last executing test programs:

57.642424891s ago: executing program 3 (id=283):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r6, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf, 0x80}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x10000}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3ff}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x67}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x5}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x18}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xe000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0xff, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x10, 0xf, 0x5, 0xff, 0xc6, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x10, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x8000000, 0x8000000, 0x0, 0xd, 0x59, 0x0, 0x1, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x14}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x0, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0x58000, 0x100, 0xd, 0x0, 0xdddd1000, [0x5, 0x3, 0x4, 0x7]})
fstat(r0, &(0x7f0000000200)) (async)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getresuid(&(0x7f00000003c0), &(0x7f0000000580), &(0x7f00000005c0)) (async)
getresuid(&(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000580), &(0x7f00000005c0))
getresuid(&(0x7f0000000600), &(0x7f0000000640)=<r10=>0x0, &(0x7f0000000680))
setresuid(r8, r9, r10) (async)
setresuid(r8, r9, r10)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000540)={0x0, 0x8, 0xc6, &(0x7f0000000440)=""/198}) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000540)={0x0, 0x8, 0xc6, &(0x7f0000000440)=""/198})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x63, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={<r12=>0x0, @in6={{0xa, 0x4e23, 0x0, @private2, 0x9}}}, &(0x7f0000000780)=0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f00000007c0)={r12, 0x0, 0x4, [0x2, 0x40, 0x1d88, 0x3]}, 0x10) (async)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f00000007c0)={r12, 0x0, 0x4, [0x2, 0x40, 0x1d88, 0x3]}, 0x10)

54.788999173s ago: executing program 3 (id=290):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x100000001)
io_uring_setup(0x11bb, &(0x7f0000001340)={0x0, 0xe804, 0x80, 0x2, 0x1c6})
syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), r1)
readv(r1, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x35, 0x0, 0xec5a, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000001, 0x100, 0x0, 0x6, 0x100000ff, 0xffffdffa, 0xd}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

54.560412049s ago: executing program 3 (id=292):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000}, 0x48)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fe2b0000000000000000540000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008890}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff51, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d010900500012804900e1809e1b73d1fa90f57f0c5dfbe64c0cbb59b43d4d13905a9670479f21c67dfaa60b4ca81226fc2fed04a990d9c3f733a59daf7f832f6db521e0f6ba90beb3973c2e335ecb2b37b1f82b2e06000000000000000000"], 0x64}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00')
getdents(r5, &(0x7f0000000040)=""/50, 0x32)
sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=@bridge_dellink={0xe8, 0x11, 0x400, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_PORT_SELF={0x94, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3e5b1d4652d85c009a3cb8b7a571e95c"}, @IFLA_PORT_PROFILE={0x11, 0x2, 'veth0_to_hsr\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfe}, @IFLA_PORT_PROFILE={0xd, 0x2, 'netdevsim'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5cbfcf1782aa421566662c10c0d5de79"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "246dcf0095610ec595e8f6a609ddfcd1"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'gretap0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a00cb942852560608c5eade22ba848e5"}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x45}, 0x8000)
getdents64(r5, 0x0, 0x43)
mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40)
r6 = timerfd_create(0x3, 0x800)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000100)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r6, 0x1, &(0x7f0000000140)={{0x77359400}, {r7, r8+60000000}}, &(0x7f0000000180))

54.361815287s ago: executing program 3 (id=299):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000610018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

54.302114809s ago: executing program 3 (id=301):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/111, 0x1013000, 0x0, 0x2, 0x2}, 0x20)
r0 = socket(0x5, 0x3, 0x0)
socket(0x1e, 0x4, 0x0) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x11b) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x11b)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x80000003, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000480)=""/139)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x15, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./proc\x00', &(0x7f0000000040), &(0x7f0000000200)={0x0, 0xfb, 0x9e, 0x7, 0x4, "ce7f61f7621f34089d045030f7bea945", "7dc34b9e1f5a8c557f4300c71ad8a17f0cce8b946c77ba1aee47b8b5f11d39b9a2889ac061ba185aec226ff2d61865fa816a7ad0ba19d1d227a9a6e17850e0293fae69f15731d62e9e0eaca82f50f4e1aece28c13079bf1eaff602cdfe838187c5840a6a63b40862e855a110f8b4f4e0f325c88b9b487a58ef7e1089a95159419fe7ed5220d70daa9c"}, 0x9e, 0x3) (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./proc\x00', &(0x7f0000000040), &(0x7f0000000200)={0x0, 0xfb, 0x9e, 0x7, 0x4, "ce7f61f7621f34089d045030f7bea945", "7dc34b9e1f5a8c557f4300c71ad8a17f0cce8b946c77ba1aee47b8b5f11d39b9a2889ac061ba185aec226ff2d61865fa816a7ad0ba19d1d227a9a6e17850e0293fae69f15731d62e9e0eaca82f50f4e1aece28c13079bf1eaff602cdfe838187c5840a6a63b40862e855a110f8b4f4e0f325c88b9b487a58ef7e1089a95159419fe7ed5220d70daa9c"}, 0x9e, 0x3)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x200003fc}, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000028d4325f00840000000200000002000002540b00000d07ffffa9845ceaf06ff20f91154b091a", @ANYRES32=0x0], 0x20, 0xd0}], 0x1, 0x10)
dup3(r1, r0, 0x0) (async)
dup3(r1, r0, 0x0)

53.090422126s ago: executing program 3 (id=323):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x17, &(0x7f0000000100)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x388b)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000040)=0x20, 0x4)
recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0)
write$binfmt_misc(r5, &(0x7f0000000300), 0x6)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x44, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @from_mac, {0x2, 0x7f0}}, 0x1a00, 0x1, {}, @val, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}}, 0x404)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4880)
r12 = syz_pidfd_open(r6, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}]}}]}, 0x40}}, 0x4000010)
ioctl$EXT4_IOC_MIGRATE(r12, 0xff08)

37.999115382s ago: executing program 32 (id=323):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x17, &(0x7f0000000100)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x388b)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000040)=0x20, 0x4)
recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0)
write$binfmt_misc(r5, &(0x7f0000000300), 0x6)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x44, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @from_mac, {0x2, 0x7f0}}, 0x1a00, 0x1, {}, @val, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}}, 0x404)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4880)
r12 = syz_pidfd_open(r6, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}]}}]}, 0x40}}, 0x4000010)
ioctl$EXT4_IOC_MIGRATE(r12, 0xff08)

20.731888744s ago: executing program 4 (id=780):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010727bd7000fbdbdf2519000000200001800800030004000000140002006772657461703000"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0x6, 0xffffff01, 0x200}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

20.610151559s ago: executing program 4 (id=781):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb600000000000000b0ff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

20.609728173s ago: executing program 4 (id=782):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8e8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfd54}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

20.528735544s ago: executing program 4 (id=784):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d05, &(0x7f0000000900)="000001")
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x48c400)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x4)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x101]}, 0x8)
linkat(r0, &(0x7f0000000180)='./proc/mtrr\x00', r2, &(0x7f0000000040)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x143042, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async)
ioctl(r0, 0x40104d05, &(0x7f0000000900)="000001") (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x48c400) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x4) (async)
signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x101]}, 0x8) (async)
linkat(r0, &(0x7f0000000180)='./proc/mtrr\x00', r2, &(0x7f0000000040)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x143042, 0x18) (async)

20.480248201s ago: executing program 4 (id=786):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xec})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @local}, 0x3, 0x1, 0x2, 0x1}}, 0x26)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000003c0)="e5b3728e6f3dd5161b0f2ee88c31bac01b0d08a88e81eb475afa33439a8a2201dd2b20257cb1ee380fb2a3692f0faf99c1bc61603631e0c56693315903faddd13a838460419c")
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x100)
r6 = gettid()
rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000280)={{0x1, 0x3, 0x9, 0x7, 'syz1\x00', 0x2}, 0x1, 0x20000000, 0x4, r6, 0x8, 0x1ff, 'syz0\x00', &(0x7f00000000c0)=['./binderfs\x00', './binderfs\x00', 'max', '\x00', './binderfs\x00', 'nl80211\x00', '\x00', './binderfs\x00'], 0x39})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a726aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4a}, {&(0x7f0000000780)="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", 0x14b}, {&(0x7f00000006c0)="fb6c50890f19b07bd5a2da8258484a91e85fa459d4f2974d3bf6ab981c559b8c303f083c0f339d860add6936fcf9bb10f9112da3a3451af4f6e58797fc6eb6b1393134d16dd0e837e6362e9b53857cbbff986a5d59f3c644aa688adb5a069e122064e91c4ad1f98114bdb73fab39ed18be030d70357ec12541fb25bb8f461ab29d34c3fe974b2f1392d73f6a8569a1564d3b2f436eaed2d4128df0e3b9e1", 0x9e}, {&(0x7f0000000900)="d0de437e4cbe1968ccad01863bec1b2d4b2204640c612bb114b2a9f2a2ae45eac3237f3f6adbfe1bcbb40785291b236c17863cafd45cb7fb62f70d0bfe3eebd08cae29c3311ccc15247c8a6ff9c229f374d40f2aebd0c6d8d5fec1cecf236e3b4d4f2f4f95b4a12a8af5530d11332624f7181788cd574d2a9fa69c3672010607df11a0979ddffb97ba964c7ef2cdf349b97cf0bbe9e4904d1871fa2e66aeaa4a29ab9ecb66adea10230e7a4df81ff3c58e16a31c13c65283b918d040b9e39be8c4b17690ed", 0xc5}, {&(0x7f0000000a00)="e94c10ef964e601862ecf40509b1853b5ad1f2c2f0802ed31b252f9acaba62975e7b9b2f1764b6df28c1c887", 0x2c}], 0x6, &(0x7f0000000600)=[@iv={0xa0, 0x117, 0x2, 0x8b, "306c443d877d0f474da8131f61ee6e105ad5d0e09aebdaf9118de86c40e033ede9db0fa96741709ca70369676d152fb3d49c012ac140b2edf6caed4e2927ed0d92d80c34e60bb3c4ce5b73d75b962170ec91208d9433b0a13ed9c9954454a37025b4c42ce07cd18b36f9b195ad784442f8e43a136c7529a4643ae16650ed4bc1780089034b36d8075f60fa"}], 0xa0, 0x80c0}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

20.270153518s ago: executing program 4 (id=789):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7)
fcntl$addseals(r3, 0x409, 0x8)
fallocate(r3, 0x3, 0x9100, 0x3)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6175748e63656c6c2c64796e2c00"])
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000200)=<r4=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0xc)
mount$9p_xen(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2020000, &(0x7f00000002c0)={'trans=xen,', {[{@nodevmap}, {@noextend}, {@cache_none}, {@debug={'debug', 0x3d, 0xffffffffffffffff}}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@seclabel}, {@fowner_gt={'fowner>', r5}}]}})
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000004c0))

20.189905406s ago: executing program 33 (id=789):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7)
fcntl$addseals(r3, 0x409, 0x8)
fallocate(r3, 0x3, 0x9100, 0x3)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6175748e63656c6c2c64796e2c00"])
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000200)=<r4=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0xc)
mount$9p_xen(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2020000, &(0x7f00000002c0)={'trans=xen,', {[{@nodevmap}, {@noextend}, {@cache_none}, {@debug={'debug', 0x3d, 0xffffffffffffffff}}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@seclabel}, {@fowner_gt={'fowner>', r5}}]}})
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000004c0))

15.427282951s ago: executing program 5 (id=857):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x64048010}, 0x0) (async)
syz_emit_ethernet(0x27, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]})

15.280387892s ago: executing program 5 (id=859):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb600000000000000f0ff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

