last executing test programs:

19m29.002474767s ago: executing program 1 (id=1837):
r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0xfffffffffffffffa, 0x40002)
ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0xd683, 0x0, 0x0, 'queue1\x00', 0x80000009})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpgid(0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/153)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$alg(0x26, 0x5, 0x0)
tkill(r2, 0x27)
bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
recvmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x12000)
writev(r7, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x106}], 0x1)
sendto$inet6(r5, 0x0, 0x0, 0x801, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f0000001900)={0x0, [{0x1, 0x118, 0x9, &(0x7f0000000000)="b618bb3ccb26515ebc9b8f53da2578328a1d08b7e67c7e9c5b5933fe1e9d4859f6401b"}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x4, &(0x7f0000002080)}, {0x0, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0xd94, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xd03, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x6, &(0x7f00000013c0)}, {0x1, 0x118, 0x3, &(0x7f00000014c0)="f10dfc6318f7c2d620a6eada8b79299daeb46276dde4e0e4b56d659b4e2a5e15aeffdf"}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x120, 0x47d, &(0x7f0000001600)="f6d3bfbb9082d9857756af54726e266c180e17ff2f7560f91b01d76c266c29aaf4d5c778"}, {0x2, 0xd0, 0x4, &(0x7f00000016c0)="c9c33e742c953235637044fa462c73fb0ddb03fc07a6fc480441"}, {0x0, 0x430, 0xdd, &(0x7f0000001780)="960ec96251794fe09a02e516b7195b47121f49203edcae9ee45763b6ae3e8685b5458f857090b3e582c283fd9d46db774263267d7e8b293e462f51231a3cacf74a873395a0e4e39da62dae25578f48f55fe451bfc1971bb146a70f05713fa1bacad31df4935eeb6964dde497fbb9d129e35bf41116a7aea10c445c869842c997a258614c0530"}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xe7c, 0x0}]})

19m24.504279873s ago: executing program 1 (id=1853):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0x8, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x9, 0x7c25, 0x6, 0xfffffffd, 0x2, 0x4, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x1, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x8, 0x4, 0x40, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0x4000a8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0xe, 0x809, 0x4, 0xa6, 0x1000, 0x2000, 0x80000000, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x1, 0x4c2336d3, 0x4, 0x10001, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x3fc, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x7, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xd, 0xffff, 0xc, 0xfff, 0x5, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x7fffffff, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0x100, 0xfff, 0x7, 0x8000, 0x623, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x5, 0x10000, 0xf7fffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x0, 0x200006, 0x80008001, 0x2, 0xfffffffd, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x7, 0x14000, 0x1, 0x9]}, 0x45c)
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x2b, 0x80801, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x800, 0x0, 0x1ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x4, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000009000/0x400000)=nil)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0)

19m20.613892675s ago: executing program 1 (id=1854):
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
kexec_load(0x4, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
kexec_load(0x58fb, 0x0, 0x0, 0x160000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50)
io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550d, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)

19m14.600202668s ago: executing program 1 (id=1868):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r7, r7, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x3)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0)

19m13.398163215s ago: executing program 1 (id=1870):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={0x0, r5, 0x4000, r4}, 0x18)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r8=>r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}})
r9 = fsmount(r4, 0x1, 0x1)
fchdir(r9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ec)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x8}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3)

19m10.887271669s ago: executing program 1 (id=1874):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unlink(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r5, 0x8994, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000)

18m54.797810042s ago: executing program 32 (id=1874):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unlink(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r5, 0x8994, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000)

14m10.553947684s ago: executing program 2 (id=2627):
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0xc000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x80085610, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}})
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012140100a5bd7000fcdbdf25080001000000000008004b00130000000800150001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0)
prlimit64(r2, 0xb, &(0x7f0000000100)={0x4, 0x4}, &(0x7f0000001000))
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x60, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x854}, 0x844)
prlimit64(r2, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)

14m8.900147536s ago: executing program 2 (id=2629):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
userfaultfd(0x801)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]})
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x28c2008, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4028, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r3 = open$dir(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast2}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fc, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4)

14m8.390558685s ago: executing program 2 (id=2631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$addseals(r0, 0x409, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000002010100000000008000000a000000522969f8659292e48852a8c261c968dad7fbe44e3df1d4615649a8c3e252fab7bc4b4eeba3178fbbe7b188f1eb044f6fe228d669ac37cac2cd970a210be0e4966bbbe77cf6637dcadb"], 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x10000, 0x0, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "1d4f011551f3b511a9"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x5, 0x3, "fc"}, {0x6, 0xc, "6784f53bb1cfb1f98150"}]}, @rr={0x7, 0x7, 0x63, [@remote]}, @timestamp_addr={0x44, 0x4, 0x24, 0x1, 0x1}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0x3, 0xc5}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x9c, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @rr={0x7, 0x27, 0xed, [@local, @private=0xa010101, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}})
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000540)=0x4)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000)
ppoll(&(0x7f0000000040)=[{r6, 0x9280}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

14m4.586532361s ago: executing program 2 (id=2642):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200"], 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000080)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES32, @ANYRES32=r5], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

14m1.700814402s ago: executing program 2 (id=2647):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001e00010000000000000000000100000a20000000000a18040000000000000000010000010900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000908000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c084885400000000008000440000000220500020007000000080006b477428ea43837a40073797a3000000000140000001100010000000000000000000700000a"], 0xdc}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$kcm(0x2, 0x5, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@mcast2, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0xffffffffffff8001, 0xfffffffffffffffe}, {0x0, 0x0, 0x200000000000, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r6)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000140)={r9, 0x6}, &(0x7f0000000100)=0x8)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000426bd7000fbdbdf2501000000080009000100000008000200010000000c0003000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4044001)
lseek(r6, 0x851, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0800002c0007012bbd70120000000009"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)

13m59.846249488s ago: executing program 2 (id=2651):
write$nci(0xffffffffffffffff, 0x0, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x3, &(0x7f0000000100)={0x8, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x200000005, 0xd, 0x422, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x20000006, 0x2, 0x0, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001000036000701fcffffff00008100017c000003669ed1e674a476cd8199bbdf311e7eef175de72c346cc983bf85959a028644b5ada040c8f2f7e457bf40ecd64e21fb9183521b4ec5f197d1c2ca4b92757ea65875fa9fa33f2438391a65df42bd95d7cd3e47a243f92830a6c3980ad4087f1bac425bd51b5ad2b322086e6d263361a3c8bf59150d9ffea0a54dd16ebb81b2b835f7c71af144fcf4ab30202c6b746d0790c7c552b623d69e4122895ccef4d0279b2ea9dc37ae25a72913c16f2211bc4714ff9868175ea804352aab48eb472b11f2fa124f12d13da71ad81c202b6c012d656e484e4d6a970d394d65089052ef9e8879735acf387a101f000000"], 0x100}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c0d4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r5)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

13m43.729941665s ago: executing program 33 (id=2651):
write$nci(0xffffffffffffffff, 0x0, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x3, &(0x7f0000000100)={0x8, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x200000005, 0xd, 0x422, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x20000006, 0x2, 0x0, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001000036000701fcffffff00008100017c000003669ed1e674a476cd8199bbdf311e7eef175de72c346cc983bf85959a028644b5ada040c8f2f7e457bf40ecd64e21fb9183521b4ec5f197d1c2ca4b92757ea65875fa9fa33f2438391a65df42bd95d7cd3e47a243f92830a6c3980ad4087f1bac425bd51b5ad2b322086e6d263361a3c8bf59150d9ffea0a54dd16ebb81b2b835f7c71af144fcf4ab30202c6b746d0790c7c552b623d69e4122895ccef4d0279b2ea9dc37ae25a72913c16f2211bc4714ff9868175ea804352aab48eb472b11f2fa124f12d13da71ad81c202b6c012d656e484e4d6a970d394d65089052ef9e8879735acf387a101f000000"], 0x100}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c0d4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r5)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

12m21.558739839s ago: executing program 0 (id=2862):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
creat(&(0x7f0000000200)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[], 0xb8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xfd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
chdir(0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffe0}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x9, 0x3, 0x10, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x800, 0x8e, &(0x7f00000007c0)=""/142, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x2, 0x1, 0x7, 0x1}, {0x3, 0x2, 0x3, 0xb}, {0x5, 0x4, 0xb}, {0x5, 0x5, 0x3, 0x4}, {0x3, 0x4, 0x3, 0xc}, {0x2, 0x4, 0x2, 0x6}, {0x4, 0x3, 0xe, 0x5}, {0x3, 0x2, 0xe, 0x3}], 0x10, 0x7fffffff}, 0x94)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)

12m20.408605337s ago: executing program 0 (id=2864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
gettid()
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
r7 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
mmap(&(0x7f0000fa3000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r8, 0xdd81000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0xfc, 0x4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

12m13.179312481s ago: executing program 0 (id=2869):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffe0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000280)=0xce76, 0x4)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50)
sendfile(r3, r4, 0x0, 0x106f)
socket$rds(0x15, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a0900000000004e22"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
recvmmsg(r6, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400303a00fe880000000000000000000000000001ff0200000000000000000000000102009078000005006050835900006c00fc0100"/102], 0x0)

12m11.75100689s ago: executing program 0 (id=2873):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key$keyring(&(0x7f0000000f40), 0x0, 0x0, 0x0, r1)
add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x200)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x670, 0x5, 0x628, 0x470, 0x0, 0xfeffffff, 0x348, 0x470, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x42}, 0x0, 0x2a0, 0x2e0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3c, "672aa37433823e2ec551dffef2f50b7e14d5905c77d37ba9f2eb3a8b53e8"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @port=0xfffe}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x688)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c806}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

12m5.857835877s ago: executing program 0 (id=2882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = gettid()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
cachestat(r7, &(0x7f0000000240)={0x3, 0x8}, &(0x7f0000000280), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r8 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, r5, 0x4, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', '\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x32})
r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0xfc, 0x4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="d1001a5f", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

12m5.338302842s ago: executing program 0 (id=2884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$addseals(r0, 0x409, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000002010100000000008000000a000000522969f8659292e48852a8c261c968dad7fbe44e3df1d4615649a8c3e252fab7bc4b4eeba3178fbbe7b188f1eb044f6fe228d669ac37cac2cd970a210be0e4966bbbe77cf6637dcadb"], 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x10000, 0x0, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "1d4f011551f3b511a9"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x5, 0x3, "fc"}, {0x6, 0xc, "6784f53bb1cfb1f98150"}]}, @rr={0x7, 0x7, 0x63, [@remote]}, @timestamp_addr={0x44, 0x4, 0x24, 0x1, 0x1}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0x3, 0xc5}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x9c, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @rr={0x7, 0x27, 0xed, [@local, @private=0xa010101, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}})
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000540)=0x4)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000)
ppoll(&(0x7f0000000040)=[{r6, 0x9280}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

11m48.709742173s ago: executing program 34 (id=2884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$addseals(r0, 0x409, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000002010100000000008000000a000000522969f8659292e48852a8c261c968dad7fbe44e3df1d4615649a8c3e252fab7bc4b4eeba3178fbbe7b188f1eb044f6fe228d669ac37cac2cd970a210be0e4966bbbe77cf6637dcadb"], 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x10000, 0x0, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "1d4f011551f3b511a9"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x5, 0x3, "fc"}, {0x6, 0xc, "6784f53bb1cfb1f98150"}]}, @rr={0x7, 0x7, 0x63, [@remote]}, @timestamp_addr={0x44, 0x4, 0x24, 0x1, 0x1}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0x3, 0xc5}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x9c, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @rr={0x7, 0x27, 0xed, [@local, @private=0xa010101, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}})
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000540)=0x4)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000)
ppoll(&(0x7f0000000040)=[{r6, 0x9280}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

31.538269252s ago: executing program 5 (id=5464):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4de", 0x10}], 0x1)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
ioctl$FIOCLEX(r5, 0x5451)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0)
close(r5)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000240)={0x1, 0x2, 0x8000000000000, 0x2, 0xdae, 0xea})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x2, 0xfd, 0x3, 0x9, 0xb}, &(0x7f0000000100)=0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4000)

29.643327095s ago: executing program 5 (id=5468):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

22.177634075s ago: executing program 5 (id=5488):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025", 0x9b}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x1c)

18.685139796s ago: executing program 5 (id=5495):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

17.158211002s ago: executing program 5 (id=5501):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)

16.588863691s ago: executing program 5 (id=5506):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0xa, 0x0, 0xd6fc}, 0x20)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0)
write$FUSE_WRITE(r4, 0x0, 0x0)

8.195388345s ago: executing program 6 (id=5535):
unshare(0x6a040000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
unshare(0x2c020400)
open_tree(r2, &(0x7f0000000640)='\x00', 0x9901)
connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'pimreg1\x00'}}, 0x1e)
socket(0x2, 0x2, 0x1)

5.015216797s ago: executing program 6 (id=5539):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_enter(r1, 0x7437, 0xa526, 0x41, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001100)={r2, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}})
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x4c08, 0x0)

4.290860131s ago: executing program 7 (id=5543):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000000}], 0x0, 0x0, 0x0})

4.153888679s ago: executing program 4 (id=5545):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
setresgid(0xee00, 0xee01, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, &(0x7f0000000040)})
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x27, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbe930da0288a8b78a3f921c40fdc06a"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
eventfd2(0xffffffff, 0x80800)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e)
rename(0x0, 0x0)
iopl(0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='na\f', 0x3}], 0x1)

4.030315427s ago: executing program 4 (id=5546):
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000680)={0x2, 0x4ea3, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="0501cd074c03d5204bd58f1f67b2bb98c4", 0x11}], 0x1}}], 0x2, 0xc044)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
setpgid(r2, r2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
unshare(0x6a040000)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
io_uring_setup(0x5af5, &(0x7f00000004c0)={0x0, 0xda48, 0x4000, 0x1, 0x325})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
brk(0x7fffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x5b0)

3.902691048s ago: executing program 7 (id=5547):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mkdirat(0xffffffffffffff9c, 0x0, 0x101)

