0e0da13b9f0fea2ce42b41a557d65bfd8560b9cd765fce27182e9ba089af9f9362c0086028e11c5f2ba79dd89388e67df6889f52ef225ae7aabc6b67d283086a8987d87642", 0xf8}, {&(0x7f0000000180)="a5ed4e0ef3064707e50b8037b04a190fcf8e8219f2e84d48285d6c6247af639e1bc3ae3f3afab130da4edfc8c06c94d5e712ba4afb0db7bc241ade2e6277e28846bc016f1573c8567c3e8b4f878e5e0d8613d478f6ac557ed92dbe7fb8ca871bbd8d80369dd997e8a66ca2beda4f9e0a89938784f9b35b71547bc972e431bbc025656faa682adc28adebcae0167624fe45a98e5efe1612c86d6ca23accd64dbe6e282ab98e9d068caf851b973684db1ff3920bbe5c98ca4c8cc4ce635da443b135ee7b1a05", 0xc5}, {&(0x7f0000000280)="00c8e116b4cd8d09383accdd2dae9748f5", 0x11}, {&(0x7f00000002c0)="6d752612f9", 0x5}], 0x4, &(0x7f0000000340)="fd9855f53e30e6e0ecbfe1403ce9a04b54d608c8baff0615c36a3d47ea93bdd7bc436e043eefe265080374ad9669d67d72470a50b45504e02482353c36b7f6d42f778d709f9525f5bbf51d410e7df9c7320e56512f881a36534fda0485bbc27c17957628a4aeab6c8d", 0x69, 0x20004011}, 0x1)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, <r3=>0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000e00)={0x1, r3, r2})
write(r0, &(0x7f0000000140)="2600000014004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)

1m4.445934347s ago: executing program 1 (id=260):
inotify_init()
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x0, 0x9, 0x4}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000007090000000000000000000022ff00048d6ffa80b830399d7d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000180)=@tcp}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000040), &(0x7f0000002100)=""/4096}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r0, &(0x7f0000000100), 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000051c0)=""/119)
setsockopt$packet_int(r1, 0x107, 0x2, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000005100)=[{{&(0x7f0000000080)=@rc, 0x80, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/153, 0x99}], 0x3, &(0x7f0000003100)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000001480)=@nfc_llcp, 0x80, &(0x7f0000001740)=[{&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000001680)=""/157, 0x9d}], 0x5}, 0x5}, {{&(0x7f00000017c0)=@nl=@unspec, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001840)=""/232, 0xe8}, {&(0x7f0000001940)=""/213, 0xd5}, {&(0x7f0000001a40)=""/147, 0x93}, {&(0x7f0000001b00)=""/50, 0x32}, {&(0x7f0000001b40)=""/222, 0xde}, {&(0x7f0000001c40)=""/121, 0x79}, {&(0x7f0000001cc0)=""/93, 0x5d}, {&(0x7f0000001d40)=""/185, 0xb9}, {&(0x7f0000001e00)=""/124, 0x7c}, {&(0x7f0000001e80)=""/249, 0xf9}], 0xa, &(0x7f0000002040)=""/113, 0x71}, 0x9}], 0x3, 0x0, &(0x7f00000020c0)={0x77359400})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010003b1528bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00020000f0e0c4500008f0130000", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x8000)

1m3.567623487s ago: executing program 1 (id=267):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
renameat2(r2, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}]})
sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xa, 0xa, 0x501, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x40004)
sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/208, 0xd0, 0x0, 0x0}, &(0x7f00000000c0)=0x40)

1m3.346649984s ago: executing program 1 (id=270):
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @multicast1, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m3.304241367s ago: executing program 33 (id=270):
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @multicast1, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)

37.295274077s ago: executing program 0 (id=690):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x5c)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
close(0x3)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x24, 0x8, r6, 0x1, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4)
r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x8c)
mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x18)

37.197397834s ago: executing program 0 (id=692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getnetconf={0x24, 0x52, 0x427d760ec13d21b9, 0x70bd2c, 0x25dfdc02, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802)

37.196642813s ago: executing program 0 (id=693):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00883aff00000000000000000000ffff64010100ff02000000007800000001630108f9fffb2b0000000000000000000000ffff0a010102000000000000000000000000000000013a0a040503080100fc020000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbfe8000000000000000000000000000aafe880000000000000000000000000101"], 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') (async, rerun: 64)
r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async)
syz_clone3(&(0x7f0000000200)={0xa03400, 0x0, 0x0, 0x0, {0x2002}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 32)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') (async, rerun: 32)
socket$nl_audit(0x10, 0x3, 0x9) (async)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000080008d804dd000000000000010902"], 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') (async, rerun: 64)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
ptrace(0x10, r4) (async)
ptrace$setsig(0x4203, r4, 0x5, &(0x7f0000000140)={0x3, 0x2, 0xfffffff7}) (async, rerun: 64)
ptrace$cont(0x18, r4, 0x80, 0x0) (rerun: 64)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32)
r6 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={@empty, 0x80, r7}) (async)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x100, 0x7, 0x1, 0x10001, r1, 0x4, '\x00', r7, r1, 0x4, 0x4, 0x2, 0x4, @void, @value, @value=r8}, 0x50) (async)
open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0)
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
cachestat(r1, &(0x7f0000000000)={0x200, 0x1}, 0x0, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x30) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (rerun: 64)

37.107434266s ago: executing program 0 (id=695):
socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x21) (async)
r1 = getpid()
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000180)={{}, 0x8})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f00237ab3a43d171809880000000000000000000000000101fe8000000000000000000000000000bb4e2000004e23fffc0a00100002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0400000000000000030000000000000004000000b56b6e000001030200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
r3 = syz_pidfd_open(r1, 0x0)
open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) (async)
chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00')

37.047760921s ago: executing program 0 (id=699):
r0 = syz_pidfd_open(0x0, 0x0)
setns(r0, 0x24020000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffcb3}}, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
ioctl$SNDCTL_TMR_METRONOME(r2, 0x40045407)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000003240c97a75858650ffe192000000000000220000000a0001007770616e31000000", @ANYRESHEX=r3, @ANYRES16=r4], 0x20}}, 0x4000000) (async)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r8, &(0x7f0000000680)={&(0x7f0000000440)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
syz_pidfd_open(r4, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
dup(r9)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async)
syz_open_procfs(r4, &(0x7f0000000100)='net/rfcomm\x00') (async)
mlock(&(0x7f0000627000/0x1000)=nil, 0x1000) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4})
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000000c0)={0x4})

36.785855416s ago: executing program 0 (id=708):
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x214e, 0x0, 0x0, &(0x7f0000000040))
r2 = socket(0x22, 0x2, 0x3)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write(r7, 0x0, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0)
r12 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom$phonet(r12, &(0x7f0000000300)=""/193, 0xc1, 0x0, &(0x7f0000000080)={0x23, 0xf8, 0x7, 0x4}, 0x10)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}})

36.720862921s ago: executing program 34 (id=708):
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x214e, 0x0, 0x0, &(0x7f0000000040))
r2 = socket(0x22, 0x2, 0x3)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write(r7, 0x0, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0)
r12 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom$phonet(r12, &(0x7f0000000300)=""/193, 0xc1, 0x0, &(0x7f0000000080)={0x23, 0xf8, 0x7, 0x4}, 0x10)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}})

23.109495593s ago: executing program 4 (id=895):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xc)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000001240)=""/223, 0xdf}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x6c, 0x30, 0x5, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x44, 0x0, 0x7, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

23.006857922s ago: executing program 4 (id=897):
r0 = fanotify_init(0x0, 0x80000)
fanotify_mark(r0, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x7, 0x4, 0x10000, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x3}, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xbdf210f25e63a962, 0x8031, 0xffffffffffffffff, 0x3000) (async)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x8}) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000240)="9e7ed5703fe07a11ca334ce36346f94b96db2a09e60a22c5a0f09fdf0845f35bd6182e85d909bf751a4a452eebdf3e93f903d23acd845ef2f99171fa95af5184ce8a912b1157c5f9fc84eb192b3191e528d16e421d42557b9c1c8e8de0bd2a851e51dc915b5e45dfb609e0e05cb17a52e6d4f0681df1747ed32cd9525134312858b4e4e171969d933987f3c74713fafae9151b5a04e7e03f89443bb4bb3b8d66a3b5b9a896b731"}, 0x20) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f00000000c0)=0xffffffff, 0x4)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f00000003c0)={0xa, 0x2, 0x2}) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r7, r7, 0x3, 0x2a, 0x0, 0xa, 0xb, 0x6, 0x5508, 0xc336, 0x0, 0x8, 'syz0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)

23.005022394s ago: executing program 4 (id=900):
r0 = socket$inet(0x2, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2)
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0xf, 0x59455247, 0x1, 0x1, 0x2, 0x4, 0x9, 0x0, 0x4, 0x0, 0x7}})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

22.857438169s ago: executing program 4 (id=902):
close(0x3)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="4060281a6ae1f2a3"], 0x8)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2935e01, 0x0)
mkdir(0x0, 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r3, 0x4)
listen(r3, 0x5)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x3, r2, 0x18}, 0x10)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x6, 0x80000)
setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x22048804, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @mcast1}, 0x1c)

22.593093644s ago: executing program 4 (id=907):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$FIBMAP(r3, 0x401070c9, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r4, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)
fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0)

22.591248133s ago: executing program 4 (id=911):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x40000, 0x4)

22.548673723s ago: executing program 35 (id=911):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x40000, 0x4)

3.356265868s ago: executing program 7 (id=1166):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0)

2.365002332s ago: executing program 7 (id=1184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x4, 0x6, 0x2, 0x9, 0x0, "08f2"}}, 0x11a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x1, 0x2d259eaa, 0xfffffffe, 0x10, 0x8, 0x100011})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x8000, 0xc3, 0x621}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x6, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], <r7=>0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x0, <r8=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r5, 0x22, 0x2034, 0x0, @void, @void, @value=r8, @void, r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x44, 0x0, &(0x7f0000000500)="ffff68ea7972cfc95dfd34425bc815f09360dbf4becc140b2dfdd9915dc6de5e671e63d4bdeb89be810e0eef4be50b6f30cd50c9ab36ff39568d362149232620ca9f3243", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0xa8, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x38, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x81, 0x2, 0x0, 0x1, [@generic="8c22158ec25f91a6b6969fd4931d9b8e42874a78a40853e348f413e65d44bedd7b6bac258faffc2036a28b8da675a7e43a2202b94ea4e977cae64d3500579e8a8c47858e499cc6b13f3cbec9099ea17cbada6e20672735d21178cbf8f26938088ff64f846acc3320372a97676ada6d828ff7901c1531a4e5cc58015b86"]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40004}, 0x4)

2.2455789s ago: executing program 7 (id=1186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) (async, rerun: 64)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 64)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async)
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
write$selinux_access(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41)
r4 = socket$inet(0x2, 0x4, 0x3)
getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000280)) (async, rerun: 32)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@redirect_dir_nofollow}]})

2.16664536s ago: executing program 7 (id=1187):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000dc0700000095000000000000005bfde36f951169fa74f99cae9de5917aa16afe79f8867fa233a1d353424861edcf37344bb0"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f0000000700)="6350c0f81b65b34bcdd76f7db67d2bc8a586ba2c8675aeb7a49372f613f6c61ab645948a30916754cedde865edfc368d11eaba588edc573a9fdf51ba75686d4fa968b8ea04001d717736a6becf540c52890e086c3f878075bf0b28d90d47b9a94e85ff9c3b57ef5f2ddbe19b546275116fed2e65c36459a2ccfaf89b26bcde093d04c6404edcc9ae7f1a7fe4b9343c6a6057bf224855f9d33f23b2c7c7c597f9e4f147148efd200d53f234", &(0x7f0000000840)=""/146, &(0x7f00000003c0)="bfa8c6e7ac83c40f5b2d7c0a7834c0e17dc89592e9ed4c56496a02e9404dc544705db02c0708948671068bd064f8a390e134ecb93997d9a834bfcbc12f19de2de15a6947784e259bdb3398518e239a06f0a6f39eef24e356342a2b11d53ee625aa5719467db6faa161df87576549", &(0x7f0000000a40)="01089e99654afefc7386c811350ca3d36547d01a276e975caee833dc14c227dc513d5c38c5e25b15c1f07774ad3366094cbda68f2f3f233a2808c884d722d7c8b2d8dbde41ee5eecbd938ad9c8ee31", 0x1, r1}, 0x38)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery')
r4 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
close(r5)
execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xcf\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xe0\x04,\xfa\xd7\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xcf\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xe0\x04,\xfa\xd7\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
r6 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
getsockname$l2tp6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1.677065637s ago: executing program 5 (id=1194):
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@nodevmap}]}})
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

1.616244189s ago: executing program 5 (id=1196):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="150001006bffff"], 0x15)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0)
r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

1.31687677s ago: executing program 6 (id=1202):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x1000003, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x0, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x8, 0x3, 0x1, 0xa3f, 0x9, 0x200, 0xaaa, 0x2, 0x9, 0x200, 0x2, 0x86, 0xfffffff9, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x0, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x8, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x5, 0x8001, 0x4, 0x0, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0xb, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6789, 0x40, 0xdd9, 0x7ff, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x101, 0x8, 0x3, 0x3, 0x1ff, 0x8004, 0x7, 0x1, 0x9, 0x801, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x200005, 0x400, 0xb, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0x7f, 0xfffffffe, 0xac9, 0x8, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x44c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x1, 0x399})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r2=>0x0})
r3 = gettid()
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x10cc, 0x19, 0x2, 0x70bd2c, 0x25dfdbff, {0x5}, [@generic="d4402610dc9959044f10f75dd77c81421a51676cbaf934a28f22381d73379c04aeae16eca08518a6352b9ae8e556c3906ffd2888a00458b6632817576aaa45f79de23cc4999954f469292ed32d2a60069ae93f60881f0f6e3b099c6aceab416887101f9fa39bec3617d2e177885ea980abc12ddf8136580a70c9a5970368630cb9c264d1ed68f092a9f60c24b0873954e1f37c20c65d8db6b26262be4054dd6987c7c1e98ef4c825b18c4dc05234149d44b6696a1a9d", @generic="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"]}, 0x10cc}, 0x1, 0x0, 0x0, 0x8040}, 0x8011)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x206, @empty}}, 0x0, 0x83}, &(0x7f0000000500)=0x90)
unshare(0x4a000200)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x1a, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r2, 0x40001, 0x804c}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0)