15.221794602s ago: executing program 5 (id=860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r3, 0x100, 0x7, 0x101, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="b7050000000100007910a800000000001d500000000000009500000000000000dad0ae437202fe29729e5361e283f4c4ddf4f91558ee5ce40394c5f0063281d106d9692809f9019b91aa47941e12669ec84cb12e51a175b929b9eb3ed662fd9448d2cf8c101279664c6e0e70869cd88420cb289b7fdbd62b760fd36c31a0919c482808100058572aea56c1b636001f34db40ee898d88ee30e8942a975c7806f0cfb12f6127edd280f96e41d54100b2ced86c59bb6524d0d985c6eaef2ea15d1ceadcf5cdde89b6c76ea58af225f8a9c763767491566c6a3627011463fb7267715090bc94407ad0962476b14a851594175b41576cbd060faa5ae19d1d433bad4e5aa7f338f511028103bf634e003cce56be57cd177878f429"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) (async, rerun: 64)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000000440)=0x100000000) (async, rerun: 64)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080))
syz_open_dev$video(0x0, 0x400, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000080)=0xa9e) (async, rerun: 64)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x7) (rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x90, r9, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @device_a, @device_a, @from_mac, {0x0, 0xfff}}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xaf, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}]]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r6, 0x40044104, &(0x7f00000001c0)=0x3) (async, rerun: 32)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) (rerun: 32)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r11, &(0x7f0000000100)="4a2192de586e5fedfc3b8a2f52418073a8d1c45fa1079e516f56901e3e6bc8"}, 0x20)

15.160944224s ago: executing program 5 (id=861):
r0 = socket(0x10, 0x3, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x883810, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

15.109440103s ago: executing program 5 (id=864):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
syz_emit_ethernet(0x27, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0)

13.70168979s ago: executing program 5 (id=884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r2, r2, 0x0, 0x9)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="fefff7ff0000000000000000b319ffd60000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r5}, 0x38)
listen(r3, 0x402)
sendmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @loopback}, 0x2, 0x2, 0x1, 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="f1492ede4ebfce62685b3dbcb881d24d3ead2551b9c0491c203e3f0df92082e9b788d5e9c2ac6ab15dbd2302033c901a1145fe4827be1abcd419112793b7d7880c74914be9752ed8cb00ee49d276dd0923a883af30c2ad19bd1925dcbf23f466788f4bb1116ec90397c29c8f94f7b20d6ce2af60828a11450407c8747ce7741de0bf44c1d859e474a5faf2d4a36d7c8df198971d108bf6438b5a6f3fd402ec419314c4222cc87c86957e87cbe5ef659c608b464b2cc7c85011bec465bdb1", 0xbe}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000580)="52204da90369f7b73b70322a57ec22addf684bc018dac50903084ec04d1982725b0a427b9f1d6bbb865eed85c3fb042ce53bd5c05301caa330", 0x39}], 0x3, &(0x7f0000000600)=[{0x38, 0x102, 0x8, "386a694e71a506f22625f0cca56f40ae111cbbce2bacf65c92184886ad0d910fa8ef32ea4a4290"}], 0x38}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000640)="9650bea861c8601b94e874bca60db1f90bf597807b7408cde7a0234ea212ea7a74497b6e010244bb973baba8aa60736912efb04787ba46f52cd74198acccc654c3c9dea2ecfc494084cbb586c44ac3d09f924d96a626975ae270d79c4e5dccab399cfdb8361921d05b0777ddbae09cf35868a21936a1cded7bd3de0f2edb8b161390470116e9f6a75addf96442ee49a8e32c35a39ab36e02606c2760e2e8b3a3d8bb496eff80afec199f", 0xaa}, {&(0x7f0000000700)="f2a041a4a58d80bffbd7abbb3cda0b1a09791acd72e3a9c62bc533f072058e19f107679e3cd997482bfc9a25326cbdaef863e22ea4a238f72ece0c23cb85f0c5d57aba97c2e092b49c19a62fa7f001637f65473a840f799f0ae271e413c3f2936631ee084eb63b61c6430f391e5e30251f5ed999c1b1485e9f576ef18e5b7795b2a8ca17dd42227955cbf76310531dd117b5574e46deed1ff596638373dfd8c88e5e1c3dfeed3697c6cc015c9fa7f97363ae05ce6576099694c1ac6c690c11d481a72edf14f690c141a244bd1268a973d633bd4137941fa3734cd2e1d4d38583c9de", 0xe2}, {&(0x7f0000000800)="3e053d5c4d3e732a196e3e4fe171441c153937f2584ebfea7686e4656334e4bbd851683c23e0dceae5c31eecd5da0bf2da4003db00ce81a7c332e6005a5c49126fa7c2ae62aec6db24a826b0656a99a915f076b693b6b41933a60fcf460de6979c5a736761f86310ee32cf2e213ad27288ea95bdeadaf34829635d6dc2e1e757efca00fef76834df18f0d8cf3cf2410a18596c16fd", 0x95}, {&(0x7f00000008c0)="411047db853a2bc0fa1bb1ad11fd74e4b580686257180bc6ef5fdd488077eec0a26b6658c5c3e95defce200a3fd8f37da30ef01039f46dfca74efef7e260ead05b4e06245db9fa65e5f27e9f61a84d90b8ae24bffb1b785a83f79205fc397f69bb1209e63f45adf17e1bd9e96878aa236d8052491ea2d5b7372a02869dd10a29b0deb90220810392b2bb60ce4c3bbe9787c5e3b0119c", 0x96}, {&(0x7f0000000980)="0e6a8a0d7fe753c8a0a3bbdf2d42ae0c10e1d0c97ca25fb6f10d71176eec91138691b855bd8bc03f66976f584897cf4cb0a3e5b8f323db7a158fc2731ec82f059bdb23547b98d8ddd0256f6fc5e060f248e66c68a516cd53436cd6889053ca00b6f5c531e7da3a6d31e1e037da2e1ba2608568", 0x73}, {&(0x7f0000000a00)="4c53f009abbeb3decef8f14a7fb934c9f9d47b55e31cefdaeb58a4fbf7eeb01fdec106ebcca0ff47f8d78ed8037b24ecb770367422fe41432337081541071b7f480080", 0x43}, {&(0x7f0000000b40)="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", 0xfd}, {&(0x7f0000000c40)="404c5b7ca31f1251e7b1c059485cf39f29b674c7", 0x14}, {&(0x7f0000000c80)="d28238ec2970b0b8e495d9e91a5b46cdd6eb20ec3feee6ef8227eb7a5affa8504841698f97ec4647a5d3584710ebc6d32f72caccff29499f210254cc6c19e8b1cac8495d79cd1a42a6574b35bf053a4c464e354d620722b61c2712e3f2a798eba74ecebef53683da8e52a73a5599d77faf01f19884e980d6fbe42f17676a52ef37f20f655e460f8c8fc9394dafeaf9e57eeb842e1e3fb89d298b29c4cb82c7ed63dd", 0xa2}], 0x9, &(0x7f0000000e00)=[{0x90, 0x102, 0x6, "b91500b903657a033a90e2a1d1f5aefecf0c4241b78b8126336e80d45116048fad2610f522885213183dfe4f54abbc5aca8ae8af4c8baef5fc3e015158eeb99dbfb746ea71368a283d8b435ceebc020cd035953304b163f41aa77ef8af6612deabd79b7c0c677f53cca7bf80328d1552347df5cae2f22bba86efca20"}, {0x60, 0x118, 0x7f, "252dcdeeaebbcb4d6d8f47969cae0110feeff504027151abda9aa455a012c9320b6337ad8f22bcdb8dc66144a7b2f1820216e5d793d8caf404e7e9352f14950946685f7921b315bcc75187c5e25fcb60"}], 0xf0}}], 0x2, 0x81)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3)
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001bc0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r7, @ANYRESHEX=0x0, @ANYRESHEX=r9, @ANYBLOB="0482b04005425c8f49efe0ee34049a9df195065ed6a12f672ab26dc49a3afc2fe1c89a362be872691f65ce6175158778b639da5fdf8ff43c1c67d3d53c6132f8ecd79da7aca3113db3fbd052213f993c5b4cec8a2a8783adb8704dc3a0ce7f6a9c", @ANYRES16=r4, @ANYRES16=r3, @ANYRESOCT=r7, @ANYBLOB="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"], 0x0)

13.608316432s ago: executing program 34 (id=884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r2, r2, 0x0, 0x9)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="fefff7ff0000000000000000b319ffd60000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r5}, 0x38)
listen(r3, 0x402)
sendmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @loopback}, 0x2, 0x2, 0x1, 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="f1492ede4ebfce62685b3dbcb881d24d3ead2551b9c0491c203e3f0df92082e9b788d5e9c2ac6ab15dbd2302033c901a1145fe4827be1abcd419112793b7d7880c74914be9752ed8cb00ee49d276dd0923a883af30c2ad19bd1925dcbf23f466788f4bb1116ec90397c29c8f94f7b20d6ce2af60828a11450407c8747ce7741de0bf44c1d859e474a5faf2d4a36d7c8df198971d108bf6438b5a6f3fd402ec419314c4222cc87c86957e87cbe5ef659c608b464b2cc7c85011bec465bdb1", 0xbe}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000580)="52204da90369f7b73b70322a57ec22addf684bc018dac50903084ec04d1982725b0a427b9f1d6bbb865eed85c3fb042ce53bd5c05301caa330", 0x39}], 0x3, &(0x7f0000000600)=[{0x38, 0x102, 0x8, "386a694e71a506f22625f0cca56f40ae111cbbce2bacf65c92184886ad0d910fa8ef32ea4a4290"}], 0x38}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000640)="9650bea861c8601b94e874bca60db1f90bf597807b7408cde7a0234ea212ea7a74497b6e010244bb973baba8aa60736912efb04787ba46f52cd74198acccc654c3c9dea2ecfc494084cbb586c44ac3d09f924d96a626975ae270d79c4e5dccab399cfdb8361921d05b0777ddbae09cf35868a21936a1cded7bd3de0f2edb8b161390470116e9f6a75addf96442ee49a8e32c35a39ab36e02606c2760e2e8b3a3d8bb496eff80afec199f", 0xaa}, {&(0x7f0000000700)="f2a041a4a58d80bffbd7abbb3cda0b1a09791acd72e3a9c62bc533f072058e19f107679e3cd997482bfc9a25326cbdaef863e22ea4a238f72ece0c23cb85f0c5d57aba97c2e092b49c19a62fa7f001637f65473a840f799f0ae271e413c3f2936631ee084eb63b61c6430f391e5e30251f5ed999c1b1485e9f576ef18e5b7795b2a8ca17dd42227955cbf76310531dd117b5574e46deed1ff596638373dfd8c88e5e1c3dfeed3697c6cc015c9fa7f97363ae05ce6576099694c1ac6c690c11d481a72edf14f690c141a244bd1268a973d633bd4137941fa3734cd2e1d4d38583c9de", 0xe2}, {&(0x7f0000000800)="3e053d5c4d3e732a196e3e4fe171441c153937f2584ebfea7686e4656334e4bbd851683c23e0dceae5c31eecd5da0bf2da4003db00ce81a7c332e6005a5c49126fa7c2ae62aec6db24a826b0656a99a915f076b693b6b41933a60fcf460de6979c5a736761f86310ee32cf2e213ad27288ea95bdeadaf34829635d6dc2e1e757efca00fef76834df18f0d8cf3cf2410a18596c16fd", 0x95}, {&(0x7f00000008c0)="411047db853a2bc0fa1bb1ad11fd74e4b580686257180bc6ef5fdd488077eec0a26b6658c5c3e95defce200a3fd8f37da30ef01039f46dfca74efef7e260ead05b4e06245db9fa65e5f27e9f61a84d90b8ae24bffb1b785a83f79205fc397f69bb1209e63f45adf17e1bd9e96878aa236d8052491ea2d5b7372a02869dd10a29b0deb90220810392b2bb60ce4c3bbe9787c5e3b0119c", 0x96}, {&(0x7f0000000980)="0e6a8a0d7fe753c8a0a3bbdf2d42ae0c10e1d0c97ca25fb6f10d71176eec91138691b855bd8bc03f66976f584897cf4cb0a3e5b8f323db7a158fc2731ec82f059bdb23547b98d8ddd0256f6fc5e060f248e66c68a516cd53436cd6889053ca00b6f5c531e7da3a6d31e1e037da2e1ba2608568", 0x73}, {&(0x7f0000000a00)="4c53f009abbeb3decef8f14a7fb934c9f9d47b55e31cefdaeb58a4fbf7eeb01fdec106ebcca0ff47f8d78ed8037b24ecb770367422fe41432337081541071b7f480080", 0x43}, {&(0x7f0000000b40)="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", 0xfd}, {&(0x7f0000000c40)="404c5b7ca31f1251e7b1c059485cf39f29b674c7", 0x14}, {&(0x7f0000000c80)="d28238ec2970b0b8e495d9e91a5b46cdd6eb20ec3feee6ef8227eb7a5affa8504841698f97ec4647a5d3584710ebc6d32f72caccff29499f210254cc6c19e8b1cac8495d79cd1a42a6574b35bf053a4c464e354d620722b61c2712e3f2a798eba74ecebef53683da8e52a73a5599d77faf01f19884e980d6fbe42f17676a52ef37f20f655e460f8c8fc9394dafeaf9e57eeb842e1e3fb89d298b29c4cb82c7ed63dd", 0xa2}], 0x9, &(0x7f0000000e00)=[{0x90, 0x102, 0x6, "b91500b903657a033a90e2a1d1f5aefecf0c4241b78b8126336e80d45116048fad2610f522885213183dfe4f54abbc5aca8ae8af4c8baef5fc3e015158eeb99dbfb746ea71368a283d8b435ceebc020cd035953304b163f41aa77ef8af6612deabd79b7c0c677f53cca7bf80328d1552347df5cae2f22bba86efca20"}, {0x60, 0x118, 0x7f, "252dcdeeaebbcb4d6d8f47969cae0110feeff504027151abda9aa455a012c9320b6337ad8f22bcdb8dc66144a7b2f1820216e5d793d8caf404e7e9352f14950946685f7921b315bcc75187c5e25fcb60"}], 0xf0}}], 0x2, 0x81)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3)
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001bc0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r7, @ANYRESHEX=0x0, @ANYRESHEX=r9, @ANYBLOB="0482b04005425c8f49efe0ee34049a9df195065ed6a12f672ab26dc49a3afc2fe1c89a362be872691f65ce6175158778b639da5fdf8ff43c1c67d3d53c6132f8ecd79da7aca3113db3fbd052213f993c5b4cec8a2a8783adb8704dc3a0ce7f6a9c", @ANYRES16=r4, @ANYRES16=r3, @ANYRESOCT=r7, @ANYBLOB="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"], 0x0)