3.867210126s ago: executing program 7 (id=5548):
socket$packet(0x11, 0x2, 0x300)
socket(0x40000000015, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
socket$phonet(0x23, 0x2, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2.570534087s ago: executing program 7 (id=5549):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@sg0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r1, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
lseek(r2, 0x10000000005, 0x1)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001100)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.518034763s ago: executing program 3 (id=5550):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

2.174924066s ago: executing program 4 (id=5551):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r1, 0x4)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x40a4)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)

1.867571389s ago: executing program 3 (id=5552):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket(0x28, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db0047aaa9e100", '\x00', '\x00\x00\x00@\x00'}, 0x38)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fffffffffffffff, 0x8, 0x400000f, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0)
shutdown(r0, 0x0)

1.645172477s ago: executing program 7 (id=5553):
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4040004)
close(0xffffffffffffffff)
recvmmsg$unix(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x40000000, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0)
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

1.446156309s ago: executing program 6 (id=5554):
set_mempolicy(0x3, 0x0, 0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
timer_create(0x9, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0x5)
read$FUSE(r2, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x8, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.370508554s ago: executing program 6 (id=5555):
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c60", 0xd}], 0x1}, 0x8bb3a301eb085f)

1.367206231s ago: executing program 7 (id=5556):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(0x0, 0x22)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x1f, 0xfc, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=<r2=>0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000841)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40)
ptrace$ARCH_SHSTK_STATUS(0x1e, r2, 0x0, 0x5005)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x6}, [{}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x5}, {}], {0x4, 0x4}, [{}, {}, {0x8, 0x1}, {0x8, 0x4}, {}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x4}, {0x20, 0x4}}, 0x84, 0x2)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x0)

1.138650219s ago: executing program 6 (id=5557):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)

983.863878ms ago: executing program 4 (id=5558):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbff7f, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
timer_create(0xfffffffd, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe5d8, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

949.836365ms ago: executing program 6 (id=5559):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
fchdir(0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

884.370767ms ago: executing program 3 (id=5560):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355e9254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c41231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a34484005b58a703899ad2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e51619967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf", 0xc9c}, {0x0}], 0x3}, 0x8bb3a301eb085f)

570.539871ms ago: executing program 4 (id=5561):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x3ff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)

429.091026ms ago: executing program 35 (id=5506):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0xa, 0x0, 0xd6fc}, 0x20)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0)
write$FUSE_WRITE(r4, 0x0, 0x0)

409.101385ms ago: executing program 3 (id=5563):
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f0000000080)={0x5, 0xfff})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
pipe(0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304008ff6d9dadbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005001c0012800b000100"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)

123.108147ms ago: executing program 3 (id=5564):
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0xfffffe0c)
landlock_restrict_self(r1, 0xd)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b80), 0x0, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20)

42.017562ms ago: executing program 4 (id=5565):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x90, 0x1, 0x4, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x1, 0xa, 0x13, 0x5, 0x6, 0x109}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400})
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)={0x3, 0x0, [{0x587, 0x0, 0x5}, {0x87d, 0x0, 0x5}, {0x231, 0x0, 0xf129000000}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0xfd, 0xff, 0x8, 0xe, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x3, 0xfc, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x6})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff14, 0x3, 0x100000000, 0x3, 0x4]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

0s ago: executing program 3 (id=5566):
unshare(0x44050400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=0x8000000000000000, 0x12)

kernel console output (not intermixed with test programs):