1.314232243s ago: executing program 5 (id=1203):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2)
r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0)
socket(0x1e, 0x4, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000))
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r4, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
fcntl$getflags(r0, 0x40a)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r8}, &(0x7f0000002480), &(0x7f00000024c0)=r7}, 0x20)
connect$pppl2tp(r7, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e20, 0x1, @private2, 0xb}}}, 0x32)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0xbf, 0xfffffff7, {<r9=>0xffffffffffffffff}, {}, 0x2000200000, 0x4})
ptrace$ARCH_GET_FS(0x1e, r9, &(0x7f0000000640), 0x1003)
accept4(r6, 0x0, 0x0, 0x800)

1.217133791s ago: executing program 3 (id=1204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'})
writev(r1, &(0x7f0000000680), 0x0)
write$FUSE_STATX(r1, &(0x7f0000000280)={0x130, 0x0, 0x0, {0x100, 0x6b7, 0x0, '\x00', {0x1000, 0x7a5, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0xb, 0xc, 0x3, 0x0, {0x9, 0x2}, {0x4, 0x2}, {0x4, 0x6}, {0x25870000000, 0x69b9}, 0xf2, 0x400010, 0x0, 0xfff}}}, 0x130)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
timer_getoverrun(r3)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000540)={'#! ', './file0/file0/file0', [{0x20, '\x02'}], 0xa, "01005b5a9e8876e5e4cef295ac03e6157f79752bc80b8e95852db2608d676f984209a1d0f09cdd24ae40f91e8368000095247c8e41b76a092fac899386fbd2f8d667d8835c95f13d67000000"}, 0x65)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8)
r7 = getegid()
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80020, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0xbf}}, {@default_permissions}], [{@dont_appraise}]}})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a40000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cd5050000020000140003f46d657430000000000000700016806c0001800c0007000900000001000000c4ff0b001200000000000000000000000000000028000100000000000180c200000200000000000000000000000000000000000000000000000000000c000700fcffffff530700001449a90c8f800000000000008000"/140], 0xa4}, 0x1, 0x0, 0x0, 0x2404c051}, 0x200088c4)

1.127328823s ago: executing program 5 (id=1205):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000004}, 0x8000)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000100)=@attr_pmu_init)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
r5 = syz_open_pts(r0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x11)

1.126339601s ago: executing program 3 (id=1206):
r0 = socket$inet_sctp(0x2, 0x5fa3c4cc0b29ad43, 0x84)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa8e00)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x2, 0xfffffffb, 0x55}, {@loopback, 0x4e21, 0x10000, 0x0, 0x6, 0x12d5c}}, 0x44)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xab1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008044}, 0x4084804)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x40001)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r9, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r8, 0x3}, 0x8)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe}})
socket$packet(0x11, 0x3, 0x300)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
recvmsg(r12, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x142)
r13 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e1d6a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0)

1.046964182s ago: executing program 3 (id=1207):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'nr0\x00', 0xfffa})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x44}}, 0x4000000)

1.046209803s ago: executing program 6 (id=1208):
mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) (async)
ioctl$SNDCTL_TMR_START(r0, 0x5402) (async)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000001080)=0x8f) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1}, 0x20) (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery')
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0)
lseek(r2, 0x104, 0x0) (async)
getdents64(r2, 0xfffffffffffffffe, 0x55)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000100)={0xa00, 0xa0000}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r6=>r4, {0x3}}, './file0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x3, 0xc, 0x1, 'queue1\x00', 0x10001}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r6) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r9, 0x6a9354ab0d020bb7, 0x0, 0xffffffff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000002e40)={0x16, 0x98, 0xfa00, {&(0x7f0000002d80), 0x3, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xfbb7, 0x10000, {"f313f7e6b224d0c7eeef93f4c1eb1d7d"}, 0x4, 0x893, 0x2f}}}, 0xa0)
mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x20)

972.360654ms ago: executing program 5 (id=1209):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)=[{{}, {<r5=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000580)={r5})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
r6 = socket(0xa, 0x1, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, r8, 0x40, 0x10, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r10, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x3, {0xffff, 0x0, 0xf90, 0x5}})
read(r9, &(0x7f0000000040)=""/200, 0xc8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r11, 0x1269, &(0x7f0000000680)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xa}})

967.270402ms ago: executing program 3 (id=1210):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x26, '\x00', @data=0xfff, 0x5}, {0x44, '\x00', @buffer={"80ca30691fc10ccae81c0dda7e6e736872a3768d01f5859969d43a0522aef412", 0x20}, 0xa}]}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x34}}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000200, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfaad3c6911edd9db}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x40, 0x1404, 0x0, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x10040080) (async)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x840) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x3ffffd, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf781, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x61, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0xffff, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000140)={{0x80, 0xf2}, 'port0\x00', 0x25, 0xd255e88465c46e8e, 0x0, 0x9, 0x6, 0xf8, 0xffffffff, 0x0, 0x3, 0xff})

777.351159ms ago: executing program 6 (id=1211):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
r2 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @empty}}}], 0x20}}], 0x1, 0x448c0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x7, 0x6, 0x102, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newnexthop={0xd8, 0x68, 0x1, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GROUP={0x24, 0x2, [{0x2, 0xd0}, {0x2, 0x5}, {}, {0x0, 0x97}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffb}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffff7f}]}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @mcast2}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xd8}}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async)
socket(0x2, 0x3, 0xff) (async)
sendmmsg$inet(r2, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @empty}}}], 0x20}}], 0x1, 0x448c0) (async)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x7, 0x6, 0x102, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newnexthop={0xd8, 0x68, 0x1, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GROUP={0x24, 0x2, [{0x2, 0xd0}, {0x2, 0x5}, {}, {0x0, 0x97}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffb}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffff7f}]}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @mcast2}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xd8}}, 0x40000) (async)

777.007735ms ago: executing program 6 (id=1212):
unshare(0x6a040000)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x20000004)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_xfrm(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000600)="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", 0x150}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045a", 0xa2}], 0x3}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
unshare(0x6a040000) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x20000004) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r3, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000600)="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", 0x150}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045a", 0xa2}], 0x3}], 0x1, 0x40800) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)

456.538781ms ago: executing program 3 (id=1213):
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x4, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10)

455.106961ms ago: executing program 3 (id=1214):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0xe, 0x0, 0x800}]}, 0x10)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)=0xe3b)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@gettaction={0x3c, 0x32, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x47}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x40080dc)

292.732795ms ago: executing program 7 (id=1215):
r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x40341, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x7f}, 0x2) (async)
r2 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)="23ec", 0x2}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x20, 0x4855}, 0x24000052)
r3 = socket$inet(0x2, 0x1, 0xb)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40103, 0x0) (async)
dup(r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x88)
r9 = openat$cgroup_int(r8, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x10000a006) (async)
r10 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x4, 0xea, 0x10, "1012a2c2e0d99745e394509d287560250d00"})
ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x5412, &(0x7f0000000040)=0xa) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7e001800", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054)

187.303502ms ago: executing program 7 (id=1216):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), 0x4)
syz_usb_connect(0x0, 0x59, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r3 = accept4(r1, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2180, 0x4)
sendfile(r1, r2, 0x0, 0x100000001)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)

97.274048ms ago: executing program 5 (id=1217):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x10, 0x200002)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000400)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/240, 0xf0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
poll(&(0x7f00000001c0), 0x1ffffffffffffffc, 0x2)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1000000000000067, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000140)={0x0, "5622d02e54e0090aa90108e267cd87ab932cf729f85c7bd8fa1cea70f891568c", 0x0, 0x1})
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0)
io_uring_setup(0x2519, &(0x7f0000009a80)={0x0, 0xf14c, 0x800, 0x0, 0x212})
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x281, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x1c, 0xf, 0x2, 0x7fff7fec}]})
close_range(r8, 0xffffffffffffffff, 0x200000000000000)
r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x717003, 0x18b)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000000c0)={0x0, 0x7f, 0x3, 0x0, 0x3, [0x0, 0x0, 0x0, <r10=>0x0], [0x9, 0x3, 0x8c66, 0x2], [0x6f21, 0x99a, 0x6, 0x40], [0x7ff, 0x94, 0x4cda, 0x4]})
ioctl$DRM_IOCTL_GEM_CLOSE(r9, 0x40086409, &(0x7f0000000140)={r10})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100002000)

7.472543ms ago: executing program 6 (id=1218):
mkdir(&(0x7f0000000180)='./file0\x00', 0x30)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x82000c, &(0x7f0000000000)='grpquota')

0s ago: executing program 6 (id=1219):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
socket$packet(0x11, 0x3, 0x300)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d4f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)

kernel console output (not intermixed with test programs):