4.179933338s ago: executing program 0 (id=1034):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r0=>0x0}, &(0x7f0000000040)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x0, r0}}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={<r3=>r2, 0x6b, "500909f79aa4033fde9f844ed6a5d79054bd8ee529ed5d06804e38c89eb29a502f59120a8712c0167b8b268578cafd62085d05ec9a9b9e991748d2a434e7b48266ca56bcb09847ec8db5085689930cb3f40c74ff9626c1234daf26f3e91108bfddc9803fa665d7375210dc"}, &(0x7f00000001c0)=0x73)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x7, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={<r4=>r2, @in6={{0xa, 0x4e21, 0x9, @empty, 0x3}}}, &(0x7f0000000300)=0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0xd7f1, @empty, 0x7fff}, @in6={0xa, 0x4e24, 0x4, @local, 0x40000000}, @in6={0xa, 0x4e20, 0x762, @local, 0xebd7}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6a}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8}], 0xac)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r2, 0x4)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'wg2\x00', 0x7de3})
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000480)=0x3, &(0x7f00000004c0)=0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)={0xffffffffffffffff, 0x57c, 0x5, "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"})
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001540), 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r6=>0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001780)={<r8=>0x0, "2bf897a0a882d8896189af0633227b4c"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000002780)={{r1}, r7, 0x18, @unused=[0x7f, 0x9, 0x9, 0x3], @devid=r8})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000003780)={<r10=>r2, 0xf4fd}, &(0x7f00000037c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000003800)={r10, 0xfffffff4}, 0xc)
ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000003840)={0xd, 0x7})
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000003880)={r3, 0x40, 0x9}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000038c0)={r3, @in={{0x2, 0x4e21, @remote}}, 0xc, 0x88}, 0x90)
sendmmsg$sock(r1, &(0x7f0000003980), 0x0, 0x80c0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000003a40)={{r5}, r6, 0x8, @inherit={0x58, &(0x7f00000039c0)={0x1, 0x2, 0xffff, 0x8000, {0x4, 0x100000001, 0x6, 0x1, 0x3}, [0x8000000000000000, 0x5]}}, @subvolid=0x8})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000004b40)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004a80)={0x54, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x26}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xacd4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x2)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000004b80)={0x5c, 0x6, '\x00', [@hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x5, [0x6]}}, @ra={0x5, 0x2, 0xe}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)=@ipv6_getroute={0x4c, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {0xa, 0x54, 0x14, 0x2, 0xff, 0x4, 0xff, 0x9, 0x200}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8}}, @RTA_MARK={0x8, 0x10, 0xffff}, @RTA_EXPIRES={0x8, 0x17, 0x101}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000044)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000004d00)={r4, 0x3c}, 0x8)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000004d40)=0x1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000004e40)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc1)

4.173366453s ago: executing program 0 (id=1036):
prctl$PR_CAPBSET_DROP(0x18, 0xf) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
setns(0xc9, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) (async)
r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'fl512\x00', [0x0, 0x7, 0x1, 0x205, 0x7, 0xfff, 0x3, 0x1ff, 0xa, 0xf7f8, 0x6, 0xb4e, 0x10045, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x80000000, 0x3, 0x40004, 0x80002, 0x7, 0xfe3c, 0x101, 0x403b, 0x9, 0x7, 0x9]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) (async)
r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=0x10)
readv(r6, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)}], 0x2) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000001000034000000002140000001100010000000000000000000000000ab31e3e800c8ee70500ef336cc5d592a05bfd091616366450c1c03b58a0b97837908801829f5fcbd3b773f5a4d83495f8d44b452e3db5acb3df7dc7f34ff8b769fdaffabdb56ff9c89e9c326c954b13516e88fe75ce4ff75f79790bf2caaf"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl(r2, 0x4, &(0x7f00000003c0)="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") (async)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc0082, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000180)={{0x1, 0x300, 0x18, r7}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1011c1, 0x10) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r8, &(0x7f0000001dc0)=""/4096, 0x1000) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) (async)
lseek(r8, 0x2, 0x1) (async)
r10 = socket(0x10, 0x3, 0x0)
r11 = accept4$phonet_pipe(r10, &(0x7f0000000340), &(0x7f0000000540)=0x10, 0x800)
accept4$phonet_pipe(r11, &(0x7f0000000740), &(0x7f00000008c0)=0x10, 0x0)

3.98879368s ago: executing program 0 (id=1041):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000700), &(0x7f0000000100)=r2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000040), 0x0}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x30, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

3.922235473s ago: executing program 0 (id=1042):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb600000000000000ffffff95110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

3.921504732s ago: executing program 0 (id=1043):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'bond_slave_0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x29, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x0, 0x3, 0x1, 0xb, 0x3, 0x10, 0x8}, @call={0x85, 0x0, 0x0, 0x96}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0xde5a, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r4, 0x5501)
close_range(r2, 0xffffffffffffffff, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e)
close(0x4)