2424] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1643.718278][T22424] overlayfs: failed to set xattr on upper
[ 1643.724075][T22424] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1643.730893][T22424] overlayfs: ...falling back to index=off.
[ 1643.736697][T22424] overlayfs: ...falling back to uuid=null.
[ 1643.742483][T22424] overlayfs: maximum fs stacking depth exceeded
[ 1643.827303][T22427] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1643.834788][T22427] overlayfs: failed to set xattr on upper
[ 1643.840490][T22427] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1643.847373][T22427] overlayfs: ...falling back to index=off.
[ 1643.853166][T22427] overlayfs: ...falling back to uuid=null.
[ 1643.858947][T22427] overlayfs: maximum fs stacking depth exceeded
[ 1645.157073][T22436] lo speed is unknown, defaulting to 1000
[ 1645.628564][T22446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3849'.
[ 1647.434905][T22467] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1648.103929][T22454] vivid-000: kernel_thread() failed
[ 1648.381677][T22483] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1648.388680][T22483] overlayfs: failed to set xattr on upper
[ 1648.394412][T22483] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1648.401227][T22483] overlayfs: ...falling back to index=off.
[ 1648.407014][T22483] overlayfs: ...falling back to uuid=null.
[ 1648.413084][T22483] overlayfs: maximum fs stacking depth exceeded
[ 1648.746661][   T30] audit: type=1400 audit(2000000939.601:2041): avc:  denied  { read } for  pid=22478 comm="syz.3.3858" lport=62758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1649.101086][T22501] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[22501]
[ 1649.337121][T22504] lo speed is unknown, defaulting to 1000
[ 1652.366962][T22525] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1652.383085][T22525] overlayfs: failed to set xattr on upper
[ 1652.389101][T22525] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1652.399125][T22525] overlayfs: ...falling back to index=off.
[ 1652.406252][T22525] overlayfs: ...falling back to uuid=null.
[ 1652.414714][T22525] overlayfs: maximum fs stacking depth exceeded
[ 1653.190981][T22541] lo speed is unknown, defaulting to 1000
[ 1654.840624][T22545] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1654.847676][T22545] overlayfs: failed to set xattr on upper
[ 1654.853384][T22545] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1654.860236][T22545] overlayfs: ...falling back to index=off.
[ 1654.866292][T22545] overlayfs: ...falling back to uuid=null.
[ 1654.872130][T22545] overlayfs: maximum fs stacking depth exceeded
[ 1655.340880][T22560] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1655.347851][T22560] overlayfs: failed to set xattr on upper
[ 1655.353722][T22560] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1655.360893][T22560] overlayfs: ...falling back to index=off.
[ 1655.366677][T22560] overlayfs: ...falling back to uuid=null.
[ 1655.372495][T22560] overlayfs: maximum fs stacking depth exceeded
[ 1655.805956][T22584] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[22584]
[ 1656.096831][T22592] xt_hashlimit: size too large, truncated to 1048576
[ 1656.227821][T22598] tmpfs: Bad value for 'mpol'
[ 1656.441533][T22603] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[ 1656.701576][ T5896] kernel read not supported for file /rfkill (pid: 5896 comm: kworker/1:6)
[ 1657.081351][T22623] lo speed is unknown, defaulting to 1000
[ 1657.949411][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1660.042336][T22640] lo speed is unknown, defaulting to 1000
[ 1662.145460][T22647] lo speed is unknown, defaulting to 1000
[ 1662.445478][T22670] overlayfs: failed to clone upperpath
[ 1662.909975][  T798] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1663.121141][  T798] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[ 1663.171046][  T798] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1663.265221][  T798] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1663.294007][  T798] usb 6-1: config 220 has no interface number 2
[ 1663.308390][  T798] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1663.331726][  T798] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1663.382066][  T798] usb 6-1: config 220 interface 0 has no altsetting 0
[ 1663.508854][  T798] usb 6-1: config 220 interface 76 has no altsetting 0
[ 1663.533856][  T798] usb 6-1: config 220 interface 1 has no altsetting 0
[ 1663.704428][T22681] lo speed is unknown, defaulting to 1000
[ 1664.570448][  T798] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1665.051700][  T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.071615][  T798] usb 6-1: Product: syz
[ 1665.081752][  T798] usb 6-1: Manufacturer: syz
[ 1665.092855][  T798] usb 6-1: SerialNumber: syz
[ 1665.478993][  T798] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1665.525041][  T798] uvcvideo 6-1:220.0: No valid video chain found.
[ 1665.542486][  T798] usb 6-1: selecting invalid altsetting 0
[ 1665.670213][  T798] usb 6-1: selecting invalid altsetting 0
[ 1665.699395][  T798] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[ 1665.825619][  T798] usb 6-1: USB disconnect, device number 20
[ 1666.346111][T22717] lo speed is unknown, defaulting to 1000
[ 1667.471812][  T798] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[ 1667.668424][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1667.710955][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1667.752602][  T798] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1667.782468][  T798] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 1667.793686][  T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1667.849821][  T798] usb 6-1: config 0 descriptor??
[ 1667.933092][T22736] fuse: fd is not a fuse device
[ 1667.943895][T22736] bridge88: entered promiscuous mode
[ 1667.949707][T22736] bridge88: entered allmulticast mode
[ 1668.138097][   T30] audit: type=1400 audit(2000000957.746:2042): avc:  denied  { bind } for  pid=22741 comm="syz.6.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1668.883107][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1668.902727][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1668.918355][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1668.926426][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1668.935068][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1668.962269][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1669.084739][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1669.114786][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1669.192129][T22757] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1669.632024][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1669.667844][   T30] audit: type=1400 audit(2000000959.178:2043): avc:  denied  { link } for  pid=22743 comm="syz.6.3946" name="#4a" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1669.696858][  T798] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0
[ 1669.746854][   T30] audit: type=1400 audit(2000000959.206:2044): avc:  denied  { rename } for  pid=22743 comm="syz.6.3946" name="#4b" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1669.937750][  T798] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0
[ 1669.939106][T22769] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1670.027422][  T798] usb 6-1: USB disconnect, device number 21
[ 1670.161327][T22770] fido_id[22770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1670.312110][T22777] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[22777]
[ 1670.609630][T22779] lo speed is unknown, defaulting to 1000
[ 1673.327682][T22808] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1673.747760][   T30] audit: type=1400 audit(2000000962.996:2045): avc:  denied  { bind } for  pid=22807 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1673.937400][   T30] audit: type=1400 audit(2000000962.996:2046): avc:  denied  { listen } for  pid=22807 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1674.072785][T22819] veth1_macvtap: left promiscuous mode
[ 1674.078314][T22819] macsec0: entered allmulticast mode
[ 1675.158010][T22824] veth1_macvtap: entered promiscuous mode
[ 1675.176610][T22824] veth1_macvtap: entered allmulticast mode
[ 1675.191369][T22824] macsec0: left allmulticast mode
[ 1675.200615][T22824] veth1_macvtap: left allmulticast mode
[ 1675.223062][T22821] lo speed is unknown, defaulting to 1000
[ 1676.095507][T11682] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[ 1676.138043][T22844] overlayfs: failed to clone upperpath
[ 1676.300620][T11682] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64
[ 1676.393364][T11682] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1676.416505][T11682] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1676.434481][T11682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.450696][T11682] usb 6-1: config 0 descriptor??
[ 1676.467101][T22833] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1676.748157][T22857] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[22857]
[ 1676.777832][T15978] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1676.964950][T22861] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1676.972353][T22861] overlayfs: failed to set xattr on upper
[ 1676.978186][T22861] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1676.985017][T22861] overlayfs: ...falling back to index=off.
[ 1676.990949][T22861] overlayfs: ...falling back to uuid=null.
[ 1676.996753][T22861] overlayfs: maximum fs stacking depth exceeded
[ 1677.008308][T15978] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 1677.024803][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.067328][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.102254][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.137552][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.186030][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.203190][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.218528][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.235790][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.247698][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.265387][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.276012][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.296785][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.305339][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.315718][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.330742][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.359384][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.361900][T11682] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[ 1677.379105][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.399379][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.409714][T11682] lua 0003:1E7D:2C2E.0004: item fetching failed at offset 11/13
[ 1677.410291][T11682] lua 0003:1E7D:2C2E.0004: parse failed
[ 1677.441085][T11682] lua 0003:1E7D:2C2E.0004: probe with driver lua failed with error -22
[ 1677.459916][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.490076][T11682] usb 6-1: USB disconnect, device number 22
[ 1677.494105][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.527154][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.561573][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.590294][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.617162][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.637507][T15978] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[ 1677.660893][T15978] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1677.687264][T15978] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1677.704565][T15978] usb 7-1: Product: syz
[ 1677.713246][T15978] usb 7-1: Manufacturer: syz
[ 1677.723568][T15978] usb 7-1: SerialNumber: syz
[ 1677.741683][T15978] usb 7-1: config 0 descriptor??
[ 1678.113435][T11682] usb 7-1: USB disconnect, device number 11
[ 1678.293106][T22886] lo speed is unknown, defaulting to 1000
[ 1680.573340][T22908] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[22908]
[ 1680.924464][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4002'.
[ 1681.872865][T15978] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1682.123348][T15978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1682.190701][T22936] netlink: 'syz.3.4010': attribute type 8 has an invalid length.
[ 1682.548918][T15978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1682.563253][T15978] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1682.576542][T15978] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 1682.585887][T15978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1682.596597][T15978] usb 7-1: config 0 descriptor??
[ 1683.611838][T15978] hid_parser_main: 1 callbacks suppressed
[ 1683.611858][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x2
[ 1683.643871][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x1
[ 1683.661083][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x1
[ 1683.681339][T22965] tmpfs: Bad value for 'mpol'
[ 1683.791421][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[ 1683.799786][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[ 1683.807670][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[ 1683.815864][T15978] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0
[ 1683.830048][T15978] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0
[ 1683.853573][T15978] usb 7-1: USB disconnect, device number 12
[ 1683.942674][T22969] fido_id[22969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1685.339272][T11682] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1685.538461][T11682] usb 6-1: Using ep0 maxpacket: 16
[ 1685.563258][T11682] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[ 1685.576307][T11682] usb 6-1: config 1 has no interface number 0
[ 1685.583637][T11682] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1685.594711][T11682] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1685.605721][T11682] usb 6-1: config 1 interface 105 has no altsetting 0
[ 1685.617035][T11682] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1685.628508][T11682] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1685.640176][T11682] usb 6-1: Product: syz
[ 1685.650321][T11682] usb 6-1: Manufacturer: syz
[ 1685.659681][T11682] usb 6-1: SerialNumber: syz
[ 1685.668139][T22977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1685.680321][T22977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1686.132616][T22977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1686.151936][T22977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1686.192309][T23016] netlink: 'syz.3.4039': attribute type 287 has an invalid length.
[ 1686.320167][T23017] lo speed is unknown, defaulting to 1000
[ 1688.244371][T11682] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1688.259122][T11682] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1688.271143][T11682] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1688.430016][T11682] aqc111 6-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6e:67:c7:2c:df:40
[ 1688.450787][T11682] usb 6-1: USB disconnect, device number 23
[ 1688.507631][T11682] aqc111 6-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1689.358028][T11682] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1689.371481][T11682] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1689.382723][T11682] aqc111 6-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1690.563901][T23064] lo speed is unknown, defaulting to 1000
[ 1691.664914][T11682] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1691.819258][T23082] netlink: 'syz.6.4057': attribute type 8 has an invalid length.
[ 1692.251966][T11682] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1692.277153][T11682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.298723][T11682] usb 6-1: config 0 descriptor??
[ 1692.388432][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[ 1692.404573][T11682] usb 6-1: can't set config #0, error -32
[ 1692.416955][T11682] usb 6-1: USB disconnect, device number 24
[ 1693.788551][T11682] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1693.970053][T11682] usb 6-1: Using ep0 maxpacket: 16
[ 1693.981488][T11682] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1694.005314][T11682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1694.024307][T11682] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1694.035250][T11682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.045448][T11682] usb 6-1: Product: syz
[ 1694.049767][T11682] usb 6-1: Manufacturer: syz
[ 1694.058926][T11682] usb 6-1: SerialNumber: syz
[ 1694.073395][T11682] usb 6-1: config 0 descriptor??
[ 1694.094190][T11682] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1694.105537][T11682] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1694.337782][T23140] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[23140]
[ 1695.326582][T23148] lo speed is unknown, defaulting to 1000
[ 1695.354391][T11682] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1695.385147][T11682] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1696.877274][T11682] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1696.940900][T11682] em28xx 6-1:0.0: No AC97 audio processor
[ 1696.959800][T11682] usb 6-1: USB disconnect, device number 25
[ 1696.978083][T11682] em28xx 6-1:0.0: Disconnecting em28xx
[ 1697.003176][T11682] em28xx 6-1:0.0: Freeing device
[ 1698.248165][T23179] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[23179]
[ 1699.436957][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'.
[ 1699.560326][T23199] netlink: 'syz.7.4098': attribute type 8 has an invalid length.
[ 1699.772446][T11682] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1699.943363][T11682] usb 6-1: Using ep0 maxpacket: 8
[ 1700.207516][T11682] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1700.280728][T11682] usb 6-1: config 179 has no interface number 0
[ 1700.296592][T11682] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1700.325943][T11682] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1700.352900][T11682] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1700.382179][T11682] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1700.411077][T11682] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1700.437542][T11682] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1700.449020][T11682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1700.481456][T23198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1700.858135][T23213] netlink: 'syz.3.4105': attribute type 8 has an invalid length.
[ 1701.107604][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 1701.546375][T17604] usb 6-1: USB disconnect, device number 26
[ 1701.546487][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1701.560889][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1702.137638][T11682] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input13
[ 1702.183744][T23217] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1702.190796][T23217] overlayfs: failed to set xattr on upper
[ 1702.196515][T23217] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1702.203405][T23217] overlayfs: ...falling back to index=off.
[ 1702.209223][T23217] overlayfs: ...falling back to uuid=null.
[ 1702.215013][T23217] overlayfs: maximum fs stacking depth exceeded