  90.463709][  T830] shield 0003:0955:7214.0003: Registered Thunderstrike controller
[   90.467327][  T830] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[   90.555363][ T1485] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   90.555552][   T60] usb 9-1: USB disconnect, device number 7
[   90.560183][ T1485] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   90.574713][ T1485] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   90.579419][ T1485] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   90.582382][ T7414] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   90.658718][ T7438] __nla_validate_parse: 5 callbacks suppressed
[   90.658736][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[   90.674257][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'.
[   90.683508][ T7414] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.688026][ T7414] bond2: (slave bond3): making interface the new active one
[   90.692961][ T7414] bond2: (slave bond3): Enslaving as an active interface with an up link
[   90.711212][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[   90.714926][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'.
[   90.721536][ T7418] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[   90.725704][  T214] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.729457][  T214] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.736334][  T214] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.737783][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'.
[   90.739971][  T214] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.766843][ T7414] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.790512][   T29] usb 5-1: USB disconnect, device number 4
[   90.868067][ T7445] netlink: 'syz.4.357': attribute type 1 has an invalid length.
[   90.871879][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.877855][   T40] audit: type=1400 audit(1771457824.429:601): avc:  denied  { execute } for  pid=7444 comm="syz.4.357" dev="hugetlbfs" ino=20864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   90.888124][   T40] audit: type=1400 audit(1771457824.439:602): avc:  denied  { execute_no_trans } for  pid=7444 comm="syz.4.357" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=20864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   91.345603][ T7450] sp0: Synchronizing with TNC
[   91.361940][ T7450] sp0: Found TNC
[   91.499001][   T40] audit: type=1400 audit(1771457825.049:603): avc:  denied  { read } for  pid=7464 comm="syz.0.362" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   91.505654][ T7465] binder: 7464:7465 unknown command 4928
[   91.507619][   T40] audit: type=1400 audit(1771457825.049:604): avc:  denied  { open } for  pid=7464 comm="syz.0.362" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   91.508495][ T7465] binder: 7464:7465 ioctl c0306201 200000000100 returned -22
[   91.516323][   T40] audit: type=1400 audit(1771457825.049:605): avc:  denied  { ioctl } for  pid=7464 comm="syz.0.362" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   91.528964][   T40] audit: type=1400 audit(1771457825.049:606): avc:  denied  { set_context_mgr } for  pid=7464 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   91.535176][   T40] audit: type=1400 audit(1771457825.059:607): avc:  denied  { map } for  pid=7464 comm="syz.0.362" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   91.639246][ T7463] [U] è`
[   91.679472][ T7478] Unsupported ieee802154 address type: 0
[   91.809082][ T7491] mac80211_hwsim hwsim14 
: renamed from wlan1 (while UP)
[   91.822111][ T7491] 9pnet_virtio: no channels available for device 127.0.0.1
[   91.943223][ T7507] tipc: Started in network mode
[   91.945055][ T7507] tipc: Node identity 4, cluster identity 4711
[   91.946972][ T7507] tipc: Node number set to 4
[   92.026831][ T7515] ISOFS: Unable to identify CD-ROM format.
[   92.197562][ T7530] netlink: 'syz.5.382': attribute type 1 has an invalid length.
[   92.201089][ T7530] netlink: 'syz.5.382': attribute type 7 has an invalid length.
[   92.204519][ T7530] netlink: 'syz.5.382': attribute type 8 has an invalid length.
[   92.207803][ T7530] netlink: 132 bytes leftover after parsing attributes in process `syz.5.382'.
[   92.219760][    C1] Unknown status report in ack skb
[   92.251848][ T7533] netlink: 'syz.5.383': attribute type 10 has an invalid length.
[   92.258733][ T7533] team0: Device vxcan1 is of different type
[   93.978410][ T7591] MTD: Attempt to mount non-MTD device "/dev/sr0"
[   93.990203][ T7591] romfs: unable to set blocksize
[   93.990203][ T7591] 
[   94.093218][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'.
[   94.207280][ T7604] usb usb8: usbfs: process 7604 (syz.0.409) did not claim interface 0 before use
[   94.227167][ T7605] SELinux:  policydb magic number 0x40 does not match expected magic number 0xf97cff8c
[   94.230473][ T7605] SELinux: failed to load policy
[   94.270451][ T7610] netlink: 104 bytes leftover after parsing attributes in process `syz.0.411'.
[   94.383155][ T7625] loop4: detected capacity change from 0 to 7
[   94.396969][ T5942]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   94.399324][ T5942] loop4: partition table partially beyond EOD, truncated
[   94.410918][ T5942] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   94.443089][ T7625]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   94.445461][ T7625] loop4: partition table partially beyond EOD, truncated
[   94.448916][ T7625] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   94.488042][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   94.503867][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   94.541832][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.418'.
[   94.545510][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'.
[   94.634310][   T40] kauditd_printk_skb: 29 callbacks suppressed
[   94.634320][   T40] audit: type=1400 audit(1771457828.189:637): avc:  denied  { listen } for  pid=7640 comm="syz.5.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   94.654197][ T7636] kvm: kvm [7635]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   94.658323][ T7636] kvm: kvm [7635]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   94.727478][ T7650] chnl_net:caif_netlink_parms(): no params data found
[   94.832853][ T7655] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   94.838383][ T7657] ip6t_REJECT: ECHOREPLY is not supported
[   94.843993][ T7657] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   94.869743][ T7655] bond4: entered promiscuous mode
[   94.874702][ T7655] bond4: entered allmulticast mode
[   94.876852][ T7655] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.895653][   T40] audit: type=1400 audit(1771457828.449:638): avc:  denied  { read } for  pid=7663 comm="syz.5.426" path="socket:[19948]" dev="sockfs" ino=19948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   94.905113][ T7661] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   94.910876][ T7661] bond1 (unregistering): Released all slaves
[   94.924052][ T7655] erspan1: entered allmulticast mode
[   94.931088][ T7655] bond4: (slave erspan1): making interface the new active one
[   94.934320][ T7655] erspan1: entered promiscuous mode
[   94.938158][ T7655] bond4: (slave erspan1): Enslaving as an active interface with an up link
[   95.002259][ T7671] hpfs: Bad magic ... probably not HPFS
[   95.044298][   T40] audit: type=1400 audit(1771457828.599:639): avc:  denied  { create } for  pid=7675 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.052358][   T40] audit: type=1400 audit(1771457828.609:640): avc:  denied  { connect } for  pid=7675 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.070700][   T40] audit: type=1400 audit(1771457828.619:641): avc:  denied  { setopt } for  pid=7675 comm="syz.4.429" laddr=fe80::13 lport=12432 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.081591][   T40] audit: type=1400 audit(1771457828.629:642): avc:  denied  { write } for  pid=7675 comm="syz.4.429" laddr=fe80::13 lport=12432 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.090143][   T40] audit: type=1400 audit(1771457828.639:643): avc:  denied  { read } for  pid=7675 comm="syz.4.429" path="socket:[21338]" dev="sockfs" ino=21338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.332919][   T40] audit: type=1400 audit(1771457828.889:644): avc:  denied  { write } for  pid=7703 comm="syz.5.436" name="sockstat" dev="proc" ino=4026533385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   95.433018][ T7715] overlayfs: failed to resolve './file1': -2
[   95.445962][   T40] audit: type=1400 audit(1771457828.999:645): avc:  denied  { getopt } for  pid=7716 comm="syz.5.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   95.467771][   T40] audit: type=1400 audit(1771457829.019:646): avc:  denied  { read } for  pid=7716 comm="syz.5.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   95.479573][ T5286] Bluetooth: hci0: unexpected event for opcode 0x1003
[   95.493460][ T7721] 9p: Unknown Cache mode or invalid value fs
[   95.920056][ T7733] overlayfs: upper fs does not support tmpfile.
[   95.931016][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[   96.013374][ T7738] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   96.021236][ T7737] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   96.064186][ T7742] Unsupported ieee802154 address type: 0
[   96.066580][ T7742] ieee802154 phy0 wpan0: encryption failed: -22
[   96.105664][   T10] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[   96.108640][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[   96.111453][   T10] usb 9-1: Product: syz
[   96.112882][   T10] usb 9-1: Manufacturer: syz
[   96.114418][   T10] usb 9-1: SerialNumber: syz
[   96.120966][   T10] usb 9-1: config 0 descriptor??
[   96.127435][   T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[   96.130098][   T10] dvb-usb: bulk message failed: -22 (2/0)
[   96.134609][ T7743] program syz.0.445 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   96.142158][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.145918][   T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[   96.148890][   T10] usb 9-1: media controller created
[   96.156076][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.193007][ T7745] vivid-000: =================  START STATUS  =================
[   96.196426][ T7745] vivid-000: Test Pattern: 75% Colorbar
[   96.198810][ T7745] vivid-000: Fill Percentage of Frame: 100
[   96.203151][ T7745] vivid-000: Horizontal Movement: No Movement
[   96.205706][ T7745] vivid-000: Vertical Movement: No Movement
[   96.208141][ T7745] vivid-000: OSD Text Mode: All
[   96.210173][ T7745] vivid-000: Show Border: false
[   96.212436][ T7745] vivid-000: Show Square: false
[   96.214512][ T7745] vivid-000: Sensor Flipped Horizontally: false
[   96.217123][ T7745] vivid-000: Sensor Flipped Vertically: false
[   96.219618][ T7745] vivid-000: Insert SAV Code in Image: false
[   96.222322][ T7745] vivid-000: Insert EAV Code in Image: false
[   96.224841][ T7745] vivid-000: Insert Video Guard Band: false
[   96.227283][ T7745] vivid-000: Reduced Framerate: true
[   96.229482][ T7745] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[   96.232786][ T7745] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[   96.236037][ T7745] vivid-000: Enable Capture Cropping: true
[   96.238512][ T7745] vivid-000: Enable Capture Composing: true
[   96.241196][ T7745] vivid-000: Enable Capture Scaler: true
[   96.243538][ T7745] vivid-000: Timestamp Source: End of Frame
[   96.246044][ T7745] vivid-000: Colorspace: sRGB
[   96.248043][ T7745] vivid-000: Transfer Function: Default
[   96.250345][ T7745] vivid-000: Y'CbCr Encoding: Default
[   96.252713][ T7745] vivid-000: HSV Encoding: Hue 0-179
[   96.254900][ T7745] vivid-000: Quantization: Default
[   96.257024][ T7745] vivid-000: Apply Alpha To Red Only: false
[   96.259479][ T7745] vivid-000: Standard Aspect Ratio: 4x3
[   96.261876][ T7745] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[   96.265055][ T7745] vivid-000: DV Timings: 640x480p59 inactive
[   96.267527][ T7745] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[   96.270535][ T7745] vivid-000: Maximum EDID Blocks: 2
[   96.272911][ T7745] vivid-000: Limited RGB Range (16-235): false
[   96.275469][ T7745] vivid-000: Rx RGB Quantization Range: Automatic
[   96.278148][ T7745] vivid-000: Power Present: 0x00000001
[   96.280415][ T7745] tpg source WxH: 3840x2160 (Y'CbCr)
[   96.282788][ T7745] tpg field: 1
[   96.284220][ T7745] tpg crop: (0,0)/3840x2160
[   96.286118][ T7745] tpg compose: (0,0)/3840x2160
[   96.288071][ T7745] tpg colorspace: 8
[   96.289690][ T7745] tpg transfer function: 0/2
[   96.291814][ T7745] tpg Y'CbCr encoding: 0/1
[   96.293687][ T7745] tpg quantization: 0/2
[   96.295409][ T7745] tpg RGB range: 0/2
[   96.297060][ T7745] vivid-000: ==================  END STATUS  ==================
[   96.327540][ T7731] cxusb: i2c rd: len=84 is too big!
[   96.327540][ T7731] 
[   96.334178][ T7731] overlayfs: missing 'lowerdir'
[   96.348036][ T7753] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   96.356877][ T7753] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[   96.362398][ T7753] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[   96.365519][   T10] cxusb: set interface failed
[   96.370889][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   96.401879][   T10] DVB: Unable to find symbol mt352_attach()
[   96.404285][   T10] dvb-usb: bulk message failed: -22 (5/0)
[   96.410835][   T10] zl10353_read_register: readreg error (reg=127, ret==-121)
[   96.413318][   T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[   96.470874][   T10] rc_core: IR keymap rc-dvico-mce not found
[   96.472839][   T10] Registered IR keymap rc-empty
[   96.487339][   T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0
[   96.492317][   T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input11
[   96.498828][ T7765] __nla_validate_parse: 3 callbacks suppressed
[   96.498837][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'.
[   96.524954][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[   96.529832][   T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[   96.539127][   T10] usb 9-1: USB disconnect, device number 8
[   96.581013][   T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[   96.592030][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.452'.
[   97.009044][ T7809] xt_ecn: cannot match TCP bits for non-tcp packets
[   97.013771][ T7810] xt_ecn: cannot match TCP bits for non-tcp packets
[   97.440841][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.483677][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.493881][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.646223][ T7836] can0: slcan on ttynull.
[   97.715146][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[   97.719024][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[   97.724873][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[   97.731930][ T7835] can0 (unregistered): slcan off ttynull.
[   97.841816][ T7848] cgroup: subsys name conflicts with all
[   97.865479][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'.
[   97.874876][ T7848] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   97.878379][ T7848] gretap1: entered promiscuous mode
[   97.880035][ T7848] gretap1: entered allmulticast mode
[   97.943528][ T7856] program syz.0.472 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.085705][ T7868] netlink: 'syz.0.475': attribute type 10 has an invalid length.
[   98.095301][ T7868] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.101428][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.360719][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   98.453707][ T7880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7880 comm=syz.3.480
[   98.458504][ T7880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7880 comm=syz.3.480
[   98.463500][ T7880] [U] 
[   98.464641][ T7880] [U] 
[   98.465548][ T7880] [U] 
[   98.466475][ T7880] [U] 
[   98.467457][ T7880] [U] 
[   98.468398][ T7880] [U] 
[   98.469313][ T7880] [U] 
[   98.470214][ T7880] [U] 
[   98.471447][ T7880] [U] 
[   98.472335][ T7880] [U] 
[   98.473246][ T7880] [U] 
[   98.474135][ T7880] [U] 
[   98.475070][ T7880] [U] 
[   98.475971][ T7880] [U] 
[   98.477069][ T7880] [U] 
[   98.477958][ T7880] [U] 
[   98.482899][ T7879] [U] 
[   98.513174][    T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   98.519884][    T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   98.524053][    T9] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.534810][    T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   98.537755][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.546799][    T9] usb 10-1: Product: syz
[   98.548183][    T9] usb 10-1: Manufacturer: syz
[   98.549691][    T9] usb 10-1: SerialNumber: syz
[   98.562232][    T9] hub 10-1:1.0: bad descriptor, ignoring hub
[   98.564261][    T9] hub 10-1:1.0: probe with driver hub failed with error -5
[   98.577870][ T7886] netlink: 'syz.4.482': attribute type 1 has an invalid length.
[   98.582000][ T7886] netlink: 228 bytes leftover after parsing attributes in process `syz.4.482'.
[   98.585836][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'.
[   98.591670][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'.
[   98.613140][ T7886] 9p: Unknown Cache mode or invalid value fs
[   98.691718][ T7891] netlink: 80 bytes leftover after parsing attributes in process `syz.0.483'.
[   98.764857][ T7896] netlink: 'syz.3.481': attribute type 83 has an invalid length.
[   98.767839][    T9] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   98.860495][ T7899] SELinux: failed to load policy
[   99.073225][   T53] usb 10-1: USB disconnect, device number 2
[   99.077073][   T53] usblp0: removed
[   99.274112][ T7914] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   99.279821][ T7914] bond1 (unregistering): Released all slaves
[   99.467335][ T7918] binder: 7917:7918 ioctl c0306201 200000000680 returned -14
[   99.512055][ T5286] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   99.514967][ T5286] Bluetooth: hci0: Injecting HCI hardware error event
[   99.517780][ T5286] Bluetooth: hci0: hardware error 0x00
[   99.624773][ T7920] could not allocate digest TFM handle sha3-224-ce
[   99.656588][   T40] kauditd_printk_skb: 26 callbacks suppressed