3.751315001s ago: executing program 0 (id=1044):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54)
write$dsp(r0, &(0x7f0000000080)="cd", 0x1)
syz_usb_connect(0x5, 0x597, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x81, 0x1d, 0x72, 0x40, 0x5ac, 0x921c, 0xd66e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x585, 0x2, 0x7d, 0x8, 0x40, 0x6, "", [{{0x9, 0x4, 0x6, 0x9, 0x5, 0x3, 0x95, 0x0, 0x8, [], [{{0x9, 0x5, 0x82, 0x8, 0x10, 0x80, 0x1, 0x50, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x5}, @generic={0x3e, 0xf, "69b4eeee1f876d1e81d928cb42559fc6e6358f1a84d901cc5b387ecd2efda34306397985fe0a0e1ad1e91b91db008be9f4de1fc283fc2be989862b1b"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x81, 0xff, 0x7, [@generic={0xe6, 0x10, "cb334bc6309009562c3412a02daa33272e0c53966e22ac776bb9e443ac9060872be06292812b2ec34535afb39505c5697aa106c7bad4601bdb58439992da4624e576166af83d9bfde37581c633ef0d02762449fd03351c931cdd7a44839238720efb71e280169b10d63ad135f1ec93cc5c66c71aa80b4c30dd57f299cee8411901504440eb34453e4b640a1e4197bba07d5d81cbe31072c8ba794f27ec1f7ab3fda8e8f97ca0aa94cf5292d287728949c6fe940c52c8f62c8410efe65b875b97085ab27e36811e251699bcce8500a9e70109c23f032adaff4135de61d731ec1c4c4a78a4"}, @generic={0xd0, 0x31, "1ad80b2bb5204e7d3491a90135df807e7f1d4a932bfc590fbb0d971b1c6f6b965e98093c4d66d965809e46119a0928d3fbc5f2e67ce40f85dae139adfa32129e3994301c2741c233aa7a756ecb7798508a6132a256e09eae6ba1202572fadc7c8fc6e2eac08d22af40c856a073c1bcdff6037c29709f6bd025fd2d893977fde4f1d018ad4ce03ec7a6bb9f948e4ace97d538f69e3933496601876eed4bd779e57be7aaa70139d8fa5007198612ac2f9f93812398b3ff0197c0a58282b6e717c1f7096c66026483d0bcb956af0189"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x6, 0x0, [@generic={0x56, 0x31, "c2566c5dee4b8f8fa41f73f74303ddea84993f2ae675f91ee029e611a1911ab00b41bf1aa43fd6eb5312832a0121d51e45037f22468133118868d09ae99e693aa19f42b5d265e4749a6f2f2c2be5295fe5b9d105"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x8, 0x35, 0x3, [@generic={0x52, 0x4, "61ea892a2aab35c436d9f3d17599431ebaa9745258448eae73bff2d57fe4ca3dfe639c9aa271403ffa043b62a249458e700bbfc10c8f1d18a3d137ec05fcfb9472628ea08399bcfcfc05ccdd389e5f31"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x1, 0x4, [@generic={0xac, 0x23, "f5d8f57587f5d3d72dc5cd10b1dfef9de062d3cadfba2fa0016dd9ec466bf0fc643796e812dff19ac874f838a473198c395408beafb0919fe17f979319e87d5d79dd0bd9d4c5b7b52fad7f6957b82369e388a04c7711680e4e9ab1650b8dbc5b4b01061b7de3f0a262f60217afee06f3a96a91619fda594cefe95ccd5a5cf22e3560f5220f67febb8e480374f41fd048a53ac214f771d5f1865bb98dfd585caf7c10a78f454910bb2c7f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x81}]}}]}}, {{0x9, 0x4, 0xaa, 0x60, 0x8, 0x1, 0x44, 0xe3, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xa}}], [{{0x9, 0x5, 0xb, 0x0, 0x220, 0x7, 0x5, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x6, 0x47, 0x8}}, {{0x9, 0x5, 0xd, 0xd, 0x40, 0x3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x2b}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x98, 0x5, 0x2, [@generic={0xe0, 0x5, "3ca3427986245ee2ed125d5a71e8e8ef9479dbe67061b687e57227b741694d15e6f751fad426ec5885b8715a331ae6bfddaa0c270561551d28cf737a558ff4f351948de5938c60129eb5d1a7fd464fcad87293072eb91162fd1fa2fc9390b5ffb96f01c0f37894aa90d0078a6fc4b16b76cd602dc23f6ab697751c072f3513d3129b7f2f555f76eeb3609a79d32921baf2d21fb933e0ecae6ceca2df14f45a3412cfd043580dc1e355ed9f5d9376e32daf4270c9f4761e624a41fe0ec87f0b36a9cf7f1fdc15f2b6372a30fe92164615a6b7944eda0204ed062006fbbd48"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xc1, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0xb0, 0x2, 0x5, [@generic={0x8b, 0x5, "706893c9e7f35dcb28030774be64039dac475eb7035816eebd237884c1a1b0b6851602b9924974db8fd506be851a4d380963c14a47858d89729e60557b5279a33745440280bcec73e85f004cc5452fde4436bc58eb9a95058ac71925fee1d66c2e64b20101258bde74ba10be606c1b7ff63ffbbab6b947c058aa66df5507eadee8935cdff1d33dbf7f"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x5, 0x0, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x800}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0x2, 0x7}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0xf9, 0xc6, 0x0, 0x40, 0x1}, 0x196, &(0x7f0000000880)={0x5, 0xf, 0x196, 0x5, [@generic={0x6f, 0x10, 0x2, "a6d4ccacd112d0996d22e1e8d47db0b889021b13a8fffad36538c1ba4532186dd2be7ce76418f70235279edd9d31b7e644115711870dbdbbc6b91d3c95fd55e2d9cb6d1871a7f860159e21e0c880f0fbeb23b2978d9f5470ca5f7ff940e794b1ecf01370e1665eb36b4aceb1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2b, 0x4, 0xff, 0x0, 0x6}, @generic={0x100, 0x10, 0x4, "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"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5f65, 0xf, 0xfe00, [0xffc000, 0x3f00]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x446}}, {0x4e, &(0x7f0000000a80)=@string={0x4e, 0x3, "a34df8803a3d74b7c0bb5db5d01079abc6c9af2e0168bfc344b7f27ed3a5b19a0d04b5545a1575b29fe8975e4e76c2818fe3272edf1009eb59552b2fb06d9b89e1cd93aa20d6b9c84d92d115"}}, {0x23, &(0x7f0000000b00)=@string={0x23, 0x3, "ecce88d76b6c3a8f74452b15884510445d71ad6c60d5f57b90a439b3e4d2a436fb"}}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80, 0xf99f, 0x18000000000, 0x3, 0x3, 0x274e})
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (async)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) (async)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async)
write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) (async)
write$dsp(r0, &(0x7f0000000080)="cd", 0x1) (async)
syz_usb_connect(0x5, 0x597, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x81, 0x1d, 0x72, 0x40, 0x5ac, 0x921c, 0xd66e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x585, 0x2, 0x7d, 0x8, 0x40, 0x6, "", [{{0x9, 0x4, 0x6, 0x9, 0x5, 0x3, 0x95, 0x0, 0x8, [], [{{0x9, 0x5, 0x82, 0x8, 0x10, 0x80, 0x1, 0x50, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x5}, @generic={0x3e, 0xf, "69b4eeee1f876d1e81d928cb42559fc6e6358f1a84d901cc5b387ecd2efda34306397985fe0a0e1ad1e91b91db008be9f4de1fc283fc2be989862b1b"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x81, 0xff, 0x7, [@generic={0xe6, 0x10, "cb334bc6309009562c3412a02daa33272e0c53966e22ac776bb9e443ac9060872be06292812b2ec34535afb39505c5697aa106c7bad4601bdb58439992da4624e576166af83d9bfde37581c633ef0d02762449fd03351c931cdd7a44839238720efb71e280169b10d63ad135f1ec93cc5c66c71aa80b4c30dd57f299cee8411901504440eb34453e4b640a1e4197bba07d5d81cbe31072c8ba794f27ec1f7ab3fda8e8f97ca0aa94cf5292d287728949c6fe940c52c8f62c8410efe65b875b97085ab27e36811e251699bcce8500a9e70109c23f032adaff4135de61d731ec1c4c4a78a4"}, @generic={0xd0, 0x31, "1ad80b2bb5204e7d3491a90135df807e7f1d4a932bfc590fbb0d971b1c6f6b965e98093c4d66d965809e46119a0928d3fbc5f2e67ce40f85dae139adfa32129e3994301c2741c233aa7a756ecb7798508a6132a256e09eae6ba1202572fadc7c8fc6e2eac08d22af40c856a073c1bcdff6037c29709f6bd025fd2d893977fde4f1d018ad4ce03ec7a6bb9f948e4ace97d538f69e3933496601876eed4bd779e57be7aaa70139d8fa5007198612ac2f9f93812398b3ff0197c0a58282b6e717c1f7096c66026483d0bcb956af0189"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x6, 0x0, [@generic={0x56, 0x31, "c2566c5dee4b8f8fa41f73f74303ddea84993f2ae675f91ee029e611a1911ab00b41bf1aa43fd6eb5312832a0121d51e45037f22468133118868d09ae99e693aa19f42b5d265e4749a6f2f2c2be5295fe5b9d105"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x8, 0x35, 0x3, [@generic={0x52, 0x4, "61ea892a2aab35c436d9f3d17599431ebaa9745258448eae73bff2d57fe4ca3dfe639c9aa271403ffa043b62a249458e700bbfc10c8f1d18a3d137ec05fcfb9472628ea08399bcfcfc05ccdd389e5f31"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x1, 0x4, [@generic={0xac, 0x23, "f5d8f57587f5d3d72dc5cd10b1dfef9de062d3cadfba2fa0016dd9ec466bf0fc643796e812dff19ac874f838a473198c395408beafb0919fe17f979319e87d5d79dd0bd9d4c5b7b52fad7f6957b82369e388a04c7711680e4e9ab1650b8dbc5b4b01061b7de3f0a262f60217afee06f3a96a91619fda594cefe95ccd5a5cf22e3560f5220f67febb8e480374f41fd048a53ac214f771d5f1865bb98dfd585caf7c10a78f454910bb2c7f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x81}]}}]}}, {{0x9, 0x4, 0xaa, 0x60, 0x8, 0x1, 0x44, 0xe3, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xa}}], [{{0x9, 0x5, 0xb, 0x0, 0x220, 0x7, 0x5, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x6, 0x47, 0x8}}, {{0x9, 0x5, 0xd, 0xd, 0x40, 0x3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x2b}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x98, 0x5, 0x2, [@generic={0xe0, 0x5, "3ca3427986245ee2ed125d5a71e8e8ef9479dbe67061b687e57227b741694d15e6f751fad426ec5885b8715a331ae6bfddaa0c270561551d28cf737a558ff4f351948de5938c60129eb5d1a7fd464fcad87293072eb91162fd1fa2fc9390b5ffb96f01c0f37894aa90d0078a6fc4b16b76cd602dc23f6ab697751c072f3513d3129b7f2f555f76eeb3609a79d32921baf2d21fb933e0ecae6ceca2df14f45a3412cfd043580dc1e355ed9f5d9376e32daf4270c9f4761e624a41fe0ec87f0b36a9cf7f1fdc15f2b6372a30fe92164615a6b7944eda0204ed062006fbbd48"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xc1, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0xb0, 0x2, 0x5, [@generic={0x8b, 0x5, "706893c9e7f35dcb28030774be64039dac475eb7035816eebd237884c1a1b0b6851602b9924974db8fd506be851a4d380963c14a47858d89729e60557b5279a33745440280bcec73e85f004cc5452fde4436bc58eb9a95058ac71925fee1d66c2e64b20101258bde74ba10be606c1b7ff63ffbbab6b947c058aa66df5507eadee8935cdff1d33dbf7f"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x5, 0x0, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x800}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0x2, 0x7}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0xf9, 0xc6, 0x0, 0x40, 0x1}, 0x196, &(0x7f0000000880)={0x5, 0xf, 0x196, 0x5, [@generic={0x6f, 0x10, 0x2, "a6d4ccacd112d0996d22e1e8d47db0b889021b13a8fffad36538c1ba4532186dd2be7ce76418f70235279edd9d31b7e644115711870dbdbbc6b91d3c95fd55e2d9cb6d1871a7f860159e21e0c880f0fbeb23b2978d9f5470ca5f7ff940e794b1ecf01370e1665eb36b4aceb1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2b, 0x4, 0xff, 0x0, 0x6}, @generic={0x100, 0x10, 0x4, "9bc274ef42e16a1076b1eae34783e1314f2b3b466bcf38a76b166b7036b77f1da88b0af4b7513e56c931d462c84fea5ca521a40687231fb427fe142aedf2b5e284e0fec6b6314375c125a9dcb6e41c889a33728f04e69340641aa9a7629315e96a21a67468dd62c6e80201ac2a7c1d94fd822881e46d27eb36d79456c71ae824ddaf8e2f628036f41011f48fc3143ddb4c119bf8211d2b56f18b6a8e44bf8766c1f95fa5ca3f0910002c2f4ce723895a200bdcd3e1d7d5ab960c5cfdd9e42197dfb90e9b36592f4f0af6e162388b895b7040c1f6d2f6fcb396bcce0c19f8144f6ee5f883ac455a558ccfe522a483198c593432695d6d8d235913b2990d"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5f65, 0xf, 0xfe00, [0xffc000, 0x3f00]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x446}}, {0x4e, &(0x7f0000000a80)=@string={0x4e, 0x3, "a34df8803a3d74b7c0bb5db5d01079abc6c9af2e0168bfc344b7f27ed3a5b19a0d04b5545a1575b29fe8975e4e76c2818fe3272edf1009eb59552b2fb06d9b89e1cd93aa20d6b9c84d92d115"}}, {0x23, &(0x7f0000000b00)=@string={0x23, 0x3, "ecce88d76b6c3a8f74452b15884510445d71ad6c60d5f57b90a439b3e4d2a436fb"}}]}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80, 0xf99f, 0x18000000000, 0x3, 0x3, 0x274e}) (async)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async)

1.701170569s ago: executing program 1 (id=1072):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/3:0:0:0\x00', 0x141000, 0x0)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0)

1.700935132s ago: executing program 1 (id=1073):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x4}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x6, 0x1}, {0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x2, 0x4e22, 0x1, @in6=@empty}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x170}}, 0x0)

1.470762578s ago: executing program 1 (id=1078):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x27, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0)

702.306535ms ago: executing program 2 (id=1091):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x10000, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x3, @private2, 0x8}}}, 0x90)
fstat(r0, &(0x7f0000000240))

701.032287ms ago: executing program 2 (id=1094):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000002c0)={r0, &(0x7f0000000500)='s\b\x00\x00\x00\xcaI=\x18\x83M\t;d4\xd5\x13\x15\xf2#n\xe8y=\x1d\xbcX\xc7e%\xf0\x9a\"\xf0\x1d%\xe7\xe1\xbe\xba\xedz)\xdf\xa7\xd2j\xf6\xec\x12\x17[\xee\x97\x96\xaeX\x8d\xb3\xee\xfa;^C\xde\xf88|\xdc]%\xdf|\x90\xefX\x13h\xd6\xac\xc2\x15\xd2{\xdf\xe6\xa9P1\xa8\x82\xa4\x13\xad6\x13\xe3\x02GI\x1a\xf1\x82\xd4\x88\xdd o\xf3n\xa8MS\x06\x99\xcccx\xab3\xfe\xa5\xbbZhj\x87\xf1\x86\xc7\x86k\x04\x85\xe0Ns\x8b\xa9\xe9\xf2NeVG\xbe\x9b\xd9V\x15\x89<p.X\xd1\x8f\x9b\x8c\xbd\xe9\xe4\xe9\xd6\xdb\xba\x9b\x10\x1e\xe0LrQ4\\|\x99\xbb6&[\xa8\x1e\xcc\b\x18\xb5\xc1\xee$\xf7\x8aa\x92\xe6D\xf1\x1e\x82\xda\v\x9e!E\xcb5\x82\x13\xed<\x01\xc5l\x95T~\xdd\xa3\x1b\xbe\xccE_d\xe1t\x05\x1b\xb4\r\x18\xc8\x06P\xc7\x1b\xe9S \xbe\xcbfZ\xf3\xbf\xd6\xcfd\xe6\xac14\x83\x94\xee\x05-\f\x91e\xb8\x94y\x9e%>\xe8\x90\x16\x1b\xe6\x8c\xcde\xe4\xadj\xe2\x12\x8a9\x9bBvU\x03\xbe\x9f_\xc7x?<\x9fe\x14\xc2\xa0\xd4\xb5\xbdz\xb9\xa2\xd1-^\xf1N&\xca\x9a\xf6x*\x97\xed\xf0\xdb\x84\xa4)\xdfcYH^\xdd\x17&\x1c\xbf\f\x8d2\xa6\xe9\xb9e\xa2&\xd4\x82,Nc\xef\xe7\x03', 0xa4100, &(0x7f0000000180)={@_ha_fsid={[0xcec1, 0x4]}, {0x400, 0x0, 0x9e4, 0x80}}, 0xffffffff, &(0x7f0000000300), &(0x7f0000000280)=0xa51})
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