[ 1702.432972][T23226] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1702.439956][T23226] overlayfs: failed to set xattr on upper
[ 1702.445687][T23226] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1702.452537][T23226] overlayfs: ...falling back to index=off.
[ 1702.458393][T23226] overlayfs: ...falling back to uuid=null.
[ 1702.464182][T23226] overlayfs: maximum fs stacking depth exceeded
[ 1703.339697][T23247] netlink: 'syz.7.4114': attribute type 8 has an invalid length.
[ 1703.733884][T23260] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[23260]
[ 1705.674909][T23271] lo speed is unknown, defaulting to 1000
[ 1709.112055][T23279] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1709.119012][T23279] overlayfs: failed to set xattr on upper
[ 1709.124754][T23279] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1709.131576][T23279] overlayfs: ...falling back to index=off.
[ 1709.137386][T23279] overlayfs: ...falling back to uuid=null.
[ 1709.143961][T23279] overlayfs: maximum fs stacking depth exceeded
[ 1710.320166][T23300] overlayfs: failed to clone upperpath
[ 1710.696584][T23313] netlink: 'syz.5.4129': attribute type 8 has an invalid length.
[ 1710.749042][T23314] netlink: 'syz.3.4131': attribute type 8 has an invalid length.
[ 1712.352043][T23341] tmpfs: Bad value for 'mpol'
[ 1712.891897][T23330] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[23330]
[ 1713.612709][T23363] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[23363]
[ 1713.877048][T23366] netlink: 'syz.5.4147': attribute type 8 has an invalid length.
[ 1714.685347][T23371] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4151'.
[ 1714.951477][T23380] netlink: 'syz.5.4150': attribute type 8 has an invalid length.
[ 1715.386154][T23382] lo speed is unknown, defaulting to 1000
[ 1718.952753][T23412] lo speed is unknown, defaulting to 1000
[ 1721.648433][T23433] xt_hashlimit: size too large, truncated to 1048576
[ 1722.155135][T23453] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[23453]
[ 1722.168415][T23451] overlayfs: failed to clone upperpath
[ 1722.466190][T23461] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1723.046216][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1724.438624][T23493] netlink: 'syz.6.4184': attribute type 8 has an invalid length.
[ 1725.650740][T23518] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1726.543037][T23521] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[23521]
[ 1727.369184][T23535] netlink: 'syz.6.4200': attribute type 8 has an invalid length.
[ 1728.602358][T23555] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[23555]
[ 1729.653736][T23557] netlink: 'syz.6.4206': attribute type 8 has an invalid length.
[ 1731.242897][T11682] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1731.404174][T11682] usb 6-1: Using ep0 maxpacket: 32
[ 1731.418493][T11682] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1731.438572][T11682] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1731.450820][T11682] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1731.460334][T11682] usb 6-1: Product: syz
[ 1731.617740][T11682] usb 6-1: Manufacturer: syz
[ 1731.622920][T11682] usb 6-1: SerialNumber: syz
[ 1731.631442][T11682] usb 6-1: config 0 descriptor??
[ 1731.638064][T23579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1731.646517][T11682] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1731.653605][T11682] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1732.268921][T11682] usb 6-1: USB disconnect, device number 27
[ 1733.038537][T23604] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1734.167738][T23634] tmpfs: Bad value for 'mpol'
[ 1734.503946][T23638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4234'.
[ 1734.526739][T23638] netlink: 'syz.4.4234': attribute type 7 has an invalid length.
[ 1734.536120][T23638] netlink: 'syz.4.4234': attribute type 8 has an invalid length.
[ 1734.544104][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4234'.
[ 1734.561416][T23638] erspan0: entered promiscuous mode
[ 1734.568476][T23638] gretap0: entered promiscuous mode
[ 1734.587707][T23638] erspan0: left promiscuous mode
[ 1734.596842][T23638] gretap0: left promiscuous mode
[ 1735.483870][T23673] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1736.431386][T23687] netlink: 'syz.3.4250': attribute type 8 has an invalid length.
[ 1738.619428][T23721] netlink: 'syz.7.4263': attribute type 8 has an invalid length.
[ 1738.791112][T23723] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1739.551097][T23731] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[23731]
[ 1740.195542][T23740] netlink: 'syz.7.4269': attribute type 8 has an invalid length.
[ 1741.108431][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4277'.
[ 1741.799836][T23771] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1742.237216][T23776] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[23776]
[ 1743.260042][T23789] loop5: detected capacity change from 0 to 4095
[ 1743.335910][T23793] netlink: 'syz.7.4284': attribute type 8 has an invalid length.
[ 1744.338976][T23809] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1744.886874][T23815] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1744.893868][T23815] overlayfs: failed to set xattr on upper
[ 1744.899621][T23815] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1744.906445][T23815] overlayfs: ...falling back to index=off.
[ 1744.912249][T23815] overlayfs: ...falling back to uuid=null.
[ 1744.918039][T23815] overlayfs: maximum fs stacking depth exceeded
[ 1745.380830][T23827] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1747.122044][T23858] lo speed is unknown, defaulting to 1000
[ 1748.899535][T23860] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1748.919114][T23860] overlayfs: failed to set xattr on upper
[ 1748.926799][T23860] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1748.934841][T23860] overlayfs: ...falling back to index=off.
[ 1748.940821][T23860] overlayfs: ...falling back to uuid=null.
[ 1748.947594][T23860] overlayfs: maximum fs stacking depth exceeded
[ 1749.710900][T23870] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1750.118902][T23875] netlink: 'syz.5.4310': attribute type 8 has an invalid length.
[ 1750.522093][T23884] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1751.097491][T15978] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1751.373819][T23895] lo speed is unknown, defaulting to 1000
[ 1752.177412][T15978] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1753.250694][T15978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1753.440827][T15978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1753.644850][T15978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1753.659398][T15978] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1753.674761][T15978] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1753.683786][T15978] usb 6-1: Manufacturer: syz
[ 1753.694011][T15978] usb 6-1: config 0 descriptor??
[ 1753.960188][T15978] usb 6-1: can't set config #0, error -71
[ 1754.516275][T15978] usb 6-1: USB disconnect, device number 28
[ 1754.775068][T23927] overlayfs: failed to resolve './file1/file0': -2
[ 1755.296262][T23936] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1755.309504][T23936] overlayfs: failed to set xattr on upper
[ 1755.410293][T23936] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1755.450891][T23936] overlayfs: ...falling back to index=off.
[ 1755.476190][T23936] overlayfs: ...falling back to uuid=null.
[ 1755.493026][T23936] overlayfs: maximum fs stacking depth exceeded
[ 1755.563382][T23946] netlink: 'syz.7.4330': attribute type 8 has an invalid length.
[ 1756.810339][T23965] tmpfs: Bad value for 'mpol'
[ 1757.172158][T23967] lo speed is unknown, defaulting to 1000
[ 1758.063358][T15978] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1758.951585][T15978] usb 7-1: Using ep0 maxpacket: 32
[ 1759.023233][T15978] usb 7-1: device descriptor read/all, error -71
[ 1759.383504][T23988] netlink: 'syz.7.4342': attribute type 8 has an invalid length.
[ 1759.740475][T23984] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1759.761757][T23984] overlayfs: failed to set xattr on upper
[ 1759.791720][T23984] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1759.800934][T23984] overlayfs: ...falling back to index=off.
[ 1759.810028][T23984] overlayfs: ...falling back to uuid=null.
[ 1759.818081][T23984] overlayfs: maximum fs stacking depth exceeded
[ 1760.103578][T23989] lo speed is unknown, defaulting to 1000
[ 1761.791838][  T798] kernel read not supported for file /dsp (pid: 798 comm: kworker/0:2)
[ 1761.831613][T24027] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1761.839275][T24027] overlayfs: failed to set xattr on upper
[ 1761.844973][T24027] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1761.851828][T24027] overlayfs: ...falling back to index=off.
[ 1761.857767][T24027] overlayfs: ...falling back to uuid=null.
[ 1762.293638][T24027] overlayfs: maximum fs stacking depth exceeded
[ 1762.320373][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4356'.
[ 1762.436031][   T30] audit: type=1400 audit(2000001045.983:2047): avc:  denied  { bind } for  pid=24033 comm="syz.6.4358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1762.492336][   T30] audit: type=1400 audit(2000001045.983:2048): avc:  denied  { connect } for  pid=24033 comm="syz.6.4358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1762.730788][T24038] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[24038]
[ 1763.765328][T24048] lo speed is unknown, defaulting to 1000
[ 1765.551787][T24079] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4373'.
[ 1766.100953][T24086] overlayfs: failed to clone upperpath
[ 1766.620578][T24101] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[24101]
[ 1766.873716][   T30] audit: type=1400 audit(2000001050.147:2049): avc:  denied  { append } for  pid=24102 comm="syz.6.4380" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1767.038881][T24106] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4381'.
[ 1769.050669][T24148] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[24148]
[ 1771.159584][T24168] lo speed is unknown, defaulting to 1000
[ 1771.348816][T15978] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[ 1772.007159][T15978] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1772.214779][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1772.382154][T15978] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1772.415113][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1772.427161][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1772.432329][T24177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4407'.
[ 1772.444439][T15978] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1772.455120][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1772.475198][T15978] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1772.487326][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1772.500400][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1772.517196][T15978] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1772.527142][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1772.550933][T15978] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1772.574449][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1772.657226][T15978] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1772.686242][T15978] usb 6-1: string descriptor 0 read error: -22
[ 1772.692649][T15978] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1772.704604][T15978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.734295][T15978] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1773.542988][T24194] overlayfs: failed to resolve './bus': -2
[ 1773.574879][  T798] usb 6-1: USB disconnect, device number 29
[ 1774.474625][T24217] lo speed is unknown, defaulting to 1000
[ 1779.499273][T24246] lo speed is unknown, defaulting to 1000
[ 1780.075861][T24261] tmpfs: Bad value for 'mpol'
[ 1780.812468][T24270] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4437'.
[ 1781.285837][T24286] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1781.979693][T15978] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1782.186695][T15978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1782.307232][T15978] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1782.429766][T15978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1782.454226][T15978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1782.475608][T15978] usb 6-1: Product: syz
[ 1782.484248][T15978] usb 6-1: Manufacturer: syz
[ 1782.494280][T15978] usb 6-1: SerialNumber: syz
[ 1782.604587][T15978] cdc_mbim 6-1:1.0: skipping garbage
[ 1782.674742][T24307] netpci0: tun_chr_ioctl cmd 1074025678
[ 1782.681059][T24307] netpci0: group set to 0
[ 1782.837373][T24290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1783.059064][T24311] lo speed is unknown, defaulting to 1000
[ 1784.687328][T24290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1784.899095][T24322] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[24322]
[ 1785.200784][T15978] cdc_mbim 6-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[ 1785.220062][T15978] cdc_mbim 6-1:1.0: setting rx_max = 2048
[ 1785.226250][T15978] cdc_mbim 6-1:1.0: setting tx_max = 16384
[ 1785.255522][T15978] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[ 1785.372157][T15978] wwan wwan0: port wwan0mbim0 attached
[ 1785.452958][T15978] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 7a:a3:69:2d:c1:1e
[ 1785.491966][T15978] usb 6-1: USB disconnect, device number 30
[ 1785.508464][T15978] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[ 1786.386897][T15978] wwan wwan0: port wwan0mbim0 disconnected
[ 1787.109269][T24349] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1787.932098][T24363] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[24363]
[ 1788.081678][T24366] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[24366]
[ 1788.553614][T24373] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[24373]
[ 1789.288843][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.107301][T24402] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1791.732966][T24411] netlink: 'syz.5.4475': attribute type 8 has an invalid length.
[ 1792.641203][T24423] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[24423]
[ 1793.119511][   T30] audit: type=1326 audit(2000001074.702:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24427 comm="syz.7.4485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bded9c819 code=0x0
[ 1793.223328][T24428] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[24428]
[ 1797.928554][T24469] netlink: 'syz.6.4491': attribute type 8 has an invalid length.
[ 1798.003542][T24471] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[24471]
[ 1798.032399][T24470] netlink: 'syz.5.4492': attribute type 8 has an invalid length.
[ 1798.942708][T24483] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1798.949971][T24483] overlayfs: failed to set xattr on upper
[ 1798.955683][T24483] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1798.962522][T24483] overlayfs: ...falling back to index=off.
[ 1798.968300][T24483] overlayfs: ...falling back to uuid=null.
[ 1798.974108][T24483] overlayfs: maximum fs stacking depth exceeded
[ 1800.069835][T24503] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[24503]
[ 1801.330076][T24514] overlayfs: failed to clone upperpath
[ 1801.420873][T24519] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[24519]
[ 1801.817242][T24517] evm: overlay not supported
[ 1801.934824][T24523] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1801.942049][T24523] overlayfs: failed to set xattr on upper
[ 1801.947750][T24523] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1801.955419][T24523] overlayfs: ...falling back to index=off.
[ 1801.961209][T24523] overlayfs: ...falling back to uuid=null.
[ 1801.967166][T24523] overlayfs: maximum fs stacking depth exceeded
[ 1803.012866][T24545] lo speed is unknown, defaulting to 1000
[ 1803.962704][T24536] overlayfs: overlapping lowerdir path
[ 1805.041654][T24566] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1805.048635][T24566] overlayfs: failed to set xattr on upper
[ 1805.057476][T24566] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1805.064516][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 1805.076633][T24566] overlayfs: ...falling back to index=off.
[ 1805.082443][T24566] overlayfs: ...falling back to uuid=null.
[ 1805.088232][T24566] overlayfs: maximum fs stacking depth exceeded
[ 1805.608453][T24577] netlink: 'syz.6.4525': attribute type 8 has an invalid length.
[ 1805.695537][T23013] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1805.885023][T23013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1805.936229][T23013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1805.962763][T23013] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1805.990118][T23013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.034672][T23013] usb 6-1: config 0 descriptor??
[ 1806.169407][T24589] lo speed is unknown, defaulting to 1000
[ 1806.652966][T23013] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[ 1806.670688][T23013] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[ 1806.678787][T23013] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[ 1806.686623][T23013] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[ 1807.152740][T23013] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[ 1807.183306][T23013] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[ 1807.367777][T24604] overlayfs: failed to resolve './bus': -2
[ 1807.378989][T24610] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1807.386053][T24610] overlayfs: failed to set xattr on upper
[ 1807.391838][T24610] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1807.398665][T24610] overlayfs: ...falling back to index=off.
[ 1807.404734][T24610] overlayfs: ...falling back to uuid=null.
[ 1807.410534][T24610] overlayfs: maximum fs stacking depth exceeded
[ 1808.071279][T24624] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[24624]
[ 1808.090437][T24625] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[24625]
[ 1808.300113][T24629] lo speed is unknown, defaulting to 1000
[ 1808.768227][ T5896] usb 6-1: USB disconnect, device number 31
[ 1810.367341][T24654] lo speed is unknown, defaulting to 1000
[ 1811.822401][T24658] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1811.829726][T24658] overlayfs: failed to set xattr on upper
[ 1811.835423][T24658] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1811.842323][T24658] overlayfs: ...falling back to index=off.
[ 1811.848187][T24658] overlayfs: ...falling back to uuid=null.
[ 1811.853969][T24658] overlayfs: maximum fs stacking depth exceeded
[ 1812.117129][T24662] lo speed is unknown, defaulting to 1000
[ 1812.324941][T24668] overlayfs: failed to resolve './bus': -2
[ 1813.443473][T24697] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[24697]
[ 1813.813810][ T5896] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1813.984001][ T5896] usb 7-1: Using ep0 maxpacket: 8
[ 1813.998790][ T5896] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1814.015909][ T5896] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1814.039045][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1814.776869][ T5896] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1814.817996][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1814.844998][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1814.876324][ T5896] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1814.910932][ T5896] usb 7-1: config 168 interface 0 has no altsetting 0