[   99.656604][   T40] audit: type=1400 audit(1771457833.209:673): avc:  denied  { append } for  pid=7923 comm="syz.5.491" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   99.767982][   T40] audit: type=1400 audit(1771457833.319:674): avc:  denied  { connect } for  pid=7925 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.809307][ T7930] overlayfs: failed lookup in lower (newroot/74, name='bus', err=-40): overlapping layers
[  100.063977][    T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  100.118249][ T7946] uprobe: syz.4.500:7946 failed to unregister, leaking uprobe
[  100.231644][    T9] usb 10-1: Using ep0 maxpacket: 8
[  100.242064][   T40] audit: type=1400 audit(1771457833.799:675): avc:  denied  { mount } for  pid=7957 comm="syz.4.504" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  100.249955][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  100.250168][ T7958] 9pnet_fd: p9_fd_create_unix (7958): problem connecting socket: ./file0: -30
[  100.250823][ T7958] netlink: 'syz.4.504': attribute type 30 has an invalid length.
[  100.253939][   T40] audit: type=1400 audit(1771457833.799:676): avc:  denied  { mounton } for  pid=7957 comm="syz.4.504" path="/73/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  100.256016][    T9] usb 10-1: unable to read config index 0 descriptor/start: -71
[  100.271517][    T9] usb 10-1: can't read configurations, error -71
[  100.282865][ T7960] openvswitch: netlink: IP tunnel dst address not specified
[  100.302277][ T7964] netlink: 'syz.4.504': attribute type 30 has an invalid length.
[  100.426198][   T40] audit: type=1400 audit(1771457833.979:677): avc:  denied  { unmount } for  pid=6688 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  100.538713][ T7986] netlink: 'syz.0.510': attribute type 1 has an invalid length.
[  100.559937][ T7986] 8021q: adding VLAN 0 to HW filter on device bond5
[  100.578625][ T7986] bond5: (slave gretap2): making interface the new active one
[  100.582361][ T7986] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  100.592912][ T7986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7986 comm=syz.0.510
[  100.709565][ T7995] sctp: [Deprecated]: syz.0.513 (pid 7995) Use of int in maxseg socket option.
[  100.709565][ T7995] Use struct sctp_assoc_value instead
[  100.714547][ T7996] sctp: [Deprecated]: syz.0.513 (pid 7996) Use of int in maxseg socket option.
[  100.714547][ T7996] Use struct sctp_assoc_value instead
[  100.720811][ T7995] IPVS: length: 110 != 24
[  100.795749][ T8005] openvswitch: netlink: Missing key (keys=40, expected=80)
[  100.817813][ T8007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=8007 comm=syz.0.517
[  100.834858][   T40] audit: type=1400 audit(1771457834.389:678): avc:  denied  { remount } for  pid=8009 comm="syz.5.518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  100.877562][   T40] audit: type=1400 audit(1771457834.429:679): avc:  denied  { bind } for  pid=8018 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  100.902510][ T8023] CUSE: unknown device info ""
[  100.905641][ T8023] CUSE: zero length info key specified
[  100.907790][ T8023] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  100.942859][ T8027] devpts: Bad value for 'max'
[  101.062627][ T8043] batman_adv: batadv0: Adding interface: dummy0
[  101.064824][ T8043] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.067220][   T40] audit: type=1400 audit(1771457834.619:680): avc:  denied  { lock } for  pid=8040 comm="syz.0.528" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  101.068420][ T8041] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  101.084305][ T8043] batman_adv: batadv0: Interface activated: dummy0
[  101.087726][   T40] audit: type=1400 audit(1771457834.639:681): avc:  denied  { ioctl } for  pid=8033 comm="syz.5.526" path="socket:[22963]" dev="sockfs" ino=22963 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.094319][ T8034] batadv0: mtu less than device minimum
[  101.097924][ T8034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.101817][ T8034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.105630][ T8034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.109372][ T8034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.113208][ T8034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.117031][ T8034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  101.166402][   T13] bond0: (slave bond_slave_0): interface is now down
[  101.168735][   T13] bond0: (slave bond_slave_1): interface is now down
[  101.196099][ T8056] netlink: 'syz.3.533': attribute type 4 has an invalid length.
[  101.219500][ T8058] netlink: 'syz.5.534': attribute type 15 has an invalid length.
[  101.226927][   T73] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  101.226933][ T8058] netlink: 'syz.5.534': attribute type 15 has an invalid length.
[  101.226955][   T73] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  101.236649][   T73] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  101.240335][   T73] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  101.249250][ T8061] netlink: 'syz.5.534': attribute type 15 has an invalid length.
[  101.312810][   T73] bond0: (slave bond_slave_0): interface is now down
[  101.315486][   T73] bond0: (slave bond_slave_1): interface is now down
[  101.326599][   T73] bond0: now running without any active interface!
[  101.333851][ T8075] SELinux: ebitmap: truncated map
[  101.338667][ T8075] SELinux: failed to load policy
[  101.370221][   T40] audit: type=1804 audit(1771457834.919:682): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.540" name="/newroot/76/bus/bus" dev="overlay" ino=426 res=1 errno=0
[  101.403614][ T8082] vlan2: entered allmulticast mode
[  101.405343][ T8082] macsec0: entered allmulticast mode
[  101.407058][ T8082] veth1_macvtap: entered allmulticast mode
[  101.421127][ T8083] vlan2: entered allmulticast mode
[  101.450865][   T53] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  101.600758][ T5286] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  101.610819][   T53] usb 8-1: Using ep0 maxpacket: 8
[  101.617774][   T53] usb 8-1: unable to get BOS descriptor or descriptor too short
[  101.622005][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  101.622032][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  101.622049][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  101.622069][   T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  101.622087][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  101.622104][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[  101.622123][   T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  101.639359][   T53] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  101.639378][   T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.639389][   T53] usb 8-1: Product: syz
[  101.639397][   T53] usb 8-1: Manufacturer: syz
[  101.639405][   T53] usb 8-1: SerialNumber: syz
[  101.641980][   T53] usb 8-1: config 0 descriptor??
[  101.668806][ T8056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.668955][ T8056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.671983][   T53] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  101.818466][ T8102] overlay: Bad value for 'workdir'
[  101.830737][ T5286] Bluetooth: hci1: command 0x0405 tx timeout
[  101.889643][   T53] usb 8-1: USB disconnect, device number 4
[  102.080782][ T6000] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  102.207210][ T8144] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  102.212164][ T8144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  102.217377][ T8144] __nla_validate_parse: 15 callbacks suppressed
[  102.217387][ T8144] netlink: 14 bytes leftover after parsing attributes in process `syz.0.558'.
[  102.229473][ T8144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.236518][ T8144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.243520][ T8144] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  102.250798][ T6000] usb 9-1: Using ep0 maxpacket: 16
[  102.254821][ T6000] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  102.259006][ T6000] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  102.263773][ T6000] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  102.264232][ T8144] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  102.267891][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0
[  102.274433][ T6000] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  102.278629][ T6000] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.282946][ T6000] usb 9-1: Product: syz
[  102.284898][ T6000] usb 9-1: Manufacturer: syz
[  102.286889][ T6000] usb 9-1: SerialNumber: syz
[  102.288310][ T8144] bond0 (unregistering): Released all slaves
[  102.291280][ T6000] usb 9-1: config 0 descriptor??
[  102.435340][ T8159] overlayfs: upper fs does not support file handles, falling back to index=off.
[  102.436064][ T8157] : entered promiscuous mode
[  102.438670][ T8159] overlayfs: overlapping lowerdir path
[  102.484704][ T8161] xt_hashlimit: size too large, truncated to 1048576
[  102.505833][ T6000] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input13
[  102.514249][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.522784][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.529196][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.538445][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.566316][ T5942] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.575470][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.582697][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.591615][ T5320] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.608494][ T8181] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  102.611695][ T8183] overlay: Bad value for 'redirect_dir'
[  102.669758][ T8187] bond1: invalid ARP target 0.0.0.0 specified for addition
[  102.674723][ T8187] bond1: option arp_ip_target: invalid value (0)
[  102.678217][ T8187] bond1 (unregistering): Released all slaves
[  102.754697][ T8106] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  102.763538][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'.
[  102.766630][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'.
[  102.818298][    T9] usb 9-1: USB disconnect, device number 9
[  103.035061][ T8215] overlayfs: failed to resolve './file1': -2
[  103.313042][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  103.349951][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'.
[  103.354370][    T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  103.384833][ T8246] validate_nla: 7 callbacks suppressed
[  103.384850][ T8246] netlink: 'syz.4.587': attribute type 10 has an invalid length.
[  103.393193][ T8246] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  103.397720][ T8246] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  103.404563][ T8246] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  103.407803][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'.
[  103.467819][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.473489][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.478032][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.485539][ T8255] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  103.496262][ T8255] infiniband sy71: RDMA CMA: cma_listen_on_dev, error -98
[  103.514488][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  103.521524][    T9] usb 10-1: unable to read config index 0 descriptor/start: -71
[  103.524492][    T9] usb 10-1: can't read configurations, error -71
[  103.535199][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.539281][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.543495][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.547630][ T8255] xfrm0 speed is unknown, defaulting to 1000
[  103.906979][ T8295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.599'.
[  103.912461][ T8295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.599'.
[  103.940282][ T8297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=8297 comm=syz.0.601
[  104.195279][ T8327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=8327 comm=syz.0.608
[  104.440803][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[  104.456815][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.617'.
[  104.461307][ T8349] netlink: 'syz.5.617': attribute type 10 has an invalid length.
[  104.494802][ T8349] bond0: (slave 
): Enslaving as an active interface with a down link
[  104.498489][ T8353] netlink: 'syz.0.619': attribute type 2 has an invalid length.
[  104.500540][ T8348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.745514][ T8371] usb usb9: usbfs: process 8371 (syz.3.624) did not claim interface 0 before use
[  104.936095][   T40] kauditd_printk_skb: 17 callbacks suppressed
[  104.936107][   T40] audit: type=1400 audit(1771457838.489:700): avc:  denied  { write } for  pid=8388 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.996522][   T40] audit: type=1400 audit(1771457838.549:701): avc:  denied  { open } for  pid=8388 comm="syz.3.626" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  105.290259][   T40] audit: type=1400 audit(1771457838.839:702): avc:  denied  { mount } for  pid=8424 comm="syz.5.633" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  105.334679][   T40] audit: type=1400 audit(1771457838.889:703): avc:  denied  { remount } for  pid=8424 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  105.348579][   T40] audit: type=1400 audit(1771457838.899:704): avc:  denied  { unmount } for  pid=7063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  105.372185][ T8433] usb usb9: usbfs: process 8433 (syz.5.636) did not claim interface 6 before use
[  105.440522][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0000
[  105.503243][ T8473] tmpfs: Bad value for 'mpol'
[  105.522779][   T40] audit: type=1400 audit(1771457839.079:705): avc:  denied  { ioctl } for  pid=8470 comm="syz.4.639" path="socket:[22488]" dev="sockfs" ino=22488 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  105.666473][   T40] audit: type=1400 audit(1771457839.219:706): avc:  denied  { connect } for  pid=8482 comm="syz.5.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  105.676745][   T40] audit: type=1400 audit(1771457839.229:707): avc:  denied  { read } for  pid=8482 comm="syz.5.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  105.728617][   T40] audit: type=1400 audit(1771457839.279:708): avc:  denied  { write } for  pid=8482 comm="syz.5.643" path="socket:[23366]" dev="sockfs" ino=23366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  105.787659][   T40] audit: type=1400 audit(1771457839.339:709): avc:  denied  { nlmsg_read } for  pid=8488 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.825244][ T8497] netlink: 'syz.5.648': attribute type 1 has an invalid length.
[  105.826240][ T8500] trusted_key: syz.0.647 sent an empty control message without MSG_MORE.
[  105.880636][ T8506] batman_adv: batadv0: Interface deactivated: dummy0
[  105.884573][ T8506] batman_adv: batadv0: Removing interface: dummy0
[  105.888645][ T8506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8506 comm=syz.5.648
[  105.893677][ T8506] netlink: 'syz.5.648': attribute type 10 has an invalid length.
[  105.896187][ T8506] dummy0: entered promiscuous mode
[  105.923412][ T8510] fuseblk: Unknown parameter ''
[  106.193779][ T8535] program syz.0.658 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.441925][ T8551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  106.445044][ T8556] netlink: 'syz.3.667': attribute type 39 has an invalid length.
[  106.453512][ T8556] veth0_macvtap: left promiscuous mode
[  106.542313][ T8567] Cannot find add_set index 0 as target
[  106.606284][ T8574] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004
[  106.776575][ T8590] mkiss: ax0: crc mode is auto.
[  107.082145][ T8594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  107.085627][ T8594] block device autoloading is deprecated and will be removed.
[  107.184939][ T8594] syz.0.676 (8594): /proc/8592/oom_adj is deprecated, please use /proc/8592/oom_score_adj instead.
[  107.455265][ T8600] loop8: detected capacity change from 0 to 7
[  107.460478][    C1] blk_print_req_error: 10 callbacks suppressed
[  107.460494][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.467271][    C1] buffer_io_error: 3 callbacks suppressed
[  107.467284][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.473262][    C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.476338][    C2] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.479759][    C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.483044][    C2] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.485953][    C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.489184][    C2] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.492468][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.496957][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.500517][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.504687][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.508684][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.512757][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.516435][ T8600] ldm_validate_partition_table(): Disk read failed.
[  107.519339][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.520006][ T8601] __nla_validate_parse: 8 callbacks suppressed
[  107.520015][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.678'.
[  107.523429][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.524203][    C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.535163][    C2] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.538704][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.541821][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.545875][ T8600] Dev loop8: unable to read RDB block 0
[  107.551219][ T8600]  loop8: unable to read partition table
[  107.553251][ T8600] loop8: partition table beyond EOD, truncated
[  107.555306][ T8600] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  107.890905][ T8607] delete_channel: no stack
[  107.901115][ T1026] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  108.060669][ T1026] usb 9-1: Using ep0 maxpacket: 8