592.067283ms ago: executing program 2 (id=1095):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"})
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000040)=0x1)

452.258515ms ago: executing program 2 (id=1097):
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x7, 0x8, 0xfe, 0xfff00004}, {0x12, 0x0, 0x3, 0xfffffffa}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0)

452.021444ms ago: executing program 2 (id=1098):
mkdir(&(0x7f0000000600)='./file0\x00', 0x142)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x3}, 0x1c)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000c00)={'trans=virtio,', {[{@version_u}, {@access_client}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newchain={0x64, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x0, 0x8}, {0x10, 0x7fe7}}, [@TCA_RATE={0x6, 0x5, {0x1e, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xf}}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xd}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0xa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x811)
mkdir(&(0x7f0000000600)='./file0\x00', 0x142) (async)
socket(0x40000000015, 0x5, 0x0) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x3}, 0x1c) (async)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000c00)={'trans=virtio,', {[{@version_u}, {@access_client}]}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newchain={0x64, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x0, 0x8}, {0x10, 0x7fe7}}, [@TCA_RATE={0x6, 0x5, {0x1e, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xf}}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xd}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0xa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x811) (async)

401.87388ms ago: executing program 6 (id=1099):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb600000000000000000000e5110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

401.559992ms ago: executing program 2 (id=1100):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c0d0}, 0x448d4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
close(r0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x0, 0xffffffff}}]})
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1})
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x10)
ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000001c0)=""/146)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r11 = dup(r10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r11, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r12 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
read(r12, &(0x7f0000000280)=""/240, 0xf0)
ioctl$RNDGETENTCNT(r12, 0x80045200, &(0x7f0000000180))

399.005076ms ago: executing program 6 (id=1101):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x1, r3, 0x3})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000003, 0x0, 0x1, r3, 0xb})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000100), 0x4)
write(r1, &(0x7f0000000000)="1c002def000006602d00dba37eaabbc9029628629ced71f85118766b83af354c", 0x20)

241.843297ms ago: executing program 6 (id=1102):
r0 = socket$inet(0x2, 0x5, 0x0) (async)
mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
write(r1, &(0x7f0000000700)='tr', 0x2) (async)
setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) (async)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x0, 0x5, 0xb77c}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_TC={0x0, 0x6, 0x3}, @TCA_MPLS_PROTO={0x0, 0x4, 0x15}]}, {0x0, 0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x74}}, 0x0) (async)
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x7)

241.562123ms ago: executing program 6 (id=1103):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000002c0)={r0, &(0x7f0000000500)='s\b\x00\x00\x00\xcaI=\x18\x83M\t;d4\xd5\x13\x15\xf2#n\xe8y=\x1d\xbcX\xc7e%\xf0\x9a\"\xf0\x1d%\xe7\xe1\xbe\xba\xedz)\xdf\xa7\xd2j\xf6\xec\x12\x17[\xee\x97\x96\xaeX\x8d\xb3\xee\xfa;^C\xde\xf88|\xdc]%\xdf|\x90\xefX\x13h\xd6\xac\xc2\x15\xd2{\xdf\xe6\xa9P1\xa8\x82\xa4\x13\xad6\x13\xe3\x02GI\x1a\xf1\x82\xd4\x88\xdd o\xf3n\xa8MS\x06\x99\xcccx\xab3\xfe\xa5\xbbZhj\x87\xf1\x86\xc7\x86k\x04\x85\xe0Ns\x8b\xa9\xe9\xf2NeVG\xbe\x9b\xd9V\x15\x89<p.X\xd1\x8f\x9b\x8c\xbd\xe9\xe4\xe9\xd6\xdb\xba\x9b\x10\x1e\xe0LrQ4\\|\x99\xbb6&[\xa8\x1e\xcc\b\x18\xb5\xc1\xee$\xf7\x8aa\x92\xe6D\xf1\x1e\x82\xda\v\x9e!E\xcb5\x82\x13\xed<\x01\xc5l\x95T~\xdd\xa3\x1b\xbe\xccE_d\xe1t\x05\x1b\xb4\r\x18\xc8\x06P\xc7\x1b\xe9S \xbe\xcbfZ\xf3\xbf\xd6\xcfd\xe6\xac14\x83\x94\xee\x05-\f\x91e\xb8\x94y\x9e%>\xe8\x90\x16\x1b\xe6\x8c\xcde\xe4\xadj\xe2\x12\x8a9\x9bBvU\x03\xbe\x9f_\xc7x?<\x9fe\x14\xc2\xa0\xd4\xb5\xbdz\xb9\xa2\xd1-^\xf1N&\xca\x9a\xf6x*\x97\xed\xf0\xdb\x84\xa4)\xdfcYH^\xdd\x17&\x1c\xbf\f\x8d2\xa6\xe9\xb9e\xa2&\xd4\x82,Nc\xef\xe7\x03', 0xa4100, &(0x7f0000000180)={@_ha_fsid={[0xcec1, 0x4]}, {0x400, 0x0, 0x9e4, 0x80}}, 0xffffffff, &(0x7f0000000300), &(0x7f0000000280)=0xa51})
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

191.936743ms ago: executing program 6 (id=1104):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) (async)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
chmod(&(0x7f0000000040)='./file0\x00', 0x311)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20400)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x0, 0xc}) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000f7f10000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000100)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0xa}, 0x94)

191.646253ms ago: executing program 6 (id=1105):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
rmdir(&(0x7f0000000100)='./control\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000e40), 0x3, 0x2)
ppoll(&(0x7f0000000e80)=[{r4, 0x1000}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)

61.484487ms ago: executing program 1 (id=1106):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x0, 0x4c, 0x2, 0x4000}, 0x38, [0xd, 0x2, 0x7, 0x8, 0xd93, 0x9, 0xfffffffe, 0x113, 0x0, 0xfffffb82, 0x7, 0xef7, 0x4, 0x10000, 0x80, 0xdc, 0x4, 0x1, 0x7fffffff, 0xfffffff8, 0x7, 0x5, 0x6, 0xb, 0x1, 0x80, 0xb558, 0x9f96, 0x3, 0x2fbd, 0x2, 0x8001, 0x2, 0x1, 0x1, 0xfffffc00, 0x3, 0x3, 0xb60243a, 0x8, 0x3, 0x7, 0x6, 0x6, 0x9, 0x5499ba74, 0x7fffffff, 0x59, 0xfffffff9, 0x8307, 0x1, 0x0, 0x81, 0x6, 0xfc43, 0xe2, 0x4, 0x6, 0x4, 0x2, 0x0, 0x8, 0xaac5, 0x7], [0x589c006a, 0x5, 0x2, 0x5, 0xb694, 0x8, 0x4, 0x5, 0x1, 0xfffffff7, 0x10, 0x4, 0x4, 0x0, 0x1, 0xc00, 0x7f, 0x65, 0x101, 0x3ff, 0x8, 0x3, 0x758f, 0xe, 0x2, 0x3, 0xa1d, 0xd6, 0x6, 0x22080, 0x1, 0x7f, 0x9, 0x1ff, 0xd20, 0x100, 0xfffffff9, 0x5, 0x2, 0x23, 0x6, 0x1, 0x1ff, 0x4, 0x1, 0x6, 0xfffffff5, 0x4f2ee800, 0xddf1, 0x7, 0x0, 0x47, 0xfe, 0x40, 0x7, 0x5, 0x800000, 0x1, 0x5, 0xc, 0x40, 0x6, 0xc], [0x62, 0x2, 0x1, 0x2, 0x0, 0x7, 0xfffffff9, 0x6, 0x400, 0x99be, 0x2, 0xe8d, 0xa6c, 0x9da9, 0x3, 0x1, 0x5, 0xb, 0x0, 0xd1, 0x3, 0x7ff, 0x2, 0x1, 0x8001, 0x400, 0x3ff, 0x20000000, 0x5, 0x4, 0x482979b1, 0x5, 0x1, 0x9c8, 0x4, 0x3, 0x4, 0x800, 0x3, 0x2, 0x8, 0xdbf6, 0x400, 0x3, 0x6, 0xa, 0x5, 0x6, 0x9, 0x3, 0x1, 0x6, 0xd, 0x0, 0x101, 0x8, 0x7ff80000, 0x8, 0x0, 0x98e, 0x7ff, 0x101, 0x7, 0x218], [0x0, 0x7, 0xfffffff7, 0x4, 0x800, 0x9, 0x6, 0x6, 0x3, 0x16, 0x400, 0x8, 0x9, 0x6, 0x6a68e1d4, 0x7ff, 0x6, 0x1ff, 0x8564, 0x7f, 0x4, 0x401, 0x7, 0x2, 0x8, 0x5, 0x7c0, 0x8e0a, 0x1, 0x0, 0x38, 0x9, 0xfff, 0xf1e, 0x0, 0x3, 0xd6ec, 0x354a, 0x6a0, 0x5, 0x7, 0x8, 0x7f, 0xfffffffe, 0xffffffff, 0x75cd, 0x80000001, 0x77aa, 0x4, 0xf29b, 0x7f, 0x1ff, 0xffffffff, 0x2, 0x6, 0x80000000, 0x4, 0x4, 0x5, 0x7f, 0xa, 0xe57, 0x1, 0x8]}, 0x45c) (async)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (async)
socket$kcm(0x10, 0x2, 0x0)

61.302509ms ago: executing program 1 (id=1107):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x99140, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000080)=0x4)
ioctl$TCFLSH(r0, 0x540b, 0x0)