[ 1814.927866][ T5896] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1814.954103][ T5896] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1814.967929][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1814.979850][ T5896] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1815.063286][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1815.075264][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1815.087444][ T5896] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1815.102511][ T5896] usb 7-1: config 168 interface 0 has no altsetting 0
[ 1815.113828][T24708] overlayfs: failed to clone upperpath
[ 1815.120518][ T5896] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1815.128079][ T5896] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1815.141292][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1815.166731][ T5896] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1815.194425][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1815.232870][ T5896] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1815.261282][ T5896] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1815.297113][ T5896] usb 7-1: config 168 interface 0 has no altsetting 0
[ 1815.315082][ T5896] usb 7-1: string descriptor 0 read error: -22
[ 1815.322320][ T5896] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1815.348158][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1815.367808][ T5896] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1815.715111][T24713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1815.736044][T24713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1815.811911][T17604] usb 7-1: USB disconnect, device number 15
[ 1815.873328][T24720] rdma_rxe: rxe_newlink: failed to add gre0
[ 1815.888746][T24720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1815.904978][T23013] lo speed is unknown, defaulting to 1000
[ 1815.911087][T23013] syz0: Port: 1 Link ACTIVE
[ 1816.025570][ T5896] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1816.195821][ T5896] usb 6-1: Using ep0 maxpacket: 32
[ 1816.203099][ T5896] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1816.212894][ T5896] usb 6-1: config 0 has no interface number 0
[ 1816.228407][ T5896] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1816.290598][T24733] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[24733]
[ 1816.654731][ T5896] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1816.682305][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1816.711624][ T5896] usb 6-1: Product: syz
[ 1816.716130][ T5896] usb 6-1: Manufacturer: syz
[ 1816.721539][ T5896] usb 6-1: SerialNumber: syz
[ 1816.739775][ T5896] usb 6-1: config 0 descriptor??
[ 1816.823546][   T30] audit: type=1400 audit(2000001096.881:2051): avc:  denied  { mounton } for  pid=24737 comm="syz.6.4576" path="/325/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1816.858152][   T30] audit: type=1400 audit(2000001096.918:2052): avc:  denied  { read } for  pid=24737 comm="syz.6.4576" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1816.882676][   T30] audit: type=1400 audit(2000001096.918:2053): avc:  denied  { read } for  pid=24737 comm="syz.6.4576" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1816.904900][   T30] audit: type=1400 audit(2000001096.918:2054): avc:  denied  { open } for  pid=24737 comm="syz.6.4576" path="/325/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1817.112292][   T30] audit: type=1400 audit(2000001096.918:2055): avc:  denied  { read } for  pid=24737 comm="syz.6.4576" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1817.192738][T24742] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[24742]
[ 1817.557138][   T30] audit: type=1400 audit(2000001096.928:2056): avc:  denied  { read } for  pid=24737 comm="syz.6.4576" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1817.588176][   T30] audit: type=1400 audit(2000001097.573:2057): avc:  denied  { unmount } for  pid=17415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1818.234812][ T5896] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[ 1818.308575][T24758] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1818.601751][ T5896] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1818.627950][ T5896] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1818.643190][ T5896] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1818.656803][ T5896] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1818.670292][ T5896] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[ 1818.698215][ T5896] usb 6-1: USB disconnect, device number 32
[ 1819.034003][   T30] audit: type=1400 audit(2000001098.958:2058): avc:  denied  { bind } for  pid=24769 comm="syz.6.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1819.055998][   T30] audit: type=1400 audit(2000001098.958:2059): avc:  denied  { connect } for  pid=24769 comm="syz.6.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1819.147618][T24766] overlayfs: failed to clone upperpath
[ 1819.326463][T24782] fuse: fd is not a fuse device
[ 1819.455116][T11682] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1819.553721][T23013] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1819.615417][T11682] usb 7-1: Using ep0 maxpacket: 16
[ 1819.629168][T11682] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[ 1819.640505][T11682] usb 7-1: config 0 has no interface number 0
[ 1819.647338][T11682] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1819.661524][T11682] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1819.695259][T11682] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1819.707911][T11682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1819.717151][T11682] usb 7-1: Product: syz
[ 1819.721549][T11682] usb 7-1: Manufacturer: syz
[ 1819.729108][T11682] usb 7-1: SerialNumber: syz
[ 1819.733893][T23013] usb 6-1: Using ep0 maxpacket: 32
[ 1819.741032][T23013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1819.754033][T11682] usb 7-1: config 0 descriptor??
[ 1819.862750][T23013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1819.879129][T23013] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1819.882799][T24775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1819.983980][T24795] netlink: 'syz.7.4596': attribute type 8 has an invalid length.
[ 1820.287273][T24775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1820.298058][T23013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1820.322157][T23013] usb 6-1: config 0 descriptor??
[ 1820.339769][T23013] hub 6-1:0.0: USB hub found
[ 1820.534745][T24775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1820.546499][T24775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1820.563650][T23013] hub 6-1:0.0: 1 port detected
[ 1820.777773][T11682] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1821.228644][T23013] hub 6-1:0.0: activate --> -90
[ 1821.726341][ T5896] usb 6-1: USB disconnect, device number 33
[ 1821.734206][T11682] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1821.744830][T11682] asix 7-1:0.34: probe with driver asix failed with error -71
[ 1821.766123][T11682] usb 7-1: USB disconnect, device number 16
[ 1821.831280][T24827] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[24827]
[ 1822.623278][T24831] netlink: 'syz.5.4609': attribute type 8 has an invalid length.
[ 1823.161911][T24839] overlayfs: failed to resolve './file2': -2
[ 1823.657339][T24863] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[24863]
[ 1824.160349][   T30] audit: type=1326 audit(2000001103.750:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24868 comm="syz.5.4625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc33499c819 code=0x0
[ 1824.209954][T24869] overlayfs: failed to resolve './file2': -2
[ 1824.858858][T24894] overlayfs: failed to clone upperpath
[ 1824.977066][T24898] netlink: 'syz.6.4630': attribute type 8 has an invalid length.
[ 1825.698728][T24914] overlayfs: failed to resolve './file2': -2
[ 1826.721790][ T5896] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1826.927771][ T5896] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1826.942073][ T5896] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1826.954357][ T5896] usb 6-1: string descriptor 0 read error: -22
[ 1826.961213][ T5896] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a53, bcdDevice= 0.40
[ 1826.970808][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.625024][T24950] lo speed is unknown, defaulting to 1000
[ 1828.391944][T24952] overlayfs: failed to resolve './file2': -2
[ 1828.402468][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.413312][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.421800][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.436402][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.451372][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.496293][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.530657][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.574158][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.660714][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1828.718267][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: unknown main item tag 0x0
[ 1829.207183][T24974] netlink: 'syz.7.4655': attribute type 8 has an invalid length.
[ 1829.644467][ T5896] hid-corsair-void 0003:1B1C:0A53.0007: hidraw0: USB HID vff.7e Device [HID 1b1c:0a53] on usb-dummy_hcd.5-1/input0
[ 1829.667005][ T5896] usb 6-1: USB disconnect, device number 34
[ 1829.795498][T17604] hid-corsair-void 0003:1B1C:0A53.0007: failed to request firmware (reason: -19)
[ 1829.809245][T24656] hid-corsair-void 0003:1B1C:0A53.0007: failed to request battery (reason: -19)
[ 1829.923850][T24979] fido_id[24979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1829.939887][T11682] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1830.130576][T11682] usb 7-1: Using ep0 maxpacket: 16
[ 1830.157883][T11682] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1830.214527][T11682] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1830.266677][T11682] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1830.325454][T11682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1830.767624][T11682] usb 7-1: config 0 descriptor??
[ 1831.650645][T11682] HID 045e:07da: Invalid code 65791 type 1
[ 1831.817987][T11682] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input14
[ 1831.951149][T11682] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 1832.045590][T25031] netlink: 'syz.7.4673': attribute type 14 has an invalid length.
[ 1832.072369][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'.
[ 1832.128452][T19302] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.142001][T25031] netlink: 'syz.7.4673': attribute type 14 has an invalid length.
[ 1832.168886][T19302] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.181454][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4673'.
[ 1832.217603][T19302] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.253282][T19302] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1832.517396][T24656] usb 7-1: USB disconnect, device number 17
[ 1833.474903][T25051] binder: 25049:25051 ioctl c0306201 200000000080 returned -14
[ 1833.641548][T25051] binder: 25049:25051 ioctl c0306201 2000000003c0 returned -14
[ 1835.914933][T25075] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1836.087022][T25084] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1836.087751][T25082] overlayfs: failed to resolve './file1/file0': -2
[ 1838.012258][T25113] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[25113]
[ 1839.010360][T25138] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1840.476036][T25156] netlink: 'syz.3.4711': attribute type 8 has an invalid length.
[ 1841.159145][T25159] 9p: Bad value for 'rfdno'
[ 1841.195339][   T30] audit: type=1400 audit(2000001119.696:2061): avc:  denied  { append } for  pid=25160 comm="syz.6.4713" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1841.313502][   T30] audit: type=1326 audit(2000001119.752:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25162 comm="syz.3.4714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd75b9c819 code=0x0
[ 1842.083434][T12297] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[ 1842.952909][T24656] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1842.968543][T25205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4729'.
[ 1842.978707][T25205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4729'.
[ 1843.260479][T24656] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1843.350863][T24656] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1843.474045][T24656] usb 7-1: string descriptor 0 read error: -22
[ 1843.594379][T24656] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40
[ 1843.628765][T24656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1843.979578][ T5896] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1844.040301][T25225] netlink: 'syz.3.4736': attribute type 8 has an invalid length.
[ 1844.279015][ T5896] usb 6-1: Using ep0 maxpacket: 32
[ 1844.337631][ T5896] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1844.369576][ T5896] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1844.387873][ T5896] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1844.416398][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1844.432719][T24656] hid_parser_main: 4007 callbacks suppressed
[ 1844.432751][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.447640][ T5896] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1844.459605][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.466838][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1844.483332][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.500513][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.508376][ T5896] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1844.518895][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.528753][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1844.537140][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.547748][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.556497][ T5896] usb 6-1: config 0 descriptor??
[ 1844.572158][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.595686][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.603947][T24656] glorious 0003:22D4:1503.0009: unknown main item tag 0x0
[ 1844.811927][T25231] netlink: 'syz.7.4739': attribute type 8 has an invalid length.
[ 1844.975891][ T5896] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1844.997364][T24656] glorious 0003:22D4:1503.0009: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.6-1/input0
[ 1845.036856][T24656] usb 7-1: USB disconnect, device number 18
[ 1845.104669][T25232] fido_id[25232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1845.250596][    C1] usblp0: nonzero read bulk status received: -71
[ 1845.262626][T24656] usb 6-1: USB disconnect, device number 35
[ 1845.270341][T25212] usblp0: error -71 reading from printer
[ 1845.412468][T25212] usblp0: removed
[ 1845.427501][T25241] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[25241]
[ 1845.852660][T25244] lo speed is unknown, defaulting to 1000
[ 1847.170710][T25271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'.
[ 1847.315382][T25277] netlink: 'syz.5.4750': attribute type 8 has an invalid length.
[ 1847.450443][T25278] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1847.799165][T25283] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[25283]
[ 1848.250197][T25291] xt_hashlimit: size too large, truncated to 1048576
[ 1848.368255][T25293] lo speed is unknown, defaulting to 1000
[ 1848.872257][T25311] netlink: 'syz.3.4761': attribute type 25 has an invalid length.
[ 1848.901888][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4761'.
[ 1848.967645][ T3506] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1848.967710][T25311] netlink: 'syz.3.4761': attribute type 25 has an invalid length.
[ 1848.985478][ T3506] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1849.031006][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4761'.
[ 1849.146565][ T3506] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1849.154872][ T3506] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1849.285333][T25322] netlink: 'syz.6.4763': attribute type 8 has an invalid length.
[ 1849.959133][T25331] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[25331]
[ 1850.856554][T25344] lo speed is unknown, defaulting to 1000
[ 1854.413378][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.892624][T25399] netlink: 'syz.5.4785': attribute type 8 has an invalid length.
[ 1855.550284][T25412] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[25412]
[ 1856.780122][T25429] netlink: 'syz.7.4797': attribute type 8 has an invalid length.
[ 1857.591578][T25444] netlink: 'syz.3.4804': attribute type 8 has an invalid length.
[ 1857.946258][T25445] lo speed is unknown, defaulting to 1000
[ 1859.005637][T24656] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1859.217880][T24656] usb 6-1: Using ep0 maxpacket: 8
[ 1859.248750][T24656] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1859.296441][T24656] usb 6-1: config 0 has no interface number 0
[ 1859.328204][T24656] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1859.349714][T23013] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1859.387859][T24656] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1859.440691][T24656] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1859.504265][T24656] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1859.520212][T23013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1859.549804][T24656] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1859.551254][T23013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1859.561243][T24656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1859.597780][T24656] usb 6-1: config 0 descriptor??
[ 1859.657921][T25468] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[25468]
[ 1859.752898][T24656] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1859.953536][T23013] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1859.965846][T23013] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1859.987416][T23013] usb 7-1: Manufacturer: syz
[ 1860.001688][T23013] usb 7-1: config 0 descriptor??
[ 1860.553239][T25484] lo speed is unknown, defaulting to 1000
[ 1861.896869][ T5896] usb 6-1: USB disconnect, device number 36
[ 1861.970991][ T5896] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1862.082523][T25493] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4821'.
[ 1862.104895][T23013] usbhid 7-1:0.0: can't add hid device: -71
[ 1862.124519][T23013] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1862.141202][T23013] usb 7-1: USB disconnect, device number 19
[ 1862.414946][T25487] lo speed is unknown, defaulting to 1000
[ 1862.736305][   T30] audit: type=1326 audit(2000001139.797:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25486 comm="syz.7.4819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bded9c819 code=0x0
[ 1863.079346][T25513] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[25513]