[  108.064155][ T1026] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  108.067526][ T1026] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  108.071658][ T1026] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  108.075371][ T1026] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  108.079095][ T1026] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.085637][ T1026] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  108.088744][ T1026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.297668][ T1026] usb 9-1: GET_CAPABILITIES returned 0
[  108.299546][ T1026] usbtmc 9-1:16.0: can't read capabilities
[  108.370735][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  108.521603][   T24] usb 5-1: Using ep0 maxpacket: 32
[  108.527786][   T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  108.531752][   T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  108.536387][   T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.541405][   T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  108.550196][   T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  108.554751][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.558127][   T24] usb 5-1: Product: syz
[  108.559917][   T24] usb 5-1: Manufacturer: syz
[  108.563832][   T24] usb 5-1: SerialNumber: syz
[  108.573589][    C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  108.577361][ T5830] usb 9-1: USB disconnect, device number 10
[  108.581256][   T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input14
[  108.710645][ T5944] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  108.710848][ T5286] Bluetooth: hci4: command 0xfc11 tx timeout
[  108.792461][   T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  108.800900][   T24]  (id 0x00)
[  108.860764][   T24] rc_core: IR keymap rc-imon-pad not found
[  108.863266][   T24] Registered IR keymap rc-empty
[  108.865385][   T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  108.870103][   T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  108.890513][   T24] imon:send_packet: packet tx failed (-71)
[  108.911053][   T24] imon 5-1:155.0: remote input dev register failed
[  108.913857][   T24] imon 5-1:155.0: imon_init_intf0: rc device setup failed
[  108.935541][   T24] imon 5-1:155.0: unable to initialize intf0, err 0
[  108.938375][   T24] imon:imon_probe: failed to initialize context!
[  108.951004][   T24] imon 5-1:155.0: unable to register, err -19
[  108.956765][   T24] usb 5-1: USB disconnect, device number 5
[  109.084685][ T5944] block nbd3: Receive control failed (result -32)
[  109.091670][ T8650] block nbd3: shutting down sockets
[  109.388873][ T8687] netlink: 'syz.3.704': attribute type 1 has an invalid length.
[  109.392983][ T8687] netlink: 228 bytes leftover after parsing attributes in process `syz.3.704'.
[  109.450143][ T8696] netlink: 'syz.3.709': attribute type 1 has an invalid length.
[  109.453745][ T8696] netlink: 228 bytes leftover after parsing attributes in process `syz.3.709'.
[  109.477443][  T214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.511362][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  109.514302][ T5944] Bluetooth: hci1: Injecting HCI hardware error event
[  109.517678][ T5944] Bluetooth: hci1: hardware error 0x00
[  109.591512][  T214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.633631][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'.
[  109.637418][ T8709] netlink: 15 bytes leftover after parsing attributes in process `syz.5.714'.
[  109.659692][  T214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.698476][ T8714] overlay: ./file0 is not a directory
[  109.700206][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.704903][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.707912][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.713029][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.716470][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.741034][  T214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.794947][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'.
[  109.839281][ T8712] xfrm0 speed is unknown, defaulting to 1000
[  110.038752][  T214] bond4 (unregistering): (slave erspan1): Releasing active interface
[  110.041456][  T214] erspan1 (unregistering): left promiscuous mode
[  110.062780][  T214] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  110.070699][   T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  110.076821][  T214] bond5 (unregistering): (slave gretap2): Releasing active interface
[  110.122161][ T8694] syz.4.707 (8694): drop_caches: 1
[  110.154004][ T8694] syz.4.707 (8694): drop_caches: 1
[  110.225737][  T214] bond1 (unregistering): Released all slaves
[  110.232393][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.236121][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.236334][  T214] bond2 (unregistering): (slave bond3): Releasing backup interface
[  110.239358][   T24] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  110.245083][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.245479][  T214] bond2 (unregistering): Released all slaves
[  110.251281][   T24] usb 8-1: config 0 descriptor??
[  110.258309][  T214] bond3 (unregistering): Released all slaves
[  110.271024][  T214] bond4 (unregistering): Released all slaves
[  110.283190][  T214] bond5 (unregistering): Released all slaves
[  110.294032][ T1026] xfrm0 speed is unknown, defaulting to 1000
[  110.296830][ T1026] infiniband sy71: ib_query_port failed (-19)
[  110.381599][ T8712] chnl_net:caif_netlink_parms(): no params data found
[  110.389728][  T214] tipc: Left network mode
[  110.496228][   T24] usbhid 8-1:0.0: can't add hid device: -71
[  110.498196][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  110.516149][   T24] usb 8-1: USB disconnect, device number 5
[  110.531902][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'.
[  110.534720][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.725'.
[  110.545553][   T40] kauditd_printk_skb: 77 callbacks suppressed
[  110.545563][   T40] audit: type=1400 audit(1771457844.099:787): avc:  denied  { listen } for  pid=8762 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  110.572398][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.574789][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.577160][ T8712] bridge_slave_0: entered allmulticast mode
[  110.580510][ T8712] bridge_slave_0: entered promiscuous mode
[  110.587269][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.587313][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'.
[  110.589603][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.594884][ T8712] bridge_slave_1: entered allmulticast mode
[  110.597621][ T8712] bridge_slave_1: entered promiscuous mode
[  110.600373][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.725'.
[  110.630718][ T1145] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  110.646099][ T8775] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x1)
[  110.667679][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.681370][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.692128][ T8439] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  110.696970][ T8439] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  110.704090][ T8782] program syz.3.732 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.715479][   T40] audit: type=1400 audit(1771457844.269:788): avc:  denied  { ioctl } for  pid=8774 comm="syz.4.730" path="socket:[25405]" dev="sockfs" ino=25405 ioctlcmd=0x5522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  110.721098][ T8439] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  110.740749][ T8779] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  110.743114][ T8712] team0: Port device team_slave_0 added
[  110.748876][ T8779] loop5: detected capacity change from 0 to 7
[  110.755853][ T8779] Dev loop5: unable to read RDB block 7
[  110.758144][ T8779]  loop5: AHDI p1 p3 p4
[  110.759674][ T8779] loop5: partition table partially beyond EOD, 
[  110.759672][  T214] hsr_slave_0: left promiscuous mode
[  110.763780][ T8779] truncated
[  110.763901][  T214] hsr_slave_1: left promiscuous mode
[  110.765175][ T8779] loop5: p1 start 4194304 is beyond EOD, truncated
[  110.767031][  T214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.768924][ T8779] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  110.772175][  T214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.777403][   T40] audit: type=1400 audit(1771457844.329:789): avc:  denied  { map } for  pid=8776 comm="syz.5.731" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.782520][  T214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.785568][   T40] audit: type=1400 audit(1771457844.329:790): avc:  denied  { execute } for  pid=8776 comm="syz.5.731" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.787680][  T214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.805114][  T214] veth1_macvtap: left promiscuous mode
[  110.806899][  T214] veth0_macvtap: left promiscuous mode
[  110.808713][  T214] veth1_vlan: left promiscuous mode
[  110.812621][  T214] veth0_vlan: left promiscuous mode
[  110.831547][   T40] audit: type=1400 audit(1771457844.389:791): avc:  denied  { connect } for  pid=8787 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  110.971097][  T214] team0 (unregistering): Port device team_slave_1 removed
[  110.980525][  T214] team0 (unregistering): Port device team_slave_0 removed
[  111.050956][ T8712] team0: Port device team_slave_1 added
[  111.086136][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.088493][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.097221][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.102156][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.104508][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.112902][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.139021][ T8712] hsr_slave_0: entered promiscuous mode
[  111.142194][ T8712] hsr_slave_1: entered promiscuous mode
[  111.358792][ T8712] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  111.369601][ T8811] mmap: syz.5.738 (8811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.371058][ T8712] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  111.388969][ T8712] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  111.401448][ T8712] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  111.474223][  T214] IPVS: stop unused estimator thread 0...
[  111.497344][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.567941][ T8712] 8021q: adding VLAN 0 to HW filter on device team0
[  111.578612][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.581747][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.592486][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.595492][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.602006][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  111.762076][ T5944] Bluetooth: hci0: command tx timeout
[  111.807533][   T40] audit: type=1400 audit(1771457845.359:792): avc:  denied  { sqpoll } for  pid=8846 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  111.808474][ T8850] binder: 8848:8850 ioctl c0306201 2000000003c0 returned -14
[  111.820633][   T40] audit: type=1400 audit(1771457845.359:793): avc:  denied  { write } for  pid=8848 comm="syz.3.745" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  111.825906][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.827941][   T40] audit: type=1400 audit(1771457845.369:794): avc:  denied  { setopt } for  pid=8846 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  111.891832][ T8857] xt_l2tp: v2 tid > 0xffff: 2031748
[  111.948275][ T8867] sp0: Synchronizing with TNC
[  111.967789][   T40] audit: type=1400 audit(1771457845.519:795): avc:  denied  { write } for  pid=8870 comm="syz.5.751" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  111.968952][ T8871] binder: 8870:8871 ioctl c0306201 2000000005c0 returned -22
[  111.974775][ T8868] netlink: 'syz.4.750': attribute type 33 has an invalid length.
[  111.974899][ T8867] netlink: 'syz.4.750': attribute type 33 has an invalid length.
[  112.034960][ T8868] overlayfs: missing 'lowerdir'
[  112.037656][ T8872] overlayfs: missing 'lowerdir'
[  112.046980][ T8865] [U] è
[  112.048097][   T40] audit: type=1400 audit(1771457845.599:796): avc:  denied  { listen } for  pid=8878 comm="syz.5.753" laddr=fe80::12 lport=62338 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  112.080402][ T8712] veth0_vlan: entered promiscuous mode
[  112.087803][ T8712] veth1_vlan: entered promiscuous mode
[  112.116822][ T8712] veth0_macvtap: entered promiscuous mode
[  112.122236][ T8712] veth1_macvtap: entered promiscuous mode
[  112.163675][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.173339][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.183357][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.190346][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.198205][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.204182][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.261061][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.264506][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.284756][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.287634][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.807827][ T8923] __nla_validate_parse: 8 callbacks suppressed
[  112.807843][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'.
[  112.895520][ T8928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.766'.
[  113.200844][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.774'.
[  113.204667][ T8974] netlink: 44 bytes leftover after parsing attributes in process `syz.4.772'.
[  113.240423][ T8963] netlink: 124 bytes leftover after parsing attributes in process `syz.3.775'.
[  113.243468][ T8962] netlink: 124 bytes leftover after parsing attributes in process `syz.3.775'.
[  113.632502][ T1485] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  113.655826][ T8998] netlink: 'syz.6.782': attribute type 10 has an invalid length.
[  113.667276][ T8998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.830753][ T5944] Bluetooth: hci0: command tx timeout
[  113.901803][ T9016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.786'.
[  114.058425][ T9021] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.788'.
[  114.674676][ T9027] xt_hashlimit: max too large, truncated to 1048576
[  114.950864][   T53] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  114.978368][ T9051] netlink: 'syz.3.798': attribute type 39 has an invalid length.
[  115.024472][ T9049] netlink: 68 bytes leftover after parsing attributes in process `syz.4.797'.
[  115.105593][   T53] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.108825][   T53] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.117866][   T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  115.121638][   T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.264660][ T9062] netlink: 'syz.3.799': attribute type 4 has an invalid length.
[  115.326487][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'.
[  115.327462][   T53] usb 10-1: usb_control_msg returned -32
[  115.332310][   T53] usbtmc 10-1:16.0: can't read capabilities
[  115.470087][ T9073] net_ratelimit: 13 callbacks suppressed
[  115.470105][ T9073] openvswitch: netlink: IP tunnel dst address not specified
[  115.912517][ T5944] Bluetooth: hci0: command tx timeout
[  116.117100][ T9091] openvswitch: netlink: Key type 138 is out of range max 32
[  116.121107][ T9091] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  116.263642][ T9100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.267855][ T9100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.281388][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  116.281399][   T40] audit: type=1400 audit(1771457849.839:806): avc:  denied  { map } for  pid=9098 comm="syz.3.810" path="socket:[29989]" dev="sockfs" ino=29989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  116.290869][   T40] audit: type=1400 audit(1771457849.839:807): avc:  denied  { read } for  pid=9098 comm="syz.3.810" path="socket:[29989]" dev="sockfs" ino=29989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  116.360028][ T9100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.363950][ T9100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.442479][ T9100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.446008][ T9100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.527675][ T9100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.532154][ T9100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.615133][   T40] audit: type=1400 audit(1771457850.169:808): avc:  denied  { read } for  pid=9102 comm="syz.6.811" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.615896][ T9103] netlink: 'syz.6.811': attribute type 30 has an invalid length.
[  116.622405][   T40] audit: type=1400 audit(1771457850.169:809): avc:  denied  { open } for  pid=9102 comm="syz.6.811" path="/17/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.622432][   T40] audit: type=1400 audit(1771457850.169:810): avc:  denied  { ioctl } for  pid=9102 comm="syz.6.811" path="/17/file0" dev="tmpfs" ino=109 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.632238][ T9103] netlink: 'syz.6.811': attribute type 30 has an invalid length.
[  116.642512][ T1167] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.646325][ T1167] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.658789][ T1167] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.662018][ T1167] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.665023][ T1167] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.667602][ T1167] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.670216][ T1167] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.672997][ T1167] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.683209][ T1167] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.685894][ T1167] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.706158][ T8451] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.708994][ T8451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.748476][ T9113] overlayfs: overlapping lowerdir path
[  116.796118][ T9120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9120 comm=syz.4.816
[  116.796135][ T9119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9119 comm=syz.4.816
[  116.813452][   T40] audit: type=1400 audit(1771457850.369:811): avc:  denied  { write } for  pid=9122 comm="syz.6.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  116.977073][ T9133] syzkaller0: entered promiscuous mode