0s ago: executing program 1 (id=1108):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x436, 0x8, 0x0, 0x67, 0x9, 0x6, 0x7, 0x10, 0xb0, 0x3, 0xbb, 0x7f, 0xd5a8}, {0x800, 0x5, 0x33, 0xf0, 0xa, 0xef, 0x0, 0x4, 0x3, 0x5, 0x6, 0x8, 0x8}, {0x7fff, 0x3, 0x9, 0x5, 0x7f, 0x4, 0x2, 0xd, 0x0, 0x7f, 0x8, 0x3, 0x7}], 0x1b86f74c})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x100, 0x2, 0x4001c3}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in6=@loopback, 0x3, 0xffff, 0x4e24, 0x1000, 0xa, 0x0, 0x0, 0x84}, {@in=@empty, 0xffffffff, 0x32}, @in6=@local, {0x0, 0x4, 0xfffffffffffffffb, 0x3, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x400}, {0xffffffff, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x8044000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40981, 0x0)
syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x4, @vbi={0xb1, 0xf21, 0x5, 0x32314d4e, [0x7, 0x1], [0x1, 0x5], 0x13a}})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close(r5)

kernel console output (not intermixed with test programs):

v="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[   84.601801][   T42] audit: type=1400 audit(1786210482.069:596): avc:  denied  { mmap_zero } for  pid=7189 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   84.630657][   T55] usb 6-1: USB disconnect, device number 8
[   84.856581][   T42] audit: type=1400 audit(1786210482.339:597): avc:  denied  { setattr } for  pid=7205 comm="syz.0.398" name="NETLINK" dev="sockfs" ino=16145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   84.949868][ T7216] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[   84.952962][ T7216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.960600][ T7207] ALSA: mixer_oss: invalid OSS volume ';�'
[   85.153165][   T42] audit: type=1400 audit(1786210482.629:598): avc:  denied  { write } for  pid=7227 comm="syz.2.403" name="/" dev="9p" ino=75524131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   85.177999][   T42] audit: type=1400 audit(1786210482.659:599): avc:  denied  { setattr } for  pid=7227 comm="syz.2.403" name="/" dev="9p" ino=75524131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   85.180024][ T7230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7230 comm=syz.1.404
[   85.231452][ T7230] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[   85.239294][ T7230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7230 comm=syz.1.404
[   85.498012][   T42] audit: type=1401 audit(1786210482.979:600): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0"
[   85.793700][ T7256] trusted_key: syz.2.411 sent an empty control message without MSG_MORE.
[   85.886768][ T7263] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   85.928890][ T7264] netlink: 'syz.2.413': attribute type 12 has an invalid length.
[   86.261856][ T7267] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   86.262361][ T7268] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   86.305930][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'.
[   86.311995][ T7270] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   86.443621][ T7276] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   86.568532][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'.
[   86.630343][ T7284] erspan0: entered promiscuous mode
[   86.633441][ T7284] erspan0: entered allmulticast mode
[   86.694865][ T7292] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   86.753747][ T7292] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.759192][ T7288] 8021q: VLANs not supported on ip6_vti0
[   86.763351][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'.
[   86.769757][ T7288] netlink: 'syz.2.421': attribute type 83 has an invalid length.
[   86.968982][ T7305] netlink: 'syz.1.428': attribute type 12 has an invalid length.
[   86.973102][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.428'.
[   87.035314][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'.
[   87.064753][ T7310] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   87.072807][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'.
[   87.179987][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'.
[   87.462195][   T42] audit: type=1400 audit(1786210484.949:601): avc:  denied  { create } for  pid=7331 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1
[   87.511267][ T7334] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7334 comm=syz.0.437
[   87.519132][   T42] audit: type=1400 audit(1786210484.999:602): avc:  denied  { write } for  pid=7333 comm="syz.0.437" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   87.551094][ T7334] netlink: 'syz.0.437': attribute type 1 has an invalid length.
[   87.574567][ T7334] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.623525][   T55] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   87.781333][   T55] usb 6-1: Using ep0 maxpacket: 32
[   87.788353][   T55] usb 6-1: unable to get BOS descriptor or descriptor too short
[   87.794054][   T55] usb 6-1: config 8 has an invalid interface number: 93 but max is 0
[   87.797588][   T55] usb 6-1: config 8 has no interface number 0
[   87.800195][   T55] usb 6-1: config 8 interface 93 altsetting 72 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   87.803390][ T7350] afs: Unknown parameter 'dynonfig/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls'
[   87.807025][   T55] usb 6-1: config 8 interface 93 has no altsetting 0
[   87.815011][   T55] usb 6-1: string descriptor 0 read error: -22
[   87.817879][   T55] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[   87.823029][   T55] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3
[   87.845384][   T55] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[   87.851216][   T55] dw2102: su3000_power_ctrl: 1, initialized 0
[   87.859711][   T55] dvb-usb: bulk message failed: -22 (2/0)
[   87.860779][ T7352] vlan2: entered allmulticast mode
[   87.888239][   T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   87.893322][   T55] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[   87.897136][   T55] usb 6-1: media controller created
[   87.900019][   T55] dvb-usb: bulk message failed: -22 (6/0)
[   87.902765][   T55] dw2102: i2c transfer failed.
[   87.905075][   T55] dvb-usb: bulk message failed: -22 (6/0)
[   87.907474][   T55] dw2102: i2c transfer failed.
[   87.913288][   T55] dvb-usb: bulk message failed: -22 (6/0)
[   87.919271][   T55] dw2102: i2c transfer failed.
[   87.921508][   T55] dvb-usb: bulk message failed: -22 (6/0)
[   87.923866][   T55] dw2102: i2c transfer failed.
[   87.925879][   T55] dvb-usb: bulk message failed: -22 (6/0)
[   87.928226][   T55] dw2102: i2c transfer failed.
[   87.930221][   T55] dvb-usb: bulk message failed: -22 (6/0)
[   87.934429][   T55] dw2102: i2c transfer failed.
[   87.946893][   T55] dvb-usb: MAC address: 02:02:02:02:02:02
[   87.958746][   T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.008007][   T55] dvb-usb: bulk message failed: -22 (3/0)
[   88.011024][   T55] dw2102: command 0x0e transfer failed.
[   88.014620][   T55] dvb-usb: bulk message failed: -22 (3/0)
[   88.017059][   T55] dw2102: command 0x0e transfer failed.
[   88.134189][ T7363] program syz.2.444 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.332291][   T55] dvb-usb: bulk message failed: -22 (3/0)
[   88.334785][   T55] dw2102: command 0x0e transfer failed.
[   88.337099][   T55] dvb-usb: bulk message failed: -22 (3/0)
[   88.339460][   T55] dw2102: command 0x0e transfer failed.
[   88.343245][   T55] dvb-usb: bulk message failed: -22 (1/0)
[   88.348943][   T55] dw2102: command 0x51 transfer failed.
[   88.354125][ T7327] dvb-usb: bulk message failed: -22 (5/0)
[   88.358256][ T7327] dw2102: i2c transfer failed.
[   88.382611][   T55] DVB: Unable to find symbol ds3000_attach()
[   88.384852][   T55] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[   88.452060][   T55] rc_core: IR keymap rc-su3000 not found
[   88.454924][   T55] Registered IR keymap rc-empty
[   88.461784][   T55] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0
[   88.467678][   T55] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input7
[   88.483797][   T55] dvb-usb: schedule remote query interval to 150 msecs.
[   88.486744][   T55] dw2102: su3000_power_ctrl: 0, initialized 1
[   88.488986][   T55] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[   88.491297][ T5805] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   88.494180][   T55] usb 6-1: USB disconnect, device number 9
[   88.545279][   T55] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[   88.631507][   T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   88.651564][ T5805] usb 7-1: Using ep0 maxpacket: 8
[   88.656486][ T5805] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   88.659915][ T5805] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.663951][ T5805] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.667797][ T5805] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   88.671869][ T5805] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.676863][ T5805] usb 7-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00
[   88.680342][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.793759][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   88.796758][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[   88.800340][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[   88.805480][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[   88.809559][   T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   88.813831][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.816371][   T24] usb 5-1: Product: syz
[   88.817690][   T24] usb 5-1: Manufacturer: syz
[   88.819155][   T24] usb 5-1: SerialNumber: syz
[   88.822558][   T24] usb 5-1: config 0 descriptor??
[   89.035614][   T24] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8
[   89.040749][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.049480][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.061984][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.067689][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.091835][ T6461] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.097686][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.100948][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.107420][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.110222][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.115579][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.123027][ T5116] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.289454][ T7396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.291676][ T7387] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.335297][ T5805] usb 5-1: USB disconnect, device number 10
[   89.364048][   T42] kauditd_printk_skb: 11 callbacks suppressed
[   89.364079][   T42] audit: type=1400 audit(1786210486.849:614): avc:  denied  { append } for  pid=7402 comm="syz.1.454" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   89.375983][   T42] audit: type=1400 audit(1786210486.849:615): avc:  denied  { map } for  pid=7402 comm="syz.1.454" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   89.387020][   T42] audit: type=1400 audit(1786210486.849:616): avc:  denied  { write execute } for  pid=7402 comm="syz.1.454" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   89.431881][ T7403] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   89.436667][ T7403] block device autoloading is deprecated and will be removed.
[   89.444735][   T42] audit: type=1400 audit(1786210486.929:617): avc:  denied  { ioctl } for  pid=7402 comm="syz.1.454" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   89.907152][   T42] audit: type=1400 audit(1786210487.389:618): avc:  denied  { create } for  pid=7412 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   89.916790][   T42] audit: type=1400 audit(1786210487.399:619): avc:  denied  { getopt } for  pid=7412 comm="syz.1.457" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   90.025730][ T7425] netlink: 156 bytes leftover after parsing attributes in process `syz.1.459'.
[   90.034099][   T42] audit: type=1107 audit(1786210487.519:620): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='��OB�:���m��3T<�^��M?�V<nO�ST��
֒�5u���Aw��
�lS��vVRɨi@��=W���k���!K�p��c�џ�z��np?�'��,��m��e\��t�ٔ���N�M�
9yU��C���D4�}��ʼngk[:�_�,u��i�0	��ç�Wˆ���Fx'�&���~K���ip�'
[   90.049311][ T7425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'.
[   90.131844][   T42] audit: type=1400 audit(1786210487.609:621): avc:  denied  { write } for  pid=7426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.185953][   T42] audit: type=1400 audit(1786210487.669:622): avc:  denied  { write } for  pid=7432 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.232069][   T42] audit: type=1400 audit(1786210487.709:623): avc:  denied  { ioctl } for  pid=7434 comm="syz.0.461" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   90.258184][ T7435] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   90.260866][ T7435] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock
[   90.264585][ T7435] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   90.267050][ T7435] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock
[   90.390771][ T7440] 9p: Unknown Cache mode or invalid value f
[   90.440531][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'.
[   90.520637][ T5079] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   90.869503][ T7485] jffs2: notice: (7485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   90.983457][ T7491] macvlan2: entered promiscuous mode
[   91.304079][ T7513] Invalid source name
[   91.305456][ T7513] UBIFS error (pid: 7513): cannot open "ubifs", error -22
[   91.874811][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'.
[   92.323866][ T7572] netlink: 'syz.0.497': attribute type 4 has an invalid length.
[   92.343017][ T7572] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   93.096130][ T7578] syz.0.499: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.104892][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.0.499 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   93.104925][ T7578] Tainted: [L]=SOFTLOCKUP
[   93.104933][ T7578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.104959][ T7578] Call Trace:
[   93.104976][ T7578]  <TASK>
[   93.104986][ T7578]  dump_stack_lvl+0x100/0x190
[   93.105110][ T7578]  warn_alloc.cold+0x94/0xa8
[   93.105144][ T7578]  ? __pfx_warn_alloc+0x10/0x10
[   93.105189][ T7578]  ? kasan_save_stack+0x3f/0x50
[   93.105229][ T7578]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[   93.105250][ T7578]  ? vb2_vmalloc_alloc+0xf9/0x410
[   93.105279][ T7578]  ? __vb2_queue_alloc+0x8d5/0x1160
[   93.105308][ T7578]  ? vb2_core_create_bufs+0x5fa/0xa30
[   93.105333][ T7578]  ? vb2_create_bufs+0x40c/0x830
[   93.105357][ T7578]  ? v4l_create_bufs+0x17d/0x270
[   93.105384][ T7578]  ? __video_do_ioctl+0xb2a/0xdf0
[   93.105407][ T7578]  ? video_usercopy+0x47a/0x1730
[   93.105431][ T7578]  ? __x64_sys_ioctl+0x18e/0x210
[   93.105458][ T7578]  ? do_syscall_64+0x115/0x870
[   93.105490][ T7578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.105513][ T7578]  ? vb2_vmalloc_alloc+0x135/0x410