[ 1863.508502][   T30] audit: type=1400 audit(2000001140.573:2064): avc:  denied  { mounton } for  pid=25528 comm="syz.6.4833" path="/372/file0" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1864.052702][   T30] audit: type=1400 audit(2000001141.088:2065): avc:  denied  { create } for  pid=25533 comm="syz.3.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1864.220776][ T5896] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[ 1864.392510][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1864.415518][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1864.446583][ T5896] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 1864.463271][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.488196][ T5896] usb 6-1: config 0 descriptor??
[ 1865.123954][ T5896] kye 0003:0458:5016.000A: control desc unexpectedly large
[ 1865.149106][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.000A/input/input15
[ 1865.279729][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.000A/input/input16
[ 1865.369243][T25569] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[25569]
[ 1865.369387][T24656] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1865.568512][T24656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1865.587605][ T5896] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0
[ 1865.622903][T24656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1865.661391][T24656] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1865.688583][T24656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.720834][T24656] usb 7-1: config 0 descriptor??
[ 1865.794241][T25583] lo speed is unknown, defaulting to 1000
[ 1866.211068][T24656] hid_parser_main: 4007 callbacks suppressed
[ 1866.211095][T24656] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[ 1866.266224][T24656] cp2112 0003:10C4:EA90.000B: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[ 1866.308461][    C1] kye 0003:0458:5016.000A: usb_submit_urb(ctrl) failed: -1
[ 1866.408904][T24656] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE
[ 1867.378250][T17604] usb 6-1: USB disconnect, device number 37
[ 1867.639426][ T5896] usb 7-1: reset high-speed USB device number 20 using dummy_hcd
[ 1868.116978][T25635] netlink: 'syz.7.4866': attribute type 8 has an invalid length.
[ 1868.853663][T25640] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[25640]
[ 1869.632275][T25659] overlayfs: failed to clone upperpath
[ 1869.692781][T24656] usb 7-1: USB disconnect, device number 20
[ 1870.562073][T25664] lo speed is unknown, defaulting to 1000
[ 1872.110525][T25675] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[25675]
[ 1872.749017][T24656] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1872.888980][T25685] netlink: 'syz.7.4880': attribute type 8 has an invalid length.
[ 1873.346418][T24656] usb 7-1: Using ep0 maxpacket: 32
[ 1873.371643][T24656] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1873.398397][T24656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1873.415142][T24656] usb 7-1: Product: syz
[ 1873.425794][T24656] usb 7-1: Manufacturer: syz
[ 1873.435699][T24656] usb 7-1: SerialNumber: syz
[ 1873.524022][T24656] usb 7-1: config 0 descriptor??
[ 1873.546787][T24656] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1873.784164][T25695] overlayfs: missing 'lowerdir'
[ 1874.331007][T25708] lo speed is unknown, defaulting to 1000
[ 1875.916799][T24656] gspca_ov534_9: reg_w failed -110
[ 1876.340311][T25721] kvm: kvm [25719]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[ 1876.351716][T25721] kvm: kvm [25719]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[ 1876.466550][T24656] gspca_ov534_9: Unknown sensor 0000
[ 1876.466636][T24656] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22
[ 1876.491401][T24656] usb 7-1: USB disconnect, device number 21
[ 1876.605952][T25729] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[25729]
[ 1877.187612][T25735] fuse: fd is not a fuse device
[ 1877.858659][T25745] fuse: fd is not a fuse device
[ 1878.015514][  T798] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1878.196707][  T798] usb 7-1: Using ep0 maxpacket: 16
[ 1878.635829][  T798] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1878.669001][  T798] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1878.701721][  T798] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1878.711243][  T798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1878.719289][  T798] usb 7-1: Product: syz
[ 1878.723951][  T798] usb 7-1: Manufacturer: syz
[ 1878.728612][  T798] usb 7-1: SerialNumber: syz
[ 1879.038543][T25768] lo speed is unknown, defaulting to 1000
[ 1880.065330][T25775] fuse: fd is not a fuse device
[ 1880.654987][  T798] usb 7-1: Audio class v2/v3 interfaces need an interface association
[ 1880.668930][  T798] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1880.687816][  T798] usb 7-1: 2:1 : bogus bTerminalLink 6
[ 1880.726319][   T30] audit: type=1400 audit(2000001156.688:2066): avc:  denied  { read } for  pid=25787 comm="syz.5.4918" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1880.798657][   T30] audit: type=1400 audit(2000001156.688:2067): avc:  denied  { open } for  pid=25787 comm="syz.5.4918" path="/484/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1880.833485][T25793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1880.850932][T25793] block device autoloading is deprecated and will be removed.
[ 1881.027196][  T798] usb 7-1: USB disconnect, device number 22
[ 1881.105394][T25805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1881.152805][T25805] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1881.224289][T25806] erspan0: entered promiscuous mode
[ 1881.237617][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4923'.
[ 1881.269174][T25810] binder: 25809:25810 ioctl c0306201 200000000640 returned -14
[ 1881.447929][T25822] fuse: fd is not a fuse device
[ 1882.195829][T25838] serio: Serial port ttyS3
[ 1882.303579][T25848] fuse: fd is not a fuse device
[ 1882.574729][   T30] audit: type=1400 audit(2000001158.400:2068): avc:  denied  { read } for  pid=25851 comm="syz.6.4940" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1882.638879][   T30] audit: type=1400 audit(2000001158.400:2069): avc:  denied  { open } for  pid=25851 comm="syz.6.4940" path="/383/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1882.818915][T13333] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1882.833802][T13333] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1883.195615][T13333] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1883.501756][T25872] lo speed is unknown, defaulting to 1000
[ 1883.869331][T13333] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1884.418653][T25887] fuse: fd is not a fuse device
[ 1884.440121][T25882] overlayfs: missing 'lowerdir'
[ 1884.681545][T12297] Bluetooth: hci1: Malformed LE Event: 0x1b
[ 1885.691258][T25926] lo speed is unknown, defaulting to 1000
[ 1886.586286][T25930] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[25930]
[ 1887.225611][T25928] overlayfs: missing 'lowerdir'
[ 1888.604358][T25952] overlayfs: missing 'lowerdir'
[ 1888.971239][T25961] fuse: fd is not a fuse device
[ 1889.146239][T25972] io-wq is not configured for unbound workers
[ 1889.183001][T25974] overlayfs: missing 'lowerdir'
[ 1889.261901][T25978] syz_tun: entered allmulticast mode
[ 1889.289071][T25976] syz_tun: left allmulticast mode
[ 1890.498956][T25987] lo speed is unknown, defaulting to 1000
[ 1892.411571][T25996] overlayfs: missing 'lowerdir'
[ 1892.671036][T26009] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[26009]
[ 1893.317519][T26013] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[26013]
[ 1893.392821][T26014] netlink: 'syz.5.4984': attribute type 8 has an invalid length.
[ 1893.896458][T26022] overlayfs: failed to clone upperpath
[ 1894.027406][T26024] lo speed is unknown, defaulting to 1000
[ 1894.202911][T26031] fuse: fd is not a fuse device
[ 1895.241944][T14335] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1895.424232][T14335] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 1895.470962][T14335] usb 6-1: config 0 has no interface number 0
[ 1895.494197][T26050] ptrace attach of "./syz-executor exec"[17415] was attempted by "./syz-executor exec"[26050]
[ 1895.539287][T14335] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1895.657814][T14335] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1895.724645][T14335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1895.798730][T14335] usb 6-1: Product: syz
[ 1895.831473][T14335] usb 6-1: Manufacturer: syz
[ 1895.844242][T14335] usb 6-1: SerialNumber: syz
[ 1895.884093][T14335] usb 6-1: config 0 descriptor??
[ 1895.890223][T26053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1895.926534][T14335] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[ 1896.213697][T26058] lo speed is unknown, defaulting to 1000
[ 1897.681432][T25615] usb 6-1: USB disconnect, device number 38
[ 1897.748778][T25615] yurex 6-1:0.50: USB YUREX #0 now disconnected
[ 1897.888922][T26071] fuse: fd is not a fuse device
[ 1897.995785][T26072] netlink: 'syz.3.5001': attribute type 8 has an invalid length.
[ 1899.479467][T26091] overlayfs: failed to resolve './file1/file0': -2
[ 1899.699322][T26098] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[26098]
[ 1900.470218][T26104] lo speed is unknown, defaulting to 1000
[ 1902.426537][T26115] netlink: 'syz.3.5016': attribute type 8 has an invalid length.
[ 1903.392945][T26136] netlink: 'syz.7.5025': attribute type 4 has an invalid length.
[ 1903.415651][T26136] netlink: 'syz.7.5025': attribute type 4 has an invalid length.
[ 1903.697010][T26141] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[26141]
[ 1904.344301][T26151] input: syz0 as /devices/virtual/input/input17
[ 1904.568278][T26136] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1904.575510][T26136] bridge0: port 1(
1¾x9ÿ) entered disabled state
[ 1904.915146][T26163] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1905.798005][T26136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1906.531723][T26161] lo speed is unknown, defaulting to 1000
[ 1906.568998][   T36] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1906.591902][   T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1906.609702][   T36] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1906.634708][   T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1906.653035][   T36] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1906.822087][   T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1906.851213][   T36] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1906.875383][   T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1906.962398][T26182] netlink: 'syz.7.5033': attribute type 8 has an invalid length.
[ 1907.673712][T26191] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[26191]
[ 1907.768680][   T30] audit: type=1400 audit(2000001181.992:2070): avc:  denied  { write } for  pid=26189 comm="syz.5.5036" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1907.862319][   T30] audit: type=1400 audit(2000001182.029:2071): avc:  denied  { ioctl } for  pid=26189 comm="syz.5.5036" path="/505/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1910.445945][T26240] netlink: 'syz.6.5049': attribute type 8 has an invalid length.
[ 1911.159374][T26243] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[26243]
[ 1911.176293][T26254] fuse: fd is not a fuse device
[ 1911.366978][   T30] audit: type=1400 audit(2000001185.361:2072): avc:  denied  { listen } for  pid=26261 comm="syz.3.5058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1911.387480][   T30] audit: type=1400 audit(2000001185.361:2073): avc:  denied  { mounton } for  pid=26256 comm="syz.5.5056" path="/511/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[ 1911.679856][   T30] audit: type=1400 audit(2000001185.651:2074): avc:  denied  { ioctl } for  pid=26268 comm="syz.5.5059" path="/512/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1911.708066][T26270] sd 0:0:1:0: PR command failed: 1026
[ 1911.715720][T26270] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1911.729385][T26270] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1911.745824][T26279] fuse: fd is not a fuse device
[ 1912.040456][T26292] fuse: fd is not a fuse device
[ 1912.239623][T26297] netlink: 'syz.7.5068': attribute type 8 has an invalid length.
[ 1912.656320][T26296] lo speed is unknown, defaulting to 1000
[ 1912.690818][T15978] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[ 1912.698555][T25602] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1912.872510][T25602] usb 6-1: Using ep0 maxpacket: 32
[ 1912.885342][T15978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1912.908946][T25602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1912.933950][T15978] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1912.960023][T25602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1912.989885][T15978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1913.006069][T25602] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1913.039026][T15978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1913.049180][T25602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1913.071594][T15978] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1913.098134][T25602] usb 6-1: config 0 descriptor??
[ 1913.109520][T15978] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1913.138065][T15978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1913.161133][T15978] usb 7-1: Product: syz
[ 1913.167934][T15978] usb 7-1: Manufacturer: syz
[ 1913.180468][T15978] usb 7-1: SerialNumber: syz
[ 1913.229687][T15978] usb 7-1: config 0 descriptor??
[ 1913.300320][T26313] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[26313]
[ 1913.466463][T15978] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1913.475210][T15978] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1913.647969][T25602] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[ 1913.678881][T25602] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[ 1913.700622][T15978] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32
[ 1913.710399][T15978] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[ 1913.729664][T15978] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5
[ 1913.768938][T15978] usb 7-1: USB disconnect, device number 23
[ 1913.827504][T25602] ft260 0003:0403:6030.000C: chip code: 0000 0000
[ 1914.028572][T26322] fuse: fd is not a fuse device
[ 1914.045929][T25602] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[ 1914.261229][T25602] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup
[ 1914.271365][T25602] ft260 0003:0403:6030.000C: failed to retrieve status: -32
[ 1914.534755][T15978] usb 6-1: USB disconnect, device number 39
[ 1914.594456][T25602] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1914.753997][T25602] usb 7-1: Using ep0 maxpacket: 32
[ 1914.761043][T25602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1914.772256][T25602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1914.782084][T25602] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1914.799052][T25602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1914.811494][T25602] usb 7-1: config 0 descriptor??
[ 1914.824464][T26334] fuse: fd is not a fuse device
[ 1915.270582][T25602] ft260 0003:0403:6030.000D: unknown main item tag 0x0
[ 1915.279038][T25602] ft260 0003:0403:6030.000D: unknown main item tag 0x0
[ 1915.474257][T26349] overlayfs: failed to clone upperpath
[ 1915.480760][T25602] ft260 0003:0403:6030.000D: chip code: 0000 0000
[ 1915.519179][T26351] fuse: fd is not a fuse device
[ 1915.755028][T25602] ft260 0003:0403:6030.000D: failed to retrieve system status
[ 1915.770010][T25602] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -5
[ 1916.245449][T26362] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5093'.
[ 1916.491160][T26370] lo speed is unknown, defaulting to 1000
[ 1916.850068][T26381] tmpfs: Bad value for 'mpol'
[ 1918.564397][T15978] usb 7-1: USB disconnect, device number 24
[ 1919.483272][   T30] audit: type=1400 audit(2000001192.950:2075): avc:  denied  { map } for  pid=26432 comm="syz.6.5114" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1919.960415][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1920.357469][   T30] audit: type=1400 audit(2000001193.774:2076): avc:  denied  { bind } for  pid=26439 comm="syz.5.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1920.436156][   T30] audit: type=1400 audit(2000001193.774:2077): avc:  denied  { listen } for  pid=26439 comm="syz.5.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1921.114215][   T30] audit: type=1400 audit(2000001193.792:2078): avc:  denied  { accept } for  pid=26439 comm="syz.5.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1921.467211][T26454] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[26454]
[ 1921.960405][T26461] lo speed is unknown, defaulting to 1000
[ 1924.611487][T26480] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1926.449448][T26497] netlink: 'syz.3.5130': attribute type 8 has an invalid length.
[ 1926.871544][T14335] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[ 1927.362289][T26504] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[26504]
[ 1927.467776][T14335] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1927.485967][T14335] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1927.494156][T14335] usb 6-1: can't read configurations, error -71
[ 1927.731457][T26511] netlink: 'syz.3.5135': attribute type 8 has an invalid length.
[ 1928.425279][T26525] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[26525]
[ 1929.747254][T26539] netlink: 'syz.7.5144': attribute type 8 has an invalid length.
[ 1930.449632][T26549] overlayfs: failed to clone upperpath
[ 1930.456781][T14335] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 1930.464554][  T798] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1930.714027][  T798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1930.839173][T14335] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1930.884127][  T798] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1930.897409][T14335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1930.915949][  T798] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1930.929876][T14335] usb 6-1: Product: syz
[ 1930.947789][T14335] usb 6-1: Manufacturer: syz
[ 1930.962685][T14335] usb 6-1: SerialNumber: syz
[ 1930.970927][  T798] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1930.991862][T14335] usb 6-1: config 0 descriptor??
[ 1931.095042][  T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1931.115294][  T798] usb 7-1: config 0 descriptor??
[ 1931.218423][T26561] ptrace attach of "./syz-executor exec"[18579] was attempted by "./syz-executor exec"[26561]
[ 1931.692416][T14335] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1931.941830][  T798] plantronics 0003:047F:FFFF.000E: item fetching failed at offset 11/15
[ 1931.963121][  T798] plantronics 0003:047F:FFFF.000E: parse failed
[ 1931.987671][  T798] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22
[ 1932.056631][T26575] fuse: fd is not a fuse device
[ 1932.238272][T23013] usb 7-1: USB disconnect, device number 25
[ 1932.960564][T19300] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1932.981514][T26590] Bluetooth: hci0: Frame reassembly failed (-90)
[ 1933.069788][T26595] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5161'.
[ 1933.381050][T26600] fuse: fd is not a fuse device