[  116.978889][ T9133] syzkaller0: entered allmulticast mode
[  117.117651][   T40] audit: type=1400 audit(117.009:812): avc:  denied  { watch watch_reads } for  pid=9134 comm="syz.3.821" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  117.184363][   T40] audit: type=1400 audit(117.079:813): avc:  denied  { accept } for  pid=9142 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  117.235734][ T9146] netlink: 'syz.3.825': attribute type 13 has an invalid length.
[  117.266217][ T9146] gretap0: refused to change device tx_queue_len
[  117.268896][ T9146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  117.402503][   T40] audit: type=1400 audit(117.299:814): avc:  denied  { ioctl } for  pid=9158 comm="syz.6.830" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  117.472335][   T40] audit: type=1400 audit(117.369:815): avc:  denied  { listen } for  pid=9162 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.682893][ T9172] vlan3: entered promiscuous mode
[  117.685034][ T9172] vlan3: entered allmulticast mode
[  117.686984][ T9172] hsr_slave_1: entered allmulticast mode
[  117.729119][   T34] usb 10-1: USB disconnect, device number 7
[  117.990773][ T5944] Bluetooth: hci0: command tx timeout
[  118.372339][ T9208] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  118.384403][ T9208] bond1 (unregistering): Released all slaves
[  118.387268][ T9213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9213 comm=syz.6.844
[  118.408304][ T9209] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  118.410732][ T9215] __nla_validate_parse: 7 callbacks suppressed
[  118.410746][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.843'.
[  118.417956][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.843'.
[  118.418745][ T9209] bond1 (unregistering): Released all slaves
[  118.611761][ T9242] geneve2: entered promiscuous mode
[  118.741557][   T29] usb 11-1: new full-speed USB device number 2 using dummy_hcd
[  118.821099][ T9249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=9249 comm=syz.5.855
[  118.893133][   T29] usb 11-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30
[  118.897859][   T29] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.902505][   T29] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  118.907125][   T29] usb 11-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  118.916123][   T29] usb 11-1: config 0 interface 0 has no altsetting 0
[  118.920498][   T29] usb 11-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00
[  118.924726][   T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.932316][   T29] usb 11-1: config 0 descriptor??
[  118.935687][ T9222] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  119.242619][ T9265] QAT: failed to copy from user cfg_data.
[  119.246667][   T29] usb 11-1: string descriptor 0 read error: -71
[  119.252528][   T29] usbhid 11-1:0.0: can't add hid device: -71
[  119.254409][   T29] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  119.258550][   T29] usb 11-1: USB disconnect, device number 2
[  119.406047][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.862'.
[  119.410180][ T9275] hsr_slave_0: left promiscuous mode
[  119.415956][ T9275] hsr_slave_1: left promiscuous mode
[  119.893249][ T9304] netlink: 'syz.4.871': attribute type 3 has an invalid length.
[  119.896029][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'.
[  120.005971][ T9315] program syz.6.870 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.035441][ T9317] bond1: invalid ARP target 0.0.0.0 specified for addition
[  120.037855][ T9317] bond1: option arp_ip_target: invalid value (0)
[  120.043757][ T9317] bond1 (unregistering): Released all slaves
[  120.126450][ T9323] dns_resolver: Unsupported content type (234)
[  120.400999][ T6034] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  120.435070][ T9334] delete_channel: no stack
[  120.437159][ T9334] delete_channel: no stack
[  120.439135][ T9334] delete_channel: no stack
[  120.441581][ T9334] delete_channel: no stack
[  120.443114][ T9334] delete_channel: no stack
[  120.444907][ T9334] delete_channel: no stack
[  120.446719][ T9334] delete_channel: no stack
[  120.448278][ T9334] delete_channel: no stack
[  120.450230][ T9334] delete_channel: no stack
[  120.452731][ T9334] delete_channel: no stack
[  120.454598][ T9334] delete_channel: no stack
[  120.456112][ T9334] delete_channel: no stack
[  120.458090][ T9334] delete_channel: no stack
[  120.460035][ T9334] delete_channel: no stack
[  120.464041][ T9334] delete_channel: no stack
[  120.465677][ T9334] delete_channel: no stack
[  120.467705][ T9334] delete_channel: no stack
[  120.469318][ T9334] delete_channel: no stack
[  120.472922][ T9334] delete_channel: no stack
[  120.474677][ T9334] delete_channel: no stack
[  120.476252][ T9334] delete_channel: no stack
[  120.478235][ T9334] delete_channel: no stack
[  120.479941][ T9334] delete_channel: no stack
[  120.482756][ T9334] delete_channel: no stack
[  120.511463][ T9337] EXT4-fs (nbd5): unable to read superblock
[  120.555081][ T6034] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  120.559178][ T6034] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  120.563846][ T6034] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.571839][ T6034] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  120.575506][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.578811][ T6034] usb 8-1: Product: syz
[  120.580524][ T6034] usb 8-1: Manufacturer: syz
[  120.582089][ T6034] usb 8-1: SerialNumber: syz
[  120.586806][ T6034] hub 8-1:1.0: bad descriptor, ignoring hub
[  120.588770][ T6034] hub 8-1:1.0: probe with driver hub failed with error -5
[  120.712132][ T9348] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.884'.
[  120.788384][ T6034] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  120.960748][   T29] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  121.120662][   T29] usb 10-1: Using ep0 maxpacket: 16
[  121.692889][ T9325] usb 8-1: reset high-speed USB device number 6 using dummy_hcd
[  121.698056][ T9325] usb 8-1: device reset changed ep0 maxpacket size!
[  121.702727][ T1026] usb 8-1: USB disconnect, device number 6
[  121.707618][ T1026] usblp0: removed
[  121.840768][ T1026] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  121.991369][ T1026] usb 8-1: Using ep0 maxpacket: 16
[  122.048302][ T5944] Bluetooth: hci3: Malformed LE Event: 0x1b
[  122.140092][ T1026] usb 8-1: unable to get BOS descriptor or descriptor too short
[  122.144464][ T1026] usb 8-1: unable to read config index 0 descriptor/start: -71
[  122.146939][ T1026] usb 8-1: can't read configurations, error -71
[  122.872631][ T9307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.877998][   T29] usb 10-1: unable to get BOS descriptor or descriptor too short
[  122.880557][   T29] usb 10-1: no configurations
[  122.888609][   T29] usb 10-1: can't read configurations, error -22
[  123.096078][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  123.096096][   T40] audit: type=1400 audit(122.989:828): avc:  denied  { create } for  pid=9389 comm="syz.6.894" name="#1d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  123.112092][   T40] audit: type=1400 audit(122.989:829): avc:  denied  { link } for  pid=9389 comm="syz.6.894" name="#1d" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  123.118928][   T40] audit: type=1400 audit(122.989:830): avc:  denied  { rename } for  pid=9389 comm="syz.6.894" name="#1e" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  123.200770][   T40] audit: type=1326 audit(123.089:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.898" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b42d9c629 code=0x0
[  123.263784][ T9411] sctp: [Deprecated]: syz.6.901 (pid 9411) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.263784][ T9411] Use struct sctp_sack_info instead
[  123.272236][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'.
[  123.275681][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.901'.
[  123.297433][ T9410] overlayfs: statfs failed on './file0'
[  123.363006][   T40] audit: type=1400 audit(123.259:832): avc:  denied  { mount } for  pid=9414 comm="syz.4.902" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  123.371594][   T40] audit: type=1400 audit(123.259:833): avc:  denied  { unmount } for  pid=9414 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  123.379272][   T40] audit: type=1400 audit(123.269:834): avc:  denied  { bind } for  pid=9414 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  123.527868][   T40] audit: type=1400 audit(123.419:835): avc:  denied  { getopt } for  pid=9424 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  123.756404][ T5286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.760987][ T5286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.766235][ T5286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.769349][ T5286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.772490][ T5286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.447320][ T8456] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.452914][ T8456] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.579653][ T8456] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.584708][ T8456] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.596610][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.919'.
[  124.616940][ T9479] Bluetooth: MGMT ver 1.23
[  124.631061][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.917'.
[  124.634009][ T9479] netlink: 92 bytes leftover after parsing attributes in process `syz.5.917'.
[  124.666347][ T8456] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.669664][ T8456] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.707039][ T9442] chnl_net:caif_netlink_parms(): no params data found
[  124.749858][ T9481] ip6t_srh: unknown srh match flags  4000
[  124.753910][ T8456] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.756053][   T40] audit: type=1400 audit(124.649:836): avc:  denied  { getopt } for  pid=9480 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  124.758857][ T8456] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.832599][   T40] audit: type=1400 audit(124.719:837): avc:  denied  { setopt } for  pid=9498 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  124.865626][ T9504] netlink: 'syz.3.923': attribute type 12 has an invalid length.
[  124.874193][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'.
[  124.902010][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.911756][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.914672][ T9442] bridge_slave_0: entered allmulticast mode
[  124.917731][ T9442] bridge_slave_0: entered promiscuous mode
[  124.921878][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.924200][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.926496][ T9442] bridge_slave_1: entered allmulticast mode
[  124.929117][ T9442] bridge_slave_1: entered promiscuous mode
[  124.958094][ T9442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.968815][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.927'.
[  125.014006][ T9442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.064177][ T9525] overlayfs: failed to resolve './file1': -2
[  125.069000][ T9442] team0: Port device team_slave_0 added
[  125.072060][ T8456] bridge_slave_1: left allmulticast mode
[  125.075338][ T8456] bridge_slave_1: left promiscuous mode
[  125.077929][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.085429][ T8456] bridge_slave_0: left allmulticast mode
[  125.087855][ T8456] bridge_slave_0: left promiscuous mode
[  125.090365][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.162765][ T9534] netlink: 'syz.5.933': attribute type 1 has an invalid length.
[  125.300683][   T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  125.423478][ T8456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.427458][ T8456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.431085][ T8456] bond0 (unregistering): Released all slaves
[  125.436802][ T9442] team0: Port device team_slave_1 added
[  125.450563][ T9534] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.450729][   T53] usb 8-1: Using ep0 maxpacket: 8
[  125.455416][   T53] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  125.458543][   T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.462531][   T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.466317][   T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.470183][   T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.477451][   T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  125.481218][   T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.605674][ T9537] bond1: (slave geneve2): making interface the new active one
[  125.609994][ T9537] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  125.666951][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.669942][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.681278][ T9442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.687441][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.690434][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.700878][ T9442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.703701][   T53] usb 8-1: usb_control_msg returned -32
[  125.706946][   T53] usbtmc 8-1:16.0: can't read capabilities
[  125.737229][ T9442] hsr_slave_0: entered promiscuous mode
[  125.739600][ T9442] hsr_slave_1: entered promiscuous mode
[  125.743290][ T9442] debugfs: 'hsr0' already exists in 'hsr'
[  125.745246][ T9442] Cannot create hsr debugfs directory
[  125.831557][ T5944] Bluetooth: hci2: command tx timeout
[  125.854596][ T8456] hsr_slave_0: left promiscuous mode
[  125.860970][ T8456] hsr_slave_1: left promiscuous mode
[  125.863845][ T8456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.866988][ T8456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.873433][ T8456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.875893][ T8456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.883029][ T8456] veth1_macvtap: left promiscuous mode
[  125.884862][ T8456] veth0_macvtap: left promiscuous mode
[  125.886731][ T8456] veth1_vlan: left promiscuous mode
[  125.888513][ T8456] veth0_vlan: left promiscuous mode
[  125.904186][ T9552] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  125.906990][ T9552] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  125.917007][ T9552] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  125.928956][ T9552] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  125.932472][ T9552] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  125.937007][ T9552] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  125.944667][ T9552] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  125.953541][ T9552] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.958957][ T9552] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  126.057241][ T9561] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 8c
[  126.167570][ T8456] team0 (unregistering): Port device team_slave_1 removed
[  126.176604][ T8456] team0 (unregistering): Port device team_slave_0 removed
[  126.231740][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.940'.
[  126.258530][ T6261] usb 8-1: USB disconnect, device number 9
[  126.357620][ T9442] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  126.367259][ T9442] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  126.372572][ T9442] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  126.385588][ T9442] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  126.447372][ T9442] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.459959][ T9442] 8021q: adding VLAN 0 to HW filter on device team0
[  126.473155][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.476270][ T8455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.487921][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.491009][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.614795][ T9442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.784987][ T9442] veth0_vlan: entered promiscuous mode
[  126.812377][ T9442] veth1_vlan: entered promiscuous mode
[  126.826793][ T9442] veth0_macvtap: entered promiscuous mode
[  126.831750][ T9442] veth1_macvtap: entered promiscuous mode
[  126.840100][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.854075][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.865434][   T46] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.867781][ T9627] kAFS: unable to lookup cell '('
[  126.875402][   T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.893603][ T9627] kAFS: unable to lookup cell '(,c¾ûL'
[  126.902542][   T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.908142][ T8446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.921528][ T9631] tmpfs: Bad value for 'nr_inodes'
[  126.980223][ T8446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.992477][ T8446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.024965][ T9642] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  127.028834][ T9642] team0: Device ipvlan2 is already an upper device of the team interface
[  127.051741][ T8445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.054505][ T8445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.125401][ T9657] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  127.278975][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.960'.
[  127.343320][ T9684] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  127.352921][ T9684] CIFS mount error: No usable UNC path provided in device string!
[  127.352921][ T9684] 
[  127.357137][ T9684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  127.597407][ T9701] netlink: 40 bytes leftover after parsing attributes in process `syz.5.965'.
[  127.608329][ T9701] ip6gre1: entered promiscuous mode
[  127.610092][ T9701] ip6gre1: entered allmulticast mode
[  127.623082][ T9701] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.637004][ T9703] evm: overlay not supported
[  127.643145][ T9703] netlink: 92 bytes leftover after parsing attributes in process `syz.3.966'.
[  127.744690][ T9706] loop1: detected capacity change from 0 to 7
[  127.750341][ T9706] Dev loop1: unable to read RDB block 7
[  127.752782][ T9706]  loop1: unable to read partition table
[  127.754720][ T9706] loop1: partition table beyond EOD, truncated
[  127.756770][ T9706] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  127.856395][ T9720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.970'.