[   93.105532][ T7578]  __vmalloc_node_range_noprof+0x136c/0x1630
[   93.105569][ T7578]  ? vb2_vmalloc_alloc+0x135/0x410
[   93.105595][ T7578]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.105627][ T7578]  ? kasan_save_track+0x14/0x30
[   93.105649][ T7578]  ? __kasan_kmalloc+0xaa/0xb0
[   93.105668][ T7578]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[   93.105687][ T7578]  ? vb2_vmalloc_alloc+0x135/0x410
[   93.105707][ T7578]  vmalloc_user_noprof+0x9e/0xe0
[   93.105730][ T7578]  ? vb2_vmalloc_alloc+0x135/0x410
[   93.105749][ T7578]  vb2_vmalloc_alloc+0x135/0x410
[   93.105768][ T7578]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[   93.105789][ T7578]  __vb2_queue_alloc+0x8d5/0x1160
[   93.105831][ T7578]  vb2_core_create_bufs+0x5fa/0xa30
[   93.105864][ T7578]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[   93.105898][ T7578]  ? trace_contention_end+0x126/0x160
[   93.105938][ T7578]  ? __mutex_lock+0x26d/0x1bd0
[   93.105978][ T7578]  vb2_create_bufs+0x40c/0x830
[   93.106029][ T7578]  ? __pfx_vb2_create_bufs+0x10/0x10
[   93.106058][ T7578]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   93.106085][ T7578]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   93.106113][ T7578]  v4l_create_bufs+0x17d/0x270
[   93.106138][ T7578]  __video_do_ioctl+0xb2a/0xdf0
[   93.106167][ T7578]  ? __might_fault+0xc5/0x140
[   93.106186][ T7578]  ? __pfx___video_do_ioctl+0x10/0x10
[   93.106224][ T7578]  video_usercopy+0x47a/0x1730
[   93.106251][ T7578]  ? __pfx___video_do_ioctl+0x10/0x10
[   93.106274][ T7578]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   93.106337][ T7578]  ? __pfx_video_usercopy+0x10/0x10
[   93.106378][ T7578]  v4l2_ioctl+0x1bd/0x250
[   93.106403][ T7578]  ? __pfx_v4l2_ioctl+0x10/0x10
[   93.106432][ T7578]  __x64_sys_ioctl+0x18e/0x210
[   93.106463][ T7578]  do_syscall_64+0x115/0x870
[   93.106488][ T7578]  ? clear_bhb_loop+0x70/0xc0
[   93.106518][ T7578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.106539][ T7578] RIP: 0033:0x7f18b6f9e0d9
[   93.106559][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.106580][ T7578] RSP: 002b:00007f18b7d9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   93.106602][ T7578] RAX: ffffffffffffffda RBX: 00007f18b7225fa0 RCX: 00007f18b6f9e0d9
[   93.106617][ T7578] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000003
[   93.106626][ T7578] RBP: 00007f18b7035024 R08: 0000000000000000 R09: 0000000000000000
[   93.106637][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.106649][ T7578] R13: 00007f18b7226038 R14: 00007f18b7225fa0 R15: 00007fff4fa4c668
[   93.106676][ T7578]  </TASK>
[   93.106728][ T7578] Mem-Info:
[   93.244473][ T7578] active_anon:11870 inactive_anon:10 isolated_anon:0
[   93.244473][ T7578]  active_file:1748 inactive_file:39559 isolated_file:0
[   93.244473][ T7578]  unevictable:1000 dirty:19 writeback:0
[   93.244473][ T7578]  slab_reclaimable:8725 slab_unreclaimable:70859
[   93.244473][ T7578]  mapped:25623 shmem:1558 pagetables:1285
[   93.244473][ T7578]  sec_pagetables:296 bounce:0
[   93.244473][ T7578]  kernel_misc_reclaimable:0
[   93.244473][ T7578]  free:463275 free_pcp:11042 free_cma:0
[   93.258500][ T7578] Node 0 active_anon:43436kB inactive_anon:36kB active_file:6804kB inactive_file:149056kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:102492kB dirty:76kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13312kB pagetables:4848kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   93.269235][ T7578] Node 1 active_anon:4044kB inactive_anon:4kB active_file:188kB inactive_file:9180kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   93.279377][ T7578] Node 0 DMA free:14968kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:264kB local_pcp:60kB free_cma:0kB
[   93.288587][ T7578] lowmem_reserve[]: 0 1225 1225 1225 1225
[   93.290515][ T7578] Node 0 DMA32 free:196816kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43436kB inactive_anon:36kB active_file:6804kB inactive_file:149056kB unevictable:2000kB writepending:76kB zspages:452kB present:2080628kB managed:1255332kB mlocked:0kB bounce:0kB free_pcp:43276kB local_pcp:25996kB free_cma:0kB
[   93.300650][ T7578] lowmem_reserve[]: 0 0 0 0 0
[   93.302440][ T7578] Node 1 Normal free:1641316kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4044kB inactive_anon:4kB active_file:188kB inactive_file:9180kB unevictable:2000kB writepending:0kB zspages:512kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:736kB local_pcp:0kB free_cma:0kB
[   93.314150][ T7578] lowmem_reserve[]: 0 0 0 0 0
[   93.315686][ T7578] Node 0 DMA: 14*4kB (UM) 16*8kB (UM) 20*16kB (UME) 16*32kB (UM) 14*64kB (UME) 10*128kB (ME) 10*256kB (ME) 4*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 14968kB
[   93.320971][ T7578] Node 0 DMA32: 2128*4kB (UME) 1378*8kB (UME) 518*16kB (UME) 263*32kB (UME) 202*64kB (ME) 150*128kB (UME) 84*256kB (UME) 73*512kB (UME) 40*1024kB (UM) 14*2048kB (M) 0*4096kB = 196880kB
[   93.328087][ T7578] Node 1 Normal: 283*4kB (UME) 323*8kB (UME) 368*16kB (UME) 317*32kB (UME) 233*64kB (UME) 128*128kB (UME) 68*256kB (UM) 28*512kB (UM) 20*1024kB (UM) 17*2048kB (UME) 367*4096kB (UM) = 1641316kB
[   93.335482][ T7578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   93.339146][ T7578] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.342826][ T7578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   93.346536][ T7578] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.350090][ T7578] 42867 total pagecache pages
[   93.352026][ T7578] 6 pages in swap cache
[   93.353654][ T7578] Free swap  = 124592kB
[   93.355300][ T7578] Total swap = 124996kB
[   93.356998][ T7578] 1048443 pages RAM
[   93.358497][ T7578] 0 pages HighMem/MovableOnly
[   93.360355][ T7578] 285299 pages reserved
[   93.362054][ T7578] 0 pages cma reserved
[   93.975039][ T7605] netlink: 'syz.1.504': attribute type 9 has an invalid length.
[   94.168174][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'.
[   94.180654][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'.
[   94.185031][ T7608] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22)
[   94.362331][ T7614] team_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[   94.408203][   T42] kauditd_printk_skb: 35 callbacks suppressed
[   94.408261][   T42] audit: type=1400 audit(1786210491.889:659): avc:  denied  { connect } for  pid=7619 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.420236][ T5724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.429432][ T5724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.438299][ T5724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.443683][ T5724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.448863][ T5724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.484151][ T7404] usbtmc 7-1:16.0: simple usb_control_msg failed -110
[   94.498601][ T5832] usb 7-1: USB disconnect, device number 3
[   94.550171][ T7625] xt_hashlimit: size too large, truncated to 1048576
[   94.551262][   T42] audit: type=1400 audit(1786210492.029:660): avc:  denied  { connect } for  pid=7624 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   94.604012][   T42] audit: type=1400 audit(1786210492.089:661): avc:  denied  { setopt } for  pid=7624 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   94.666379][   T42] audit: type=1400 audit(1786210492.149:662): avc:  denied  { write } for  pid=7624 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   94.850649][   T42] audit: type=1326 audit(1786210492.329:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7639 comm="syz.2.515" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b6139e0d9 code=0x0
[   94.923378][ T7643] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[   94.952313][ T7643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7643 comm=syz.2.515
[   94.962547][ T7643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7643 comm=syz.2.515
[   95.018309][ T7643] veth3: entered allmulticast mode
[   95.025078][ T7643] bond2: (slave veth3): Enslaving as an active interface with a down link
[   95.041691][ T7652] macvlan2: entered promiscuous mode
[   95.044038][ T7652] macvlan2: entered allmulticast mode
[   95.046301][ T7652] bond2: entered promiscuous mode
[   95.055533][ T7652] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.058350][ T7652] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.065069][ T7652] bond2: left promiscuous mode
[   95.174645][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.177039][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.179348][ T7617] bridge_slave_0: entered allmulticast mode
[   95.182569][ T7617] bridge_slave_0: entered promiscuous mode
[   95.190134][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.193926][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.196299][ T7617] bridge_slave_1: entered allmulticast mode
[   95.198968][ T7617] bridge_slave_1: entered promiscuous mode
[   95.214924][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.219505][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.235865][ T7617] team0: Port device team_slave_0 added
[   95.239108][ T7617] team0: Port device team_slave_1 added
[   95.251369][ T1481] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   95.255644][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.258399][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.266636][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.270914][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.273163][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.281026][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.309017][ T7617] hsr_slave_0: entered promiscuous mode
[   95.311738][ T7617] hsr_slave_1: entered promiscuous mode
[   95.313986][ T7617] debugfs: 'hsr0' already exists in 'hsr'
[   95.315908][   T42] audit: type=1400 audit(1786210492.799:664): avc:  denied  { read } for  pid=7662 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   95.321875][ T7617] Cannot create hsr debugfs directory
[   95.326524][   T42] audit: type=1400 audit(1786210492.799:665): avc:  denied  { ioctl } for  pid=7662 comm="syz.1.520" path="socket:[20828]" dev="sockfs" ino=20828 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   95.391562][ T1481] usb 5-1: device descriptor read/64, error -71
[   95.432165][ T7617] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.436186][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.439141][ T7617] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.443930][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.446832][ T7617] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.450761][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.453829][ T7617] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.458953][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.474853][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.477187][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.479567][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.481993][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.515277][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.526108][ T7617] 8021q: adding VLAN 0 to HW filter on device team0
[   95.530373][  T222] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.533583][  T222] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.541126][  T222] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.544260][  T222] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.550672][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.553058][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.592006][ T7675] fuse: root generation should be zero
[   95.651318][ T1481] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   95.771059][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.782974][ T1481] usb 5-1: device descriptor read/64, error -71
[   95.815536][ T7688] block nbd0: not configured, cannot reconfigure
[   95.872459][ T7688] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   95.875374][ T7688] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.878366][ T7688] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   95.883679][ T7688] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   95.885804][ T7688] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   95.889572][ T7688] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   95.901607][ T1481] usb usb5-port1: attempt power cycle
[   95.945169][ T7617] veth0_vlan: entered promiscuous mode
[   95.950586][ T7617] veth1_vlan: entered promiscuous mode
[   95.974961][ T7617] veth0_macvtap: entered promiscuous mode
[   95.981003][ T7617] veth1_macvtap: entered promiscuous mode
[   96.000963][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.015838][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.064386][ T5798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.132116][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.141410][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.144656][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.179301][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.182727][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.201346][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.205008][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.206202][   T42] audit: type=1400 audit(1786210493.689:666): avc:  denied  { mounton } for  pid=7617 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   96.218482][   T42] audit: type=1400 audit(1786210493.689:667): avc:  denied  { mounton } for  pid=7617 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   96.251707][ T1481] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   96.276045][ T1481] usb 5-1: device descriptor read/8, error -71
[   96.286824][ T7712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'.
[   96.310328][ T7715] mmap: syz.2.527 (7715) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.398076][ T7719] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   96.410306][ T7719] bond1 (unregistering): Released all slaves
[   96.434584][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[   96.437493][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'.
[   96.441072][ T5724] Bluetooth: hci4: ACL packet for unknown connection handle 200
[   96.490210][   T42] audit: type=1400 audit(1786210493.969:668): avc:  denied  { append } for  pid=7729 comm="syz.2.532" name="uprobe_events" dev="tracefs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   96.521354][ T1481] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   96.527924][ T7733] i2c i2c-0: delete_device: Can't find device in list
[   96.552106][ T1481] usb 5-1: device descriptor read/8, error -71
[   96.558276][ T7735] qnx4: no qnx4 filesystem (no root dir).
[   96.655718][ T7752] netlink: 80 bytes leftover after parsing attributes in process `syz.4.539'.
[   96.670721][ T7752] overlayfs: upper fs does not support file handles, falling back to index=off.
[   96.671565][ T1481] usb usb5-port1: unable to enumerate USB device
[   96.681767][ T7752] evm: overlay not supported
[   96.817606][ T7756] team_slave_0: entered allmulticast mode