[ 1933.894908][T14335] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1933.915963][T14335] usb 6-1: USB disconnect, device number 42
[ 1934.024273][T26610] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[26610]
[ 1935.088804][T12297] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1935.146107][T26623] overlayfs: failed to clone upperpath
[ 1935.174955][T14335] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1935.368054][T14335] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1935.485314][T14335] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1935.502400][T14335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1935.524641][T14335] usb 6-1: config 0 descriptor??
[ 1935.654667][T14335] pwc: Askey VC010 type 2 USB webcam detected.
[ 1936.323502][T14335] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1936.347584][T26643] overlayfs: failed to clone upperpath
[ 1936.361857][T14335] pwc: recv_control_msg error -32 req 02 val 2700
[ 1936.385008][T14335] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1936.474296][T14335] pwc: recv_control_msg error -32 req 04 val 1000
[ 1936.497062][T14335] pwc: recv_control_msg error -32 req 04 val 1300
[ 1936.509105][T26645] overlayfs: failed to clone upperpath
[ 1936.523739][T14335] pwc: recv_control_msg error -32 req 04 val 1400
[ 1936.770465][T14335] pwc: recv_control_msg error -71 req 02 val 2100
[ 1937.208826][T14335] pwc: recv_control_msg error -71 req 04 val 1500
[ 1937.234220][T14335] pwc: recv_control_msg error -71 req 02 val 2500
[ 1937.252469][T14335] pwc: recv_control_msg error -71 req 02 val 2400
[ 1937.263565][T14335] pwc: recv_control_msg error -71 req 02 val 2600
[ 1937.271085][T14335] pwc: recv_control_msg error -71 req 02 val 2900
[ 1937.278123][T14335] pwc: recv_control_msg error -71 req 02 val 2800
[ 1937.285325][T14335] pwc: recv_control_msg error -71 req 04 val 1100
[ 1937.300081][T14335] pwc: recv_control_msg error -71 req 04 val 1200
[ 1937.386884][T14335] pwc: Registered as video103.
[ 1937.405365][T14335] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18
[ 1937.443581][T26664] fuse: fd is not a fuse device
[ 1937.567956][T12297] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1937.612825][T14335] usb 6-1: USB disconnect, device number 43
[ 1938.235308][   T30] audit: type=1800 audit(2000001210.496:2079): pid=26676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5184" name="nullb0" dev="tmpfs" ino=2791 res=0 errno=0
[ 1939.079702][T26693] fuse: fd is not a fuse device
[ 1939.240998][T26689] netlink: 'syz.3.5191': attribute type 13 has an invalid length.
[ 1939.793429][T26689] 8021q: adding VLAN 0 to HW filter on device .`
[ 1939.824671][T26689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1940.222174][T26710] tmpfs: Bad value for 'mpol'
[ 1941.346472][T26726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5201'.
[ 1941.452131][T26731] lo speed is unknown, defaulting to 1000
[ 1942.651513][T26754] fuse: fd is not a fuse device
[ 1942.680188][T26751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1942.774756][T26756] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1942.819330][T26756] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1943.151283][T26765] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1943.370775][ T5831] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1943.595038][ T5831] usb 7-1: Using ep0 maxpacket: 16
[ 1943.608417][ T5831] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[ 1943.625445][ T5831] usb 7-1: config 0 has no interface number 0
[ 1943.638270][ T5831] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1943.663522][ T5831] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1943.687223][ T5831] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1943.701868][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1943.722279][ T5831] usb 7-1: Product: syz
[ 1943.740286][ T5831] usb 7-1: Manufacturer: syz
[ 1943.750686][ T5831] usb 7-1: SerialNumber: syz
[ 1943.770566][ T5831] usb 7-1: config 0 descriptor??
[ 1943.793462][T26764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1943.801051][T26764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1944.036293][T26764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1944.054632][T26764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1944.287523][ T5831] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1945.552927][T26801] overlayfs: failed to clone upperpath
[ 1945.752188][T12297] Bluetooth: hci1: unexpected event for opcode 0x0407
[ 1946.272509][T26821] netlink: 'syz.3.5228': attribute type 8 has an invalid length.
[ 1946.618148][ T5831] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[ 1946.651229][ T5831] asix 7-1:0.34: probe with driver asix failed with error -71
[ 1946.671445][ T5831] usb 7-1: USB disconnect, device number 26
[ 1946.753535][T26829] overlayfs: failed to clone upperpath
[ 1947.090855][T26841] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1947.108485][T26841] syzkaller0: entered promiscuous mode
[ 1947.114474][T26841] syzkaller0: entered allmulticast mode
[ 1948.102995][T26864] tmpfs: Bad value for 'mpol'
[ 1949.660887][T26895] overlayfs: failed to clone upperpath
[ 1949.715407][T26892] netlink: 'syz.3.5252': attribute type 5 has an invalid length.
[ 1950.190577][T26907] lo speed is unknown, defaulting to 1000
[ 1952.221312][T26921] netlink: 'syz.5.5259': attribute type 8 has an invalid length.
[ 1953.063283][T26936] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5265'.
[ 1953.097506][T26936] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5265'.
[ 1953.111262][T26936] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5265'.
[ 1953.367723][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5270'.
[ 1953.436676][T14335] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1953.610027][T14335] usb 7-1: Using ep0 maxpacket: 16
[ 1953.628385][T14335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1953.651915][T14335] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1953.681769][T14335] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1953.719043][T14335] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1953.831876][T14335] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1953.850128][T14335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1953.862316][T14335] usb 7-1: config 0 descriptor??
[ 1953.964678][T26975] netlink: 'syz.3.5274': attribute type 8 has an invalid length.
[ 1953.982906][ T5831] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1954.191317][ T5831] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1954.272920][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1954.373014][ T5831] usb 6-1: config 0 descriptor??
[ 1954.468420][T14335] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0
[ 1954.482193][T14335] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0
[ 1954.504901][T14335] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0
[ 1954.523232][T14335] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0
[ 1954.534011][T14335] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0
[ 1954.551420][T14335] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0
[ 1954.569591][T14335] pantherlord 0003:0810:0001.000F: unknown global tag 0xc
[ 1954.584577][T14335] pantherlord 0003:0810:0001.000F: item 0 2 1 12 parsing failed
[ 1954.601928][T14335] pantherlord 0003:0810:0001.000F: parse failed
[ 1954.608806][T14335] pantherlord 0003:0810:0001.000F: probe with driver pantherlord failed with error -22
[ 1954.707012][T14335] usb 7-1: USB disconnect, device number 27
[ 1955.173849][T26989] lo speed is unknown, defaulting to 1000
[ 1956.771278][T26998] netlink: 'syz.7.5280': attribute type 10 has an invalid length.
[ 1956.794921][T26998] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1956.965422][T27000] lo speed is unknown, defaulting to 1000
[ 1957.540334][T27011] fuse: fd is not a fuse device
[ 1957.560853][ T5831] usb 6-1: Cannot set autoneg
[ 1957.582523][ T5831] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1957.628384][ T5831] usb 6-1: USB disconnect, device number 44
[ 1958.030724][T27025] netlink: 'syz.3.5287': attribute type 8 has an invalid length.
[ 1959.132894][ T5831] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1959.196793][   T13] wlan1: Trigger new scan to find an IBSS to join
[ 1959.886084][T27048] lo speed is unknown, defaulting to 1000
[ 1960.106466][ T5831] usb 6-1: Using ep0 maxpacket: 8
[ 1960.345505][ T5831] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1960.407543][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1960.872888][ T5831] usb 6-1: Product: syz
[ 1960.883484][ T5831] usb 6-1: Manufacturer: syz
[ 1960.927192][ T5831] usb 6-1: SerialNumber: syz
[ 1960.951099][ T5831] usb 6-1: config 0 descriptor??
[ 1960.981291][   T30] audit: type=1400 audit(2000001231.786:2080): avc:  denied  { setattr } for  pid=27060 comm="syz.3.5298" name="ALG" dev="sockfs" ino=84273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1961.010693][ T5831] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1961.712991][T27093] overlayfs: failed to clone upperpath
[ 1961.958224][ T5831] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[ 1961.970589][ T5831] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[ 1961.994028][ T5831] usb 6-1: USB disconnect, device number 45
[ 1962.127784][T17604] lo speed is unknown, defaulting to 1000
[ 1962.129225][T27090] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1962.142488][T17604] syz0: Port: 1 Link DOWN
[ 1962.211949][ T3506] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1962.241449][ T3506] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1962.258347][ T3506] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1962.267716][ T3506] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1962.502928][T27108] overlayfs: failed to clone upperpath
[ 1963.014675][T27122] netlink: 'syz.3.5314': attribute type 8 has an invalid length.
[ 1963.468613][   T30] audit: type=1400 audit(2000001234.116:2081): avc:  denied  { create } for  pid=27123 comm="syz.7.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1963.471428][T27085] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[ 1963.735875][T27085] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1963.756558][T27085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1963.782731][T27085] usb 6-1: Product: syz
[ 1963.795076][T27085] usb 6-1: Manufacturer: syz
[ 1963.801326][T27085] usb 6-1: SerialNumber: syz
[ 1963.812049][T27085] usb 6-1: config 0 descriptor??
[ 1964.044597][T27085] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1965.455551][T27163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1965.608591][ T1245] wlan1: Trigger new scan to find an IBSS to join
[ 1965.725850][T27085] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1965.743727][T27173] overlayfs: failed to clone upperpath
[ 1965.762824][   T30] audit: type=1400 audit(2000001236.249:2082): avc:  denied  { read } for  pid=27179 comm="syz.6.5331" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1965.790986][   T30] audit: type=1400 audit(2000001236.249:2083): avc:  denied  { open } for  pid=27179 comm="syz.6.5331" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1965.819147][   T30] audit: type=1400 audit(2000001236.249:2084): avc:  denied  { ioctl } for  pid=27179 comm="syz.6.5331" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1965.903088][T27085] usb 6-1: USB disconnect, device number 46
[ 1965.970745][T27183] blkio.reset_stats is deprecated
[ 1966.015525][T27185] netlink: 'syz.4.5333': attribute type 2 has an invalid length.
[ 1966.023411][T27185] netlink: 'syz.4.5333': attribute type 2 has an invalid length.
[ 1966.809695][ T3506] wlan1: Creating new IBSS network, BSSID 62:77:44:0a:72:bb
[ 1967.021245][T27205] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1967.193814][T27205] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1967.242330][T27204] input: syz0 as /devices/virtual/input/input19
[ 1972.989772][T27307] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1973.008857][   T30] audit: type=1400 audit(2000001243.043:2085): avc:  denied  { write } for  pid=27306 comm="syz.4.5372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1973.081295][T27311] vlan0: entered promiscuous mode
[ 1973.099103][T27311] bond1: entered promiscuous mode
[ 1973.116690][T27311] vlan0: entered allmulticast mode
[ 1973.135509][T27311] bond1: entered allmulticast mode
[ 1973.181429][T27312] gretap1: entered promiscuous mode
[ 1973.207857][T27312] gretap1: entered allmulticast mode
[ 1973.233497][T27312] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1973.626943][T27326] netlink: 'syz.4.5379': attribute type 1 has an invalid length.
[ 1973.870482][T27069] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1974.074262][T27069] usb 6-1: Using ep0 maxpacket: 8
[ 1974.084018][T27069] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1974.098372][T27069] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1974.109381][T27069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1974.118702][T27069] usb 6-1: Product: syz
[ 1974.122962][T27069] usb 6-1: Manufacturer: syz
[ 1974.128019][T27069] usb 6-1: SerialNumber: syz
[ 1974.138118][T27069] usb 6-1: config 0 descriptor??
[ 1974.155683][T27069] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[ 1974.384008][T27069] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1974.414814][T27069] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1975.013684][ T5831] usb 6-1: USB disconnect, device number 48
[ 1975.643183][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5398'.
[ 1977.060744][   T30] audit: type=1800 audit(2000001246.833:2086): pid=27412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5402" name="bus" dev="tmpfs" ino=6580 res=0 errno=0
[ 1977.452787][T27423] overlayfs: failed to clone upperpath
[ 1977.501720][T27069] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1977.696229][T27069] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1977.736211][T27069] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1977.801506][T27069] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1977.823146][T27069] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1977.853227][T27069] usb 7-1: Manufacturer: syz
[ 1977.876434][T27069] usb 7-1: config 0 descriptor??
[ 1977.908270][T27069] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1980.323005][ T5831] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1980.506692][ T5831] usb 6-1: Using ep0 maxpacket: 32
[ 1980.523414][ T5831] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1980.542584][ T5831] usb 6-1: config 0 has no interface number 0
[ 1980.552493][ T5831] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1980.584692][ T5831] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1980.595432][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1980.604546][ T5831] usb 6-1: Product: syz
[ 1980.608920][ T5831] usb 6-1: Manufacturer: syz
[ 1980.613941][ T5831] usb 6-1: SerialNumber: syz
[ 1980.644545][ T5831] usb 6-1: config 0 descriptor??
[ 1980.650628][T27463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1980.731069][T27487] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[27487]
[ 1980.880518][T27463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1981.103490][   T30] audit: type=1400 audit(2000001250.623:2087): avc:  denied  { map } for  pid=27461 comm="syz.5.5415" path="/dev/sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1981.154385][ T5831] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1981.170987][ T5831] asix 6-1:0.188: probe with driver asix failed with error -32
[ 1981.171410][   T30] audit: type=1400 audit(2000001250.623:2088): avc:  denied  { execute } for  pid=27461 comm="syz.5.5415" path="/dev/sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1981.708545][ T5831] usb 7-1: USB disconnect, device number 28
[ 1981.719656][T27506] fuse: fd is not a fuse device
[ 1981.785174][T27510] syzkaller0: entered promiscuous mode
[ 1981.792602][T27510] syzkaller0: entered allmulticast mode
[ 1981.915298][T27515] overlayfs: failed to clone upperpath
[ 1982.271850][T27522] lo speed is unknown, defaulting to 1000
[ 1983.895653][ T5831] usb 6-1: USB disconnect, device number 49
[ 1984.011573][T27069] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1984.043188][T27531] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5434'.
[ 1984.223778][T27069] usb 7-1: Using ep0 maxpacket: 16
[ 1984.255745][T27069] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1984.310105][T27069] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[ 1984.350411][T27069] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1984.443623][T27069] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[ 1984.446468][T27539] syzkaller0: entered promiscuous mode
[ 1984.461940][T27539] syzkaller0: entered allmulticast mode
[ 1984.492666][T27069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1984.635247][T27069] usb 7-1: config 0 descriptor??
[ 1984.661554][T27545] fuse: fd is not a fuse device
[ 1984.688271][T27544] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[27544]
[ 1984.884018][T27069] usbhid 7-1:0.0: can't add hid device: -71
[ 1984.897413][T27069] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1984.956063][T27069] usb 7-1: USB disconnect, device number 29
[ 1985.591313][T27564] lo speed is unknown, defaulting to 1000
[ 1986.313278][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1987.163573][T27570] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[27570]
[ 1987.844296][T27581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5445'.
[ 1989.208624][T27597] syz_tun: entered allmulticast mode
[ 1989.296492][T27597] dvmrp8: entered allmulticast mode
[ 1989.358621][T27596] syz_tun: left allmulticast mode
[ 1990.411332][T27622] ptrace attach of "./syz-executor exec"[14196] was attempted by "./syz-executor exec"[27622]
[ 1991.383414][T27623] lo speed is unknown, defaulting to 1000
[ 1992.673337][T27631] fuse: fd is not a fuse device
[ 1993.085971][T27634] netlink: 'syz.6.5459': attribute type 8 has an invalid length.
[ 1993.841408][T27645] netlink: 'syz.3.5461': attribute type 8 has an invalid length.
[ 1994.388689][T27652] tmpfs: Bad value for 'mpol'
[ 1995.339561][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5466'.
[ 1995.399439][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5466'.
[ 1995.908761][   T30] audit: type=1400 audit(2000001264.454:2089): avc:  denied  { ioctl } for  pid=27662 comm="syz.6.5469" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1996.758695][T27687] netlink: 'syz.3.5476': attribute type 8 has an invalid length.
[ 1997.222365][T27692] netlink: 'syz.7.5478': attribute type 1 has an invalid length.
[ 1998.424981][T27692] bond1: (slave bridge3): making interface the new active one
[ 1998.458571][T27692] bond1: (slave bridge3): Enslaving as an active interface with an up link
[ 1999.106244][T27694] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1999.285779][T27710] lo speed is unknown, defaulting to 1000
[ 2001.815987][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2001.933204][T27726] lo speed is unknown, defaulting to 1000
[ 2004.157754][T27739] overlayfs: failed to clone upperpath
[ 2004.251374][T27747] netlink: 'syz.3.5489': attribute type 8 has an invalid length.
[ 2005.138528][T27757] fuse: fd is not a fuse device