[  127.920683][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout
[  127.990898][ T5286] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.992223][ T5944] Bluetooth: hci2: command 0x040f tx timeout
[  128.098816][ T9732] ip6erspan1: entered promiscuous mode
[  128.806584][ T9780] ALSA: seq fatal error: cannot create timer (-19)
[  129.030950][   T53] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  129.049463][ T9797] overlayfs: missing 'workdir'
[  129.200827][   T53] usb 10-1: Using ep0 maxpacket: 8
[  129.203926][   T53] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.207485][   T53] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.221628][   T53] usb 10-1: config 0 interface 0 has no altsetting 0
[  129.224459][   T53] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  129.227647][ T9800] netlink: Conntrack attr has 4 unknown bytes
[  129.241256][   T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.245277][   T53] usb 10-1: config 0 descriptor??
[  129.339170][ T9807] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  129.654768][   T53] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  129.657167][   T53] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  129.659394][   T53] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  129.661715][   T53] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  129.664030][   T53] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  129.666773][   T53] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  129.882179][   T53] usb 10-1: USB disconnect, device number 10
[  129.953065][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.958628][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.991004][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout
[  130.070727][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.081740][ T5944] Bluetooth: hci2: command 0x040f tx timeout
[  130.220695][  T840] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  130.372460][  T840] usb 11-1: Using ep0 maxpacket: 8
[  130.376298][  T840] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.381726][  T840] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.386078][  T840] usb 11-1: config 0 interface 0 has no altsetting 0
[  130.388993][  T840] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  130.393622][  T840] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.399355][  T840] usb 11-1: config 0 descriptor??
[  130.542553][ T9857] dvmrp0: entered allmulticast mode
[  130.582743][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0c7c
[  130.620493][    T9] libceph: connect (1)[c::]:6789 error -22
[  130.623067][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  130.625837][    T9] libceph: connect (1)[c::]:6789 error -22
[  130.627790][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  130.663555][ T9868] exFAT-fs (nbd3): unable to read boot sector
[  130.665693][ T9868] exFAT-fs (nbd3): failed to read boot sector
[  130.667764][ T9868] exFAT-fs (nbd3): failed to recognize exfat type
[  130.683131][ T9868] input: syz0 as /devices/virtual/input/input18
[  130.725763][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  130.725775][   T40] audit: type=1400 audit(130.619:848): avc:  denied  { write } for  pid=9872 comm="syz.5.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  130.807546][  T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  130.810880][  T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  130.813963][  T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  130.817376][  T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  130.820532][  T840] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  130.823939][  T840] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  130.848457][ T9875] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! 
[  130.848457][ T9875] cct.usage_percpu_sys'
[  130.887089][ T9877] netlink: 'syz.5.1010': attribute type 1 has an invalid length.
[  130.893614][    T9] libceph: connect (1)[c::]:6789 error -22
[  130.895953][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  130.902717][ T9877] bond2: entered promiscuous mode
[  130.904577][ T9877] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.914422][ T9877] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.916936][ T9877] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  130.920254][ T9877] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  130.925322][ T9877] bond2: (slave xfrm1): making interface the new active one
[  130.927929][ T9877] xfrm1: entered promiscuous mode
[  130.930433][ T9877] bond2: (slave xfrm1): Enslaving as an active interface with an up link
[  130.961935][ T1026] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  131.122328][ T1026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.125755][ T1026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.128757][ T1026] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  131.131961][ T1026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.139911][ T1026] usb 8-1: config 0 descriptor??
[  131.240749][ T5830] usb 10-1: new low-speed USB device number 11 using dummy_hcd
[  131.393650][ T5830] usb 10-1: config 0 interface 0 has no altsetting 0
[  131.396647][ T5830] usb 10-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00
[  131.400550][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.402014][    T9] libceph: connect (1)[c::]:6789 error -22
[  131.407621][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  131.408306][ T5830] usb 10-1: config 0 descriptor??
[  131.411933][   T53] usb 12-1: new full-speed USB device number 2 using dummy_hcd
[  131.574208][   T53] usb 12-1: config index 0 descriptor too short (expected 28277, got 36)
[  131.577205][   T53] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.580857][   T53] usb 12-1: config 0 has no interfaces?
[  131.582781][   T53] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  131.585862][   T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.591380][   T53] usb 12-1: config 0 descriptor??
[  131.834088][ T5830] asus 0003:0B05:1866.0006: hidraw1: USB HID vff.ff Device [HID 0b05:1866] on usb-dummy_hcd.5-1/input0
[  132.030127][ T6034] usb 10-1: USB disconnect, device number 11
[  132.151033][ T5944] Bluetooth: hci2: command 0x040f tx timeout
[  132.160734][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout
[  132.483490][ T9890] netlink: 'syz.6.1014': attribute type 1 has an invalid length.
[  132.598078][ T9895] hugetlbfs: Bad value '$' for mount option 'size'
[  132.598078][ T9895] 
[  132.598106][   T40] audit: type=1400 audit(132.489:849): avc:  denied  { remount } for  pid=9894 comm="syz.6.1016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  132.609884][   T40] audit: type=1400 audit(132.499:850): avc:  denied  { mounton } for  pid=9894 comm="syz.6.1016" path="/84/file0" dev="hugetlbfs" ino=31715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[  132.627431][   T40] audit: type=1400 audit(132.519:851): avc:  denied  { accept } for  pid=9891 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  132.634315][ T6034] libceph: connect (1)[c::]:6789 error -22
[  132.636527][ T6034] libceph: mon0 (1)[c::]:6789 connect error
[  132.645371][ T9902] __nla_validate_parse: 5 callbacks suppressed
[  132.645381][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1017'.
[  132.696975][    T9] usb 11-1: USB disconnect, device number 3
[  132.982838][   T40] audit: type=1400 audit(2000000000.330:852): avc:  denied  { mounton } for  pid=9919 comm="syz.5.1023" path="/proc/673/cgroup" dev="proc" ino=33166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  132.989859][   T40] audit: type=1400 audit(2000000000.330:853): avc:  denied  { remount } for  pid=9919 comm="syz.5.1023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1
[  133.038107][ T9922] wg1: entered promiscuous mode
[  133.039768][ T9922] wg1: entered allmulticast mode
[  133.135472][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1025'.
[  133.135483][   T40] audit: type=1400 audit(2000000000.480:854): avc:  denied  { watch_mount } for  pid=9925 comm="syz.5.1025" path="/212" dev="tmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  133.180704][   T53] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  133.330768][   T53] usb 11-1: Using ep0 maxpacket: 8
[  133.335013][   T53] usb 11-1: unable to get BOS descriptor or descriptor too short
[  133.340891][   T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  133.345561][   T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  133.349704][   T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  133.354655][   T53] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  133.358898][   T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  133.363147][   T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[  133.367852][   T53] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  133.374542][   T53] usb 11-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  133.378402][   T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.382273][   T53] usb 11-1: Product: syz
[  133.384209][   T53] usb 11-1: Manufacturer: syz
[  133.386264][   T53] usb 11-1: SerialNumber: syz
[  133.392412][   T53] usb 11-1: config 0 descriptor??
[  133.395639][ T9917] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  133.398913][ T9917] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  133.404862][   T53] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  133.449254][ T9934] Cannot find add_set index 46338 as target
[  133.517713][  T840] libceph: connect (1)[c::]:6789 error -22
[  133.520438][  T840] libceph: mon0 (1)[c::]:6789 connect error
[  133.525521][ T9936] syz.5.1028: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  133.534182][ T9936] CPU: 2 UID: 0 PID: 9936 Comm: syz.5.1028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.534211][ T9936] Tainted: [L]=SOFTLOCKUP
[  133.534218][ T9936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.534229][ T9936] Call Trace:
[  133.534236][ T9936]  <TASK>
[  133.534244][ T9936]  dump_stack_lvl+0x100/0x190
[  133.534280][ T9936]  warn_alloc.cold+0x95/0x1c1
[  133.534321][ T9936]  ? __pfx_warn_alloc+0x10/0x10
[  133.534356][ T9936]  ? kasan_save_stack+0x3f/0x50
[  133.534379][ T9936]  ? kasan_save_stack+0x30/0x50
[  133.534402][ T9936]  ? kasan_save_track+0x14/0x30
[  133.534426][ T9936]  ? xskq_create+0xfb/0x1d0
[  133.534452][ T9936]  __vmalloc_node_range_noprof+0x1252/0x1530
[  133.534479][ T9936]  ? xskq_create+0xfb/0x1d0
[  133.534510][ T9936]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  133.534536][ T9936]  ? xskq_create+0xfb/0x1d0
[  133.534557][ T9936]  vmalloc_user_noprof+0x9e/0xe0
[  133.534570][ T9936]  ? xskq_create+0xfb/0x1d0
[  133.534585][ T9936]  xskq_create+0xfb/0x1d0
[  133.534602][ T9936]  xsk_setsockopt+0x743/0xab0
[  133.534618][ T9936]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.534633][ T9936]  ? find_held_lock+0x2b/0x80
[  133.534646][ T9936]  ? __fget_files+0x215/0x3d0
[  133.534658][ T9936]  ? selinux_socket_setsockopt+0x6a/0x80
[  133.534689][ T9936]  ? __pfx_xsk_setsockopt+0x10/0x10
[  133.534706][ T9936]  do_sock_setsockopt+0xf3/0x1d0
[  133.534722][ T9936]  __sys_setsockopt+0x195/0x220
[  133.534741][ T9936]  __x64_sys_setsockopt+0xbd/0x160
[  133.534758][ T9936]  ? do_syscall_64+0x95/0xf80
[  133.534769][ T9936]  ? lockdep_hardirqs_on+0x78/0x100
[  133.534780][ T9936]  do_syscall_64+0x106/0xf80
[  133.534790][ T9936]  ? clear_bhb_loop+0x40/0x90
[  133.534804][ T9936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.534817][ T9936] RIP: 0033:0x7f93a859c629
[  133.534826][ T9936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.534837][ T9936] RSP: 002b:00007f93a9505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.534848][ T9936] RAX: ffffffffffffffda RBX: 00007f93a8815fa0 RCX: 00007f93a859c629
[  133.534855][ T9936] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  133.534861][ T9936] RBP: 00007f93a8632b39 R08: 0000000000000004 R09: 0000000000000000
[  133.534867][ T9936] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.534874][ T9936] R13: 00007f93a8816038 R14: 00007f93a8815fa0 R15: 00007fff6c5c82b8
[  133.534887][ T9936]  </TASK>
[  133.534891][ T9936] Mem-Info:
[  133.607837][ T9864] ceph: No mds server is up or the cluster is laggy
[  133.609944][ T9936] active_anon:16786 inactive_anon:7 isolated_anon:0
[  133.609944][ T9936]  active_file:14607 inactive_file:2933 isolated_file:0
[  133.609944][ T9936]  unevictable:1768 dirty:25 writeback:0
[  133.609944][ T9936]  slab_reclaimable:9470 slab_unreclaimable:70763
[  133.609944][ T9936]  mapped:25211 shmem:4466 pagetables:6417
[  133.609944][ T9936]  sec_pagetables:311 bounce:0
[  133.609944][ T9936]  kernel_misc_reclaimable:0
[  133.609944][ T9936]  free:475796 free_pcp:17906 free_cma:0
[  133.627251][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1022'.
[  133.628833][ T9936] Node 0 active_anon:66840kB inactive_anon:28kB active_file:58172kB inactive_file:11604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92396kB dirty:96kB writeback:0kB shmem:14328kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15136kB pagetables:18348kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB
[  133.655516][ T9936] Node 1 active_anon:304kB inactive_anon:0kB active_file:256kB inactive_file:128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8448kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:7320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  133.657246][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1022'.
[  133.668797][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.673832][ T9936] Node 0 DMA free:15208kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB
[  133.687711][ T9936] lowmem_reserve[]: 0 1231 1231 1231 1231
[  133.690232][ T9936] Node 0 DMA32 free:272752kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:66716kB inactive_anon:28kB active_file:58172kB inactive_file:11604kB unevictable:3536kB writepending:96kB zspages:0kB present:2080628kB managed:1260996kB mlocked:0kB bounce:0kB free_pcp:71344kB local_pcp:20580kB free_cma:0kB
[  133.704728][ T9936] lowmem_reserve[]: 0 0 0 0 0
[  133.706896][ T9936] Node 1 Normal free:1615720kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:304kB inactive_anon:0kB active_file:256kB inactive_file:128kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB
[  133.708529][ T1026] usbhid 8-1:0.0: can't add hid device: -71
[  133.720155][ T9936] lowmem_reserve[]: 0 0 0 0 0
[  133.720200][ T9936] Node 0 DMA: 10*4kB (U) 10*8kB (U) 11*16kB (U) 12*32kB (U) 11*64kB (UM) 10*128kB (UM) 9*256kB (UM) 2*512kB (UM) 5*1024kB (UM) 2*2048kB (U) 0*4096kB = 15208kB
[  133.720365][ T9936] Node 0 DMA32: 
[  133.721151][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.731125][ T1026] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  133.733348][ T1026] usb 8-1: USB disconnect, device number 10
[  133.735198][ T9936] 3304*4kB (UME) 968*8kB (UME) 776*16kB (UME) 207*32kB (UME) 199*64kB (UME) 324*128kB (UME) 190*256kB (UME) 112*512kB (UM) 25*1024kB (UM) 7*2048kB (UM) 8*4096kB (UM) = 272896kB
[  133.744583][ T9936] Node 1 Normal: 376*4kB (UME) 353*8kB (UM) 326*16kB (UME) 315*32kB (UME) 267*64kB (UME) 246*128kB (UME) 217*256kB (UME) 184*512kB (UME) 167*1024kB (UM) 11*2048kB (UME) 294*4096kB (M) = 1615720kB
[  133.752963][ T9936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  133.756112][ T9936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.756206][  T840] usb 11-1: USB disconnect, device number 4
[  133.759274][ T9936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  133.765281][ T9936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.769339][ T9936] 22002 total pagecache pages
[  133.771876][ T9936] 0 pages in swap cache
[  133.773273][ T9936] Free swap  = 124996kB
[  133.774936][ T9936] Total swap = 124996kB
[  133.776368][ T9936] 1048443 pages RAM
[  133.777859][ T9936] 0 pages HighMem/MovableOnly
[  133.780119][ T9936] 283883 pages reserved
[  133.782075][ T9936] 0 pages cma reserved
[  134.061997][  T840] usb 12-1: USB disconnect, device number 2
[  134.096963][ T9956] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  134.148455][   T40] audit: type=1400 audit(2000000001.490:855): avc:  denied  { map } for  pid=9959 comm="syz.6.1036" path="socket:[33257]" dev="sockfs" ino=33257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.148859][ T9960] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  134.160762][   T40] audit: type=1400 audit(2000000001.510:856): avc:  denied  { relabelto } for  pid=9959 comm="syz.6.1036" name="92" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  134.169209][   T40] audit: type=1400 audit(2000000001.510:857): avc:  denied  { associate } for  pid=9959 comm="syz.6.1036" name="92" dev="tmpfs" ino=515 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[  134.179406][   T39] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  134.230774][ T5286] Bluetooth: hci2: command 0x040f tx timeout
[  134.333292][   T39] usb 10-1: config 0 has no interfaces?
[  134.337953][   T39] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  134.342296][   T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.346403][   T39] usb 10-1: Product: syz
[  134.348330][   T39] usb 10-1: Manufacturer: syz
[  134.350468][   T39] usb 10-1: SerialNumber: syz
[  134.356405][   T39] usb 10-1: config 0 descriptor??
[  134.420686][  T840] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  134.550746][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  134.553134][ T5286] Bluetooth: hci0: command 0x0c1a tx timeout
[  134.570729][  T840] usb 12-1: Using ep0 maxpacket: 8
[  134.575810][  T840] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.579944][  T840] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  134.584113][  T840] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  134.588175][  T840] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.590150][   T39] usb 10-1: USB disconnect, device number 12
[  134.592695][  T840] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  134.599701][  T840] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.730786][   T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  134.808285][  T840] usb 12-1: GET_CAPABILITIES returned 0
[  134.810091][  T840] usbtmc 12-1:16.0: can't read capabilities
[  134.880682][   T29] usb 8-1: Using ep0 maxpacket: 32
[  134.883778][   T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.887465][   T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.890735][   T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  134.894778][   T29] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  134.897685][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.902493][   T29] usb 8-1: config 0 descriptor??
[  135.012254][    C1] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.044703][ T9956] bond1: Unable to set up delay as MII monitoring is disabled
[  135.048605][ T9956] bond1 (unregistering): Released all slaves
[  135.356887][   T29] usbhid 8-1:0.0: can't add hid device: -71
[  135.361160][   T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  135.374550][   T29] usb 8-1: USB disconnect, device number 11
[  135.436878][ T9990] Mount JFS Failure: -22
[  135.757386][  T840] usb 12-1: USB disconnect, device number 3
[  135.882331][T10041] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  135.994648][T10055] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1065'.
[  136.052925][T10063] netlink: 'syz.7.1068': attribute type 10 has an invalid length.
[  136.066014][T10063] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  136.073911][T10063] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1068'.
[  136.077656][T10063] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1068'.
[  136.082493][T10063] netlink: 93 bytes leftover after parsing attributes in process `syz.7.1068'.
[  136.086150][T10063] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1068'.
[  136.133102][T10063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.140205][T10063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.144672][T10063] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  136.149048][T10063] bond0 (unregistering): Released all slaves
[  136.184923][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  136.184940][   T40] audit: type=1400 audit(2000000003.530:864): avc:  denied  { connect } for  pid=10077 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.188910][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1072'.
[  136.204544][   T40] audit: type=1400 audit(2000000003.530:865): avc:  denied  { ioctl } for  pid=10077 comm="syz.3.1072" path="socket:[36135]" dev="sockfs" ino=36135 ioctlcmd=0x5312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.286042][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.289248][T10084] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.293968][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.300745][T10084] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.320784][ T5944] Bluetooth: hci2: command 0x040f tx timeout
[  136.326854][T10092] netlink: 'syz.3.1078': attribute type 6 has an invalid length.
[  136.332927][T10092] netlink: 'syz.3.1078': attribute type 5 has an invalid length.
[  136.335569][T10092] netlink: 'syz.3.1078': attribute type 4 has an invalid length.
[  136.343671][   T40] audit: type=1400 audit(2000000003.690:866): avc:  denied  { connect } for  pid=10091 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  136.484654][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  136.671028][ T1026] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  136.698833][   T40] audit: type=1400 audit(2000000004.040:867): avc:  denied  { create } for  pid=10106 comm="syz.7.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  136.707489][   T40] audit: type=1400 audit(2000000004.050:868): avc:  denied  { write } for  pid=10106 comm="syz.7.1083" path="socket:[36171]" dev="sockfs" ino=36171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  136.728608][   T40] audit: type=1400 audit(2000000004.050:869): avc:  denied  { ioctl } for  pid=10106 comm="syz.7.1083" path="socket:[36171]" dev="sockfs" ino=36171 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  136.768723][   T40] audit: type=1400 audit(2000000004.110:870): avc:  denied  { getopt } for  pid=10108 comm="syz.7.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  136.770323][T10109] nbd: must specify an index to disconnect
[  136.822269][ T1026] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  136.829443][ T1026] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  136.834105][ T1026] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  136.837443][ T1026] usb 10-1: Product: syz
[  136.839192][ T1026] usb 10-1: Manufacturer: syz
[  136.842507][ T1026] usb 10-1: SerialNumber: syz
[  136.857404][T10120] lo speed is unknown, defaulting to 1000
[  136.860342][T10120] lo speed is unknown, defaulting to 1000
[  136.862900][T10120] lo speed is unknown, defaulting to 1000
[  136.944531][ T5830] lo speed is unknown, defaulting to 1000
[  136.946585][T10120] infiniband syz0: set down
[  136.948182][T10120] infiniband syz0: added lo
[  136.974731][T10120] RDS/IB: syz0: added
[  136.976509][T10120] smc: adding ib device syz0 with port count 1
[  136.978720][T10120] smc:    ib device syz0 port 1 has no pnetid
[  136.982421][ T5830] lo speed is unknown, defaulting to 1000
[  136.985307][T10120] lo speed is unknown, defaulting to 1000
[  137.100828][ T1026] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  137.111279][ T1026] usb 10-1: USB disconnect, device number 13
[  137.121577][ T1026] usblp0: removed
[  137.192507][T10120] lo speed is unknown, defaulting to 1000
[  137.295098][T10120] lo speed is unknown, defaulting to 1000
[  137.400523][T10120] lo speed is unknown, defaulting to 1000
[  137.469656][T10147] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  137.565280][   T40] audit: type=1400 audit(2000000004.910:871): avc:  denied  { watch watch_reads } for  pid=10148 comm="syz.6.1093" path="/proc/339/numa_maps" dev="proc" ino=35115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  137.686589][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  137.689135][   T40] audit: type=1400 audit(2000000005.030:872): avc:  denied  { connect } for  pid=10151 comm="syz.6.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  139.773889][T10109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.856474][   T40] audit: type=1400 audit(2000000007.200:873): avc:  denied  { getopt } for  pid=10205 comm="syz.5.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  140.044859][T10218] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.393008][T10237] netlink: 'syz.7.1113': attribute type 1 has an invalid length.
[  140.625863][T10251] __nla_validate_parse: 3 callbacks suppressed
[  140.625876][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'.
[  140.745140][T10266] 9pnet_virtio: no channels available for device syz
[  140.748364][T10266] 9pnet_virtio: no channels available for device syz
[  140.754943][T10266] 9pnet_virtio: no channels available for device syz
[  140.758205][T10266] 9pnet_virtio: no channels available for device syz
[  140.761467][T10266] 9pnet_virtio: no channels available for device syz
[  140.764664][T10266] 9pnet_virtio: no channels available for device syz
[  140.767808][T10266] 9pnet_virtio: no channels available for device syz
[  140.771570][T10266] 9pnet_virtio: no channels available for device syz
[  140.774699][T10266] 9pnet_virtio: no channels available for device syz
[  140.777873][T10266] 9pnet_virtio: no channels available for device syz
[  140.782395][T10266] 9pnet_virtio: no channels available for device syz
[  140.788735][T10266] 9pnet_virtio: no channels available for device syz
[  141.111222][T10286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53304 sclass=netlink_route_socket pid=10286 comm=syz.3.1126
[  141.183379][T10300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1135'.
[  141.188190][T10300] openvswitch: netlink: Missing key (keys=40, expected=80)
[  141.233038][T10308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.235967][T10308] IPv6: NLM_F_CREATE should be set when creating new route
[  141.238925][T10308] IPv6: NLM_F_CREATE should be set when creating new route
[  141.242089][T10308] IPv6: NLM_F_CREATE should be set when creating new route
[  141.245651][T10308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.278040][T10313] netlink: 'syz.5.1140': attribute type 13 has an invalid length.
[  141.284795][ T8446] Bluetooth: hci4: Frame reassembly failed (-84)
[  141.343249][T10313] gretap0: refused to change device tx_queue_len
[  141.345985][T10313] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  141.375257][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  141.375274][   T40] audit: type=1400 audit(2000000008.720:879): avc:  denied  { setattr } for  pid=10322 comm="syz.7.1142" name="CAN_J1939" dev="sockfs" ino=35437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  141.376189][T10323] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  141.392446][T10323] nfs4: Bad value for 'source'
[  141.463203][ T5286] Bluetooth: hci2: unexpected event 0x0b length: 4 < 11
[  141.465670][ T5286] Bluetooth: hci2: unexpected event 0x0b length: 4 < 11
[  141.524067][T10331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.632887][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'.
[  141.736980][T10343] mac80211_hwsim hwsim8 
: renamed from wlan1
[  142.561383][T10342] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  142.563544][T10342] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  142.565561][T10342] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  142.624387][T10368] ªªªªªª: renamed from wg2 (while UP)
[  142.679209][T10378] sctp: [Deprecated]: syz.7.1160 (pid 10378) Use of int in maxseg socket option.
[  142.679209][T10378] Use struct sctp_assoc_value instead
[  142.747113][T10390] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  142.779697][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1163'.
[  142.835099][   T40] audit: type=1400 audit(2000000010.180:880): avc:  denied  { unmount } for  pid=9442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  143.098920][   T40] audit: type=1400 audit(2000000010.440:881): avc:  denied  { accept } for  pid=10416 comm="syz.6.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  143.099081][T10417] netlink: 'syz.6.1169': attribute type 2 has an invalid length.
[  143.193709][   T40] audit: type=1804 audit(2000000010.540:882): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1171" name="file0" dev="ramfs" ino=35574 res=1 errno=0
[  143.327255][T10423] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.361115][ T5286] Bluetooth: hci4: command 0xfc11 tx timeout
[  143.365089][ T5944] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  143.392938][   T40] audit: type=1400 audit(2000000010.740:883): avc:  denied  { associate } for  pid=10426 comm="syz.6.1172" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  143.409640][   T40] audit: type=1400 audit(2000000010.740:884): avc:  denied  { map } for  pid=10426 comm="syz.6.1172" path="/proc/441/net/pfkey" dev="proc" ino=4026533548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  143.460795][   T40] audit: type=1400 audit(2000000010.800:885): avc:  denied  { append } for  pid=10428 comm="syz.6.1174" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  143.470983][   T40] audit: type=1400 audit(2000000010.810:886): avc:  denied  { map } for  pid=10428 comm="syz.6.1174" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  143.478752][   T40] audit: type=1400 audit(2000000010.810:887): avc:  denied  { write execute } for  pid=10428 comm="syz.6.1174" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  143.490549][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'.
[  143.494507][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'.
[  143.494815][   T40] audit: type=1400 audit(2000000010.840:888): avc:  denied  { ioctl } for  pid=10431 comm="syz.5.1173" path="socket:[37070]" dev="sockfs" ino=37070 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  143.569713][T10438] bond0: Removing last ns target with arp_interval on
[  143.633999][T10449] ipt_REJECT: TCP_RESET invalid for non-tcp
[  143.641913][T10449] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1178'.
[  143.656417][T10440] ubi: mtd0 is already attached to ubi0
[  143.659564][T10451] netlink: 4740 bytes leftover after parsing attributes in process `syz.5.1180'.
[  143.830786][ T5286] Bluetooth: hci3: command 0x0c1a tx timeout
[  143.831892][T10464] netlink: 'syz.6.1183': attribute type 4 has an invalid length.
[  143.882915][ T6006] hid-generic 0004:0006:0002.0007: item fetching failed at offset 1/2
[  143.891599][ T6006] hid-generic 0004:0006:0002.0007: probe with driver hid-generic failed with error -22
[  143.914973][T10466] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1184'.
[  143.918581][T10466] openvswitch: netlink: Flow actions attr not present in new flow.
[  144.048767][T10479] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.068297][T10479] bridge_slave_0 (unregistering): left allmulticast mode
[  144.073743][T10479] bridge_slave_0 (unregistering): left promiscuous mode
[  144.076401][T10479] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.096832][T10480] NILFS (nbd7): device size too small
[  144.102110][T10478] NILFS (nbd7): device size too small
[  144.186741][T10482] netlink: 'syz.6.1188': attribute type 30 has an invalid length.
[  144.190326][T10482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.630790][ T5286] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.640907][ T5286] Bluetooth: hci2: command 0x040f tx timeout
[  144.679829][T10508] kvm: MWAIT instruction emulated as NOP!
[  144.707848][T10515] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1196'.
[  144.729753][T10512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10512 comm=syz.6.1197
[  144.799404][T10521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10521 comm=syz.6.1199
[  144.805749][T10521] netlink: 'syz.6.1199': attribute type 1 has an invalid length.
[  144.983169][T10531] lo speed is unknown, defaulting to 1000
[  145.089445][T10545] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  145.160942][T10550] nilfs2: Unknown parameter 'norecoveryncer2'
[  145.271436][T10557] bridge_slave_1: left allmulticast mode
[  145.273786][T10557] bridge_slave_1: left promiscuous mode
[  145.277260][T10557] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.288855][T10557] ¾x9ÿ: left allmulticast mode
[  145.296814][T10557] ¾x9ÿ: left promiscuous mode
[  145.298581][T10557] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  145.472743][T10570] lo speed is unknown, defaulting to 1000
[  145.527696][T10571] 8021q: adding VLAN 0 to HW filter on device bond4
[  145.574694][T10571] lo speed is unknown, defaulting to 1000
[  145.915553][T10583] misc userio: The device must be registered before sending interrupts
[  145.967527][T10583] random: crng reseeded on system resumption
[  146.227609][T10600] 8021q: adding VLAN 0 to HW filter on device bond5
[  146.255442][ T8438] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.259232][ T8438] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  146.262076][ T8438] CPU: 3 UID: 0 PID: 8438 Comm: kworker/u32:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.265610][ T8438] Tainted: [L]=SOFTLOCKUP
[  146.266940][ T8438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.270126][ T8438] Workqueue: krdsd rds_tcp_accept_worker
[  146.271879][ T8438] RIP: 0010:rds_tcp_accept_one+0x9aa/0xd90
[  146.273725][ T8438] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b1 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 12 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 76 03 00 00
[  146.279676][ T8438] RSP: 0018:ffffc90006effb68 EFLAGS: 00010202
[  146.281624][ T8438] RAX: dffffc0000000000 RBX: ffff8880324e0400 RCX: 0000000000000000
[  146.284148][ T8438] RDX: 0000000000000002 RSI: ffffffff8adb769a RDI: 0000000000000012
[  146.286676][ T8438] RBP: ffff88802cae6140 R08: 0000000000000001 R09: 0000000000000000
[  146.289216][ T8438] R10: 0000000000000001 R11: 0000000000000003 R12: 0000000000000000
[  146.291806][ T8438] R13: ffff888023ac8000 R14: ffff8880573ec000 R15: ffff888023ac8020
[  146.294313][ T8438] FS:  0000000000000000(0000) GS:ffff8880d664a000(0000) knlGS:0000000000000000
[  146.297156][ T8438] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.299277][ T8438] CR2: 000000110c31b377 CR3: 0000000055a5a000 CR4: 0000000000352ef0
[  146.301835][ T8438] Call Trace:
[  146.302914][ T8438]  <TASK>
[  146.303884][ T8438]  ? __pfx_rds_tcp_accept_one+0x10/0x10
[  146.305707][ T8438]  rds_tcp_accept_worker+0x41/0x60
[  146.307380][ T8438]  process_one_work+0x9d7/0x1920
[  146.309013][ T8438]  ? __pfx_process_one_work+0x10/0x10
[  146.310744][ T8438]  ? __pfx_rds_tcp_accept_worker+0x10/0x10
[  146.312606][ T8438]  worker_thread+0x5da/0xe40
[  146.314077][ T8438]  ? kthread+0x13a/0x450
[  146.315429][ T8438]  ? __pfx_worker_thread+0x10/0x10
[  146.317085][ T8438]  kthread+0x370/0x450
[  146.318393][ T8438]  ? __pfx_kthread+0x10/0x10
[  146.319897][ T8438]  ret_from_fork+0x754/0xd80
[  146.321449][ T8438]  ? __pfx_ret_from_fork+0x10/0x10
[  146.323112][ T8438]  ? __switch_to+0x7b4/0x1120
[  146.324651][ T8438]  ? __pfx_kthread+0x10/0x10
[  146.326159][ T8438]  ret_from_fork_asm+0x1a/0x30
[  146.327699][ T8438]  </TASK>
[  146.328715][ T8438] Modules linked in:
[  146.330548][ T8438] ---[ end trace 0000000000000000 ]---
[  146.332845][ T8438] RIP: 0010:rds_tcp_accept_one+0x9aa/0xd90
[  146.334717][ T8438] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b1 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d 7c 24 12 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 76 03 00 00
[  146.341190][ T8438] RSP: 0018:ffffc90006effb68 EFLAGS: 00010202
[  146.343174][ T8438] RAX: dffffc0000000000 RBX: ffff8880324e0400 RCX: 0000000000000000
[  146.345814][ T8438] RDX: 0000000000000002 RSI: ffffffff8adb769a RDI: 0000000000000012
[  146.348370][ T8438] RBP: ffff88802cae6140 R08: 0000000000000001 R09: 0000000000000000
[  146.352455][ T8438] R10: 0000000000000001 R11: 0000000000000003 R12: 0000000000000000
[  146.355131][ T8438] R13: ffff888023ac8000 R14: ffff8880573ec000 R15: ffff888023ac8020
[  146.357997][ T8438] FS:  0000000000000000(0000) GS:ffff8880d664a000(0000) knlGS:0000000000000000
[  146.363002][ T8438] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.366293][ T8438] CR2: 00007ffcf1f8afa0 CR3: 000000003b434000 CR4: 0000000000352ef0
[  146.369311][ T8438] Kernel panic - not syncing: Fatal exception
[  146.372065][ T8438] Kernel Offset: disabled
[  146.373467][ T8438] Rebooting in 86400 seconds..