[ 2008.255340][T27789] syzkaller0: entered promiscuous mode
[ 2008.288983][T27789] syzkaller0: entered allmulticast mode
[ 2008.610303][T27085] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec
[ 2010.714424][T27845] fuse: fd is not a fuse device
[ 2011.589107][   T30] audit: type=1400 audit(2000001279.147:2090): avc:  denied  { ioctl } for  pid=27859 comm="syz.7.5521" path="socket:[87200]" dev="sockfs" ino=87200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 2012.050550][T27869] netlink: 'syz.3.5522': attribute type 8 has an invalid length.
[ 2013.631979][T27887] netlink: 'syz.4.5528': attribute type 1 has an invalid length.
[ 2014.289297][T27887] bond3: entered promiscuous mode
[ 2014.301555][T27887] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2014.411110][T27887] bond3: (slave bridge89): making interface the new active one
[ 2014.428563][T27887] bridge89: entered promiscuous mode
[ 2014.511082][T27887] bond3: (slave bridge89): Enslaving as an active interface with an up link
[ 2014.987130][T27898] lo speed is unknown, defaulting to 1000
[ 2017.367288][T27921] lo speed is unknown, defaulting to 1000
[ 2018.155054][T27929] lo speed is unknown, defaulting to 1000
[ 2019.293333][T27921] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 2020.583482][T27069] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 2020.939246][T27069] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2020.982762][T27069] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2021.017216][T27069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2021.077256][T27069] usb 7-1: config 0 descriptor??
[ 2021.110700][T27069] pwc: Askey VC010 type 2 USB webcam detected.
[ 2021.503638][T27971] lo speed is unknown, defaulting to 1000
[ 2022.354185][T27069] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2022.366636][T27069] pwc: recv_control_msg error -32 req 02 val 2700
[ 2022.374062][T27069] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2022.381195][T27069] pwc: recv_control_msg error -32 req 04 val 1000
[ 2022.999078][T27069] pwc: recv_control_msg error -32 req 04 val 1300
[ 2023.010110][T27069] pwc: recv_control_msg error -32 req 04 val 1400
[ 2023.059835][T27069] pwc: recv_control_msg error -71 req 02 val 2000
[ 2023.085751][    C1] blk_print_req_error: 157 callbacks suppressed
[ 2023.085771][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2023.104520][T27069] pwc: recv_control_msg error -71 req 02 val 2100
[ 2023.105381][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.120127][    C1] buffer_io_error: 155 callbacks suppressed
[ 2023.120137][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2023.133860][    C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.142967][    C1] Buffer I/O error on dev loop9, logical block 1, async page read
[ 2023.150779][    C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.159896][    C1] Buffer I/O error on dev loop9, logical block 2, async page read
[ 2023.167717][    C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.176820][    C1] Buffer I/O error on dev loop9, logical block 3, async page read
[ 2023.184660][    C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.193767][    C1] Buffer I/O error on dev loop9, logical block 4, async page read
[ 2023.201600][    C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.210721][    C1] Buffer I/O error on dev loop9, logical block 5, async page read
[ 2023.218555][    C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.227665][    C1] Buffer I/O error on dev loop9, logical block 6, async page read
[ 2023.244779][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.253974][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2023.261852][    C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2023.270960][    C1] Buffer I/O error on dev loop9, logical block 1, async page read
[ 2023.278792][    C1] Buffer I/O error on dev loop9, logical block 2, async page read
[ 2023.309979][T27069] pwc: recv_control_msg error -71 req 04 val 1500
[ 2023.349066][T27069] pwc: recv_control_msg error -71 req 02 val 2500
[ 2023.389552][T27069] pwc: recv_control_msg error -71 req 02 val 2400
[ 2023.429967][T27069] pwc: recv_control_msg error -71 req 02 val 2600
[ 2023.437650][T27069] pwc: recv_control_msg error -71 req 02 val 2900
[ 2023.462689][T27069] pwc: recv_control_msg error -71 req 02 val 2800
[ 2023.471107][T27069] pwc: recv_control_msg error -71 req 04 val 1100
[ 2023.478808][T27069] pwc: recv_control_msg error -71 req 04 val 1200
[ 2023.527311][T27069] pwc: Registered as video103.
[ 2023.596124][T27069] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20
[ 2023.642542][T27069] usb 7-1: USB disconnect, device number 30
[ 2023.929741][T27997] syzkaller0: entered promiscuous mode
[ 2023.943487][T27997] syzkaller0: entered allmulticast mode
[ 2024.053951][T27999] overlayfs: failed to clone upperpath
[ 2024.104964][T28001] netlink: 'syz.6.5557': attribute type 1 has an invalid length.
[ 2024.166720][T28001] bond1: (slave bridge13): making interface the new active one
[ 2024.177752][T28001] bond1: (slave bridge13): Enslaving as an active interface with an up link
[ 2024.218797][T28001] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 2024.965339][T28028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5563'.
[ 2025.298235][T21023] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2025.317705][T21023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2025.325872][T21023] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2025.337139][T21023] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2025.345482][T21023] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2025.482760][T28033] lo speed is unknown, defaulting to 1000
[ 2027.143970][T28060] netlink: 'syz.3.5570': attribute type 1 has an invalid length.
[ 2027.305138][T28062] bond3: (slave bridge88): making interface the new active one
[ 2027.315207][T28062] bond3: (slave bridge88): Enslaving as an active interface with an up link
[ 2027.339021][T28060] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 2027.593955][T21023] Bluetooth: hci0: command tx timeout
[ 2027.955027][T28074] tipc: Started in network mode
[ 2027.964577][T28074] tipc: Node identity 226ec51d09da, cluster identity 4711
[ 2027.981132][T28074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2028.006029][T28072] syzkaller0: entered promiscuous mode
[ 2028.014844][T28072] syzkaller0: entered allmulticast mode
[ 2028.096796][T28072] tipc: Resetting bearer <eth:syzkaller0>
[ 2028.147245][T28067] tipc: Resetting bearer <eth:syzkaller0>
[ 2028.277575][T28067] tipc: Disabling bearer <eth:syzkaller0>
[ 2028.411105][T28033] chnl_net:caif_netlink_parms(): no params data found
[ 2028.526681][T28033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2028.533840][T28033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2028.541307][T28033] bridge_slave_0: entered allmulticast mode
[ 2028.548103][T28033] bridge_slave_0: entered promiscuous mode
[ 2028.555792][T28033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2028.563791][T28033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2028.571098][T28033] bridge_slave_1: entered allmulticast mode
[ 2028.577937][T28033] bridge_slave_1: entered promiscuous mode
[ 2028.600440][T28033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2028.611544][T28033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2028.635139][T28033] team0: Port device team_slave_0 added
[ 2028.642275][T28033] team0: Port device team_slave_1 added
[ 2028.673496][T28033] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2028.680669][T28033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2028.707043][T28033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2028.719683][T28033] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2028.726951][T28033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2028.753201][T28033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2028.785171][T28033] hsr_slave_0: entered promiscuous mode
[ 2028.791358][T28033] hsr_slave_1: entered promiscuous mode
[ 2028.797510][T28033] debugfs: 'hsr0' already exists in 'hsr'
[ 2028.803222][T28033] Cannot create hsr debugfs directory
[ 2028.926693][T28033] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2028.936063][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2028.943644][T28033] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2028.952407][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2028.959926][T28033] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2028.969249][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2028.976927][T28033] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2028.986004][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2029.007578][T28033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2029.014686][T28033] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2029.022104][T28033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2029.031218][T28033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2029.079096][T28033] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2029.092079][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2029.100140][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2029.112279][T28033] 8021q: adding VLAN 0 to HW filter on device team0
[ 2029.124163][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2029.131288][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2029.143473][T19302] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2029.150552][T19302] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2029.285311][T28033] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2029.433760][T28033] veth0_vlan: entered promiscuous mode
[ 2029.443779][T28033] veth1_vlan: entered promiscuous mode
[ 2029.466266][T28033] veth0_macvtap: entered promiscuous mode
[ 2029.476436][T28033] veth1_macvtap: entered promiscuous mode
[ 2029.493078][T28033] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2029.504551][T28033] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2029.518348][ T3540] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2029.527228][ T3540] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2029.537319][ T3540] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2029.548029][ T3540] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2029.672787][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2029.687020][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2029.710381][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2029.719368][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2029.810020][T21023] Bluetooth: hci0: command tx timeout
[ 2032.032529][T21023] Bluetooth: hci0: command tx timeout
[ 2034.255274][T21023] Bluetooth: hci0: command tx timeout
[ 2037.590034][T19302] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2051.270591][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2071.784830][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2105.990742][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2116.924363][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2140.176935][T19302] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2157.443851][T21023] Bluetooth: hci0: command 0x0406 tx timeout
[ 2174.371324][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2178.474142][   T31] INFO: task syz.5.5506:27812 blocked for more than 143 seconds.
[ 2178.481874][   T31]       Tainted: G             L      syzkaller #0
[ 2178.488783][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2178.497516][   T31] task:syz.5.5506      state:D stack:27128 pid:27812 tgid:27812 ppid:14196  task_flags:0x400040 flags:0x00080003
[ 2178.509514][   T31] Call Trace:
[ 2178.512806][   T31]  <TASK>
[ 2178.515721][   T31]  __schedule+0x10e9/0x6820
[ 2178.520370][   T31]  ? __pfx___schedule+0x10/0x10
[ 2178.525243][   T31]  ? find_held_lock+0x2b/0x80
[ 2178.530056][   T31]  ? schedule+0x2bf/0x390
[ 2178.534419][   T31]  schedule+0xdd/0x390
[ 2178.538538][   T31]  request_wait_answer+0x55e/0x860
[ 2178.543664][   T31]  ? __pfx_request_wait_answer+0x10/0x10
[ 2178.549426][   T31]  ? fuse_dev_queue_req+0x22e/0x320
[ 2178.554649][   T31]  ? fuse_dev_queue_req+0x22e/0x320
[ 2178.559889][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2178.565953][   T31]  ? do_raw_spin_unlock+0x145/0x1e0
[ 2178.571246][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 2178.576178][   T31]  ? fuse_dev_queue_req+0x233/0x320
[ 2178.581418][   T31]  __fuse_simple_request+0x45b/0xf00
[ 2178.586716][   T31]  fuse_flush+0x4e4/0x6b0
[ 2178.591039][   T31]  ? __pfx_fuse_flush+0x10/0x10
[ 2178.596018][   T31]  ? find_held_lock+0x2b/0x80
[ 2178.601052][   T31]  ? __pfx_fuse_flush+0x10/0x10
[ 2178.605990][   T31]  filp_flush+0xe7/0x190
[ 2178.610241][   T31]  filp_close+0x1c/0x30
[ 2178.614527][   T31]  __range_close+0x137/0x7a0
[ 2178.619141][   T31]  __x64_sys_close_range+0x3ce/0x5d0
[ 2178.624479][   T31]  ? __pfx___x64_sys_close_range+0x10/0x10
[ 2178.630287][   T31]  ? trace_irq_enable.constprop.0+0x31/0x160
[ 2178.636372][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2178.641161][   T31]  do_syscall_64+0x10b/0xf80
[ 2178.645801][   T31]  ? clear_bhb_loop+0x40/0x90
[ 2178.650481][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.656457][   T31] RIP: 0033:0x7fc33499c819
[ 2178.660891][   T31] RSP: 002b:00007ffeae8761f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 2178.669341][   T31] RAX: ffffffffffffffda RBX: 00007ffeae8762e0 RCX: 00007fc33499c819
[ 2178.677383][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 2178.685456][   T31] RBP: 00000000001d8a45 R08: 0000000000000001 R09: 0000000000000000
[ 2178.693456][   T31] R10: 0000001b32b20000 R11: 0000000000000246 R12: 00007ffeae876320
[ 2178.701527][   T31] R13: 00007fc334c15fac R14: 00000000001d8acb R15: 00007fc334c15fa0
[ 2178.709862][   T31]  </TASK>
[ 2178.712924][   T31] 
[ 2178.712924][   T31] Showing all locks held in the system:
[ 2178.720717][   T31] 1 lock held by khungtaskd/31:
[ 2178.725574][   T31]  #0: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 2178.735506][   T31] 1 lock held by klogd/5176:
[ 2178.740091][   T31]  #0: ffff8880b843b260 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 2178.750186][   T31] 2 locks held by getty/5569:
[ 2178.754889][   T31]  #0: ffff88803a0600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2178.764722][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[ 2178.774900][   T31] 
[ 2178.777213][   T31] =============================================
[ 2178.777213][   T31] 
[ 2178.785680][   T31] NMI backtrace for cpu 0
[ 2178.785707][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2178.785733][   T31] Tainted: [L]=SOFTLOCKUP
[ 2178.785741][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2178.785751][   T31] Call Trace:
[ 2178.785758][   T31]  <TASK>
[ 2178.785766][   T31]  dump_stack_lvl+0x100/0x190
[ 2178.785791][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 2178.785818][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2178.785843][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 2178.785870][   T31]  sys_info+0x141/0x190
[ 2178.785899][   T31]  watchdog+0xcb1/0x1030
[ 2178.785929][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2178.785956][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2178.785979][   T31]  ? __kthread_parkme+0x18c/0x230
[ 2178.786015][   T31]  ? kthread+0x13a/0x450
[ 2178.786036][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2178.786058][   T31]  kthread+0x370/0x450
[ 2178.786081][   T31]  ? __pfx_kthread+0x10/0x10
[ 2178.786108][   T31]  ret_from_fork+0x72b/0xd50
[ 2178.786136][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2178.786162][   T31]  ? __switch_to+0x800/0x1100
[ 2178.786192][   T31]  ? __pfx_kthread+0x10/0x10
[ 2178.786216][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2178.786257][   T31]  </TASK>
[ 2178.786265][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2178.918365][    C1] NMI backtrace for cpu 1
[ 2178.918383][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2178.918409][    C1] Tainted: [L]=SOFTLOCKUP
[ 2178.918416][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2178.918428][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2178.918458][    C1] Code: d6 88 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 b0 13 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 2178.918476][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242
[ 2178.918492][    C1] RAX: 0000000008715167 RBX: ffff88801eaba500 RCX: ffffffff8b97e045
[ 2178.918505][    C1] RDX: 0000000000000000 RSI: ffffffff8df53c55 RDI: ffffffff8c1c0e00
[ 2178.918517][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67ad
[ 2178.918529][    C1] R10: ffff8880b8533d6b R11: 0000000000000000 R12: 0000000000000001
[ 2178.918540][    C1] R13: ffffed1003d574a0 R14: 0000000000000001 R15: ffffffff90dbba50
[ 2178.918553][    C1] FS:  0000000000000000(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000
[ 2178.918570][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2178.918583][    C1] CR2: 000056029d12a660 CR3: 000000002a76c000 CR4: 00000000003526f0
[ 2178.918599][    C1] Call Trace:
[ 2178.918605][    C1]  <TASK>
[ 2178.918611][    C1]  default_idle+0x9/0x10
[ 2178.918638][    C1]  default_idle_call+0x6c/0xb0
[ 2178.918665][    C1]  do_idle+0x464/0x590
[ 2178.918694][    C1]  ? __pfx_do_idle+0x10/0x10
[ 2178.918725][    C1]  cpu_startup_entry+0x4f/0x60
[ 2178.918753][    C1]  start_secondary+0x21d/0x2d0
[ 2178.918773][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 2178.918796][    C1]  common_startup_64+0x13e/0x148
[ 2178.918828][    C1]  </TASK>
[ 2179.090538][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2179.097377][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2179.108025][   T31] Tainted: [L]=SOFTLOCKUP
[ 2179.112318][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 2179.122349][   T31] Call Trace:
[ 2179.125604][   T31]  <TASK>
[ 2179.128512][   T31]  dump_stack_lvl+0x100/0x190
[ 2179.133167][   T31]  vpanic+0x552/0x970
[ 2179.137131][   T31]  ? __pfx_vpanic+0x10/0x10
[ 2179.141621][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 2179.147763][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 2179.153922][   T31]  panic+0xd1/0xe0
[ 2179.157632][   T31]  ? __pfx_panic+0x10/0x10
[ 2179.162037][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 2179.168178][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 2179.174330][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 2179.180475][   T31]  ? watchdog.cold+0x1ec/0x234
[ 2179.185233][   T31]  ? watchdog+0xcc1/0x1030
[ 2179.189634][   T31]  watchdog.cold+0x1fd/0x234
[ 2179.194231][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2179.200035][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2179.204704][   T31]  ? __kthread_parkme+0x18c/0x230
[ 2179.209728][   T31]  ? kthread+0x13a/0x450
[ 2179.213954][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2179.218621][   T31]  kthread+0x370/0x450
[ 2179.222677][   T31]  ? __pfx_kthread+0x10/0x10
[ 2179.227255][   T31]  ret_from_fork+0x72b/0xd50
[ 2179.231839][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2179.236943][   T31]  ? __switch_to+0x800/0x1100
[ 2179.241620][   T31]  ? __pfx_kthread+0x10/0x10
[ 2179.246200][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2179.250974][   T31]  </TASK>
[ 2179.254300][   T31] Kernel Offset: disabled
[ 2179.258613][   T31] Rebooting in 86400 seconds..