[   96.824149][ T7756] team_slave_0: entered promiscuous mode
[   96.859985][ T7770] syz_tun: entered allmulticast mode
[   96.867646][ T7770] lo: entered allmulticast mode
[   96.875358][ T7769] syz_tun: left allmulticast mode
[   96.955035][ T7783] CIFS: bad ip= option (.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�)
[   96.981039][ T7785] ptrace attach of "/syz-executor exec"[7786] was attempted by "/syz-executor exec"[7785]
[   97.089127][ T7799] syz.4.552 (7799): /proc/7791/oom_adj is deprecated, please use /proc/7791/oom_score_adj instead.
[   97.098409][ T7799] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   97.223253][ T7805] netlink: 'syz.2.555': attribute type 8 has an invalid length.
[   97.225918][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[   97.317206][ T7812] misc userio: The device must be registered before sending interrupts
[   97.371366][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50465 sclass=netlink_route_socket pid=7816 comm=syz.1.558
[   97.377673][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'.
[   97.426885][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'.
[   97.459758][ T7821] sl0: entered promiscuous mode
[   97.462992][ T7821] sl0: entered allmulticast mode
[   97.468435][   T36] sl0: compressed packet ignored
[   97.474680][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'.
[   97.931307][ T5724] Bluetooth: hci4: command 0x041b tx timeout
[   97.931399][ T5079] Bluetooth: hci3: command 0x0c1a tx timeout
[   97.931472][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[   97.931539][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   97.967137][ T7872] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.568'.
[   98.067915][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'.
[   98.089490][ T7877] kvm: user requested TSC rate below hardware speed
[   98.144749][ T7890] xt_l2tp: v2 doesn't support IP mode
[   98.248303][ T7896] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   98.255328][ T7896] cramfs: wrong magic
[   98.258839][ T7896] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   98.261242][ T7896] cramfs: wrong magic
[   98.278279][ T7894] syzkaller1: entered promiscuous mode
[   98.284637][ T7894] syzkaller1: entered allmulticast mode
[   98.381606][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.386343][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.388932][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.391090][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.396897][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.399278][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.401848][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.404163][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.406503][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.408978][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.415039][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.418231][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.421060][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.423660][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.426969][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.431130][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.434229][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.436831][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.439386][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.442223][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.444586][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.447139][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.449541][ T5079] Bluetooth: hci0: Zero size dump init pkt
[   98.637893][ T7913] hfs: unable to load iocharset "io#harset"
[   98.801627][ T5805] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   98.954112][ T5805] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[   98.958838][ T5805] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[   98.963845][ T5805] usb 7-1: config 0 interface 0 has no altsetting 0
[   98.971880][ T5805] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   98.975863][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   98.979336][ T5805] usb 7-1: Product: syz
[   98.981489][ T5805] usb 7-1: Manufacturer: syz
[   98.983482][ T5805] usb 7-1: SerialNumber: syz
[   98.990370][ T5805] usb 7-1: config 0 descriptor??
[   99.000113][ T5805] usb 7-1: selecting invalid altsetting 0
[   99.198374][ T7910] openvswitch: netlink: IP tunnel TTL not specified.
[   99.209713][ T1037] usb 7-1: USB disconnect, device number 4
[   99.795300][ T7919] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  100.001601][ T5079] Bluetooth: hci4: command 0x041b tx timeout
[  100.342883][    C0] sd 0:0:0:0: [sda] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  100.346333][    C0] sd 0:0:0:0: [sda] tag#18 CDB: Test Unit Ready 
[  100.371397][ T5867] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.374311][ T5867] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.377391][ T5867] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.381019][ T5867] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.654707][   T55] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  100.682473][ T7842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.741320][ T7928] netlink: 'syz.4.583': attribute type 1 has an invalid length.
[  100.743724][   T42] kauditd_printk_skb: 12 callbacks suppressed
[  100.743746][   T42] audit: type=1400 audit(1786210498.229:681): avc:  denied  { write } for  pid=7926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.803691][   T55] usb 7-1: Using ep0 maxpacket: 32
[  100.808965][   T42] audit: type=1400 audit(1786210498.289:682): avc:  denied  { write } for  pid=7941 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.811657][ T7940] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  100.816606][ T7946] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  100.824331][   T55] usb 7-1: unable to get BOS descriptor or descriptor too short
[  100.828331][ T7940] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  100.834781][   T55] usb 7-1: string descriptor 0 read error: -22
[  100.837364][   T55] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  100.841089][   T55] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3
[  100.860947][   T55] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  100.868361][   T55] dw2102: su3000_power_ctrl: 1, initialized 0
[  100.870793][   T55] dvb-usb: bulk message failed: -22 (2/0)
[  100.882807][   T42] audit: type=1400 audit(1786210498.359:683): avc:  denied  { write } for  pid=7953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.882923][   T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  100.895116][   T55] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  100.904191][   T55] usb 7-1: media controller created
[  100.905623][   T42] audit: type=1400 audit(1786210498.389:684): avc:  denied  { write } for  pid=7950 comm="syz.1.587" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  100.906943][   T55] dvb-usb: bulk message failed: -22 (6/0)
[  100.914422][   T42] audit: type=1400 audit(1786210498.389:685): avc:  denied  { open } for  pid=7950 comm="syz.1.587" path="/134/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  100.915857][   T55] dw2102: i2c transfer failed.
[  100.927527][   T55] dvb-usb: bulk message failed: -22 (6/0)
[  100.930020][   T55] dw2102: i2c transfer failed.
[  100.932177][   T55] dvb-usb: bulk message failed: -22 (6/0)
[  100.934531][   T55] dw2102: i2c transfer failed.
[  100.935925][   T42] audit: type=1400 audit(1786210498.409:686): avc:  denied  { ioctl } for  pid=7950 comm="syz.1.587" path="/134/file0/file0" dev="fuse" ino=2 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  100.936508][   T55] dvb-usb: bulk message failed: -22 (6/0)
[  100.952772][   T55] dw2102: i2c transfer failed.
[  100.955005][   T55] dvb-usb: bulk message failed: -22 (6/0)
[  100.957508][   T55] dw2102: i2c transfer failed.
[  100.958111][   T42] audit: type=1400 audit(1786210498.429:687): avc:  denied  { write } for  pid=7959 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.960187][   T55] dvb-usb: bulk message failed: -22 (6/0)
[  100.977958][   T55] dw2102: i2c transfer failed.
[  100.980075][   T55] dvb-usb: MAC address: 02:02:02:02:02:02
[  100.992568][   T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.026577][ T7964] CIFS mount error: No usable UNC path provided in device string!
[  101.026577][ T7964] 
[  101.030449][   T55] dvb-usb: bulk message failed: -22 (3/0)
[  101.030699][ T7964] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  101.033218][   T55] dw2102: command 0x0e transfer failed.
[  101.035370][ T7968] FAT-fs (nullb0): bogus number of reserved sectors
[  101.035396][ T7968] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  101.042877][   T55] dvb-usb: bulk message failed: -22 (3/0)
[  101.044839][   T55] dw2102: command 0x0e transfer failed.
[  101.145507][   T42] audit: type=1400 audit(101.071:688): avc:  denied  { wake_alarm } for  pid=7979 comm="syz.1.594" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  101.252902][ T5805] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  101.362183][   T55] dvb-usb: bulk message failed: -22 (3/0)
[  101.365783][   T55] dw2102: command 0x0e transfer failed.
[  101.369394][   T55] dvb-usb: bulk message failed: -22 (3/0)
[  101.376426][   T55] dw2102: command 0x0e transfer failed.
[  101.378540][   T55] dvb-usb: bulk message failed: -22 (1/0)
[  101.380865][   T55] dw2102: command 0x51 transfer failed.
[  101.384576][   T42] audit: type=1400 audit(101.311:689): avc:  denied  { connect } for  pid=7997 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  101.412336][ T8003] jffs2: notice: (8003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  101.425049][   T55] DVB: Unable to find symbol ds3000_attach()
[  101.427708][   T55] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  101.429274][ T8003] __nla_validate_parse: 8 callbacks suppressed
[  101.429285][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'.
[  101.435528][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.436330][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'.
[  101.439145][ T5805] usb 5-1: config 0 has no interfaces?
[  101.447972][ T5805] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  101.450102][   T42] audit: type=1400 audit(101.371:690): avc:  denied  { mounton } for  pid=8002 comm="syz.2.600" path="/176/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  101.453858][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  101.465689][ T5805] usb 5-1: Product: syz
[  101.467214][ T5805] usb 5-1: SerialNumber: syz
[  101.478596][ T5805] usb 5-1: config 0 descriptor??
[  101.512525][   T55] rc_core: IR keymap rc-su3000 not found
[  101.514509][   T55] Registered IR keymap rc-empty
[  101.516710][   T55] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  101.535097][   T55] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input10
[  101.553462][   T55] dvb-usb: schedule remote query interval to 150 msecs.
[  101.558424][   T55] dw2102: su3000_power_ctrl: 0, initialized 1
[  101.560834][   T55] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  101.580111][   T55] usb 7-1: USB disconnect, device number 5
[  101.595600][ T8014] fuseblk: Bad value for 'fd'
[  101.667974][   T55] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  101.743358][ T8017] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  101.750987][ T8017] netlink: 'syz.4.601': attribute type 34 has an invalid length.
[  101.754331][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  101.861550][ T8020] block nbd4: NBD_DISCONNECT
[  101.904982][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.914681][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.998380][ T8027] syzkaller0: entered promiscuous mode
[  102.000319][ T8027] syzkaller0: entered allmulticast mode
[  102.003848][ T8027] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  102.010349][ T1481] usb 5-1: USB disconnect, device number 15
[  102.091291][ T5079] Bluetooth: hci4: command 0x041b tx timeout
[  102.196368][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'.
[  102.243089][ T8014] overlayfs: statfs failed on './file0'
[  102.489374][ T8051] netlink: 'syz.4.612': attribute type 1 has an invalid length.
[  103.135535][ T8093] bond1: Unable to set up delay as MII monitoring is disabled
[  103.140581][ T8093] bond1 (unregistering): Released all slaves
[  103.642800][ T8118] pim6reg9: entered allmulticast mode
[  103.720562][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'.
[  104.173582][ T5079] Bluetooth: hci4: command 0x041b tx timeout
[  104.197364][ T8134] 9pnet_fd: p9_fd_create_tcp (8134): problem connecting socket to 127.0.0.1
[  104.218697][ T8138] netlink: 'syz.2.637': attribute type 4 has an invalid length.
[  104.226709][ T8138] netlink: 'syz.2.637': attribute type 4 has an invalid length.
[  104.234098][ T8138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8138 comm=syz.2.637
[  104.272595][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  104.278246][ T8147] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size.
[  104.325308][ T8150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8150 comm=syz.4.642
[  104.337753][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'.
[  104.342165][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.642'.
[  104.372488][ T5867] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.376637][ T5867] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.379563][ T5867] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.382477][ T5867] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.432051][ T8161] warning: `syz.1.646' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.450917][ T8163] rdma_op ffff88805b2011f0 conn xmit_rdma 0000000000000000
[  104.503949][ T8158] syz.4.645 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  104.508783][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.509452][ T8165] tmpfs: Cannot disable swap on remount
[  104.511419][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511451][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511464][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511497][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511510][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511522][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511535][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511547][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.511559][ T1037] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0
[  104.519253][ T1037] hid-generic 0000:0000:0004.0002: hidraw1: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  104.572526][ T8167] fido_id[8167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  104.657705][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'.
[  104.680405][ T8173] macvlan0: entered allmulticast mode
[  104.685349][ T8173] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[  104.804978][   T55] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  104.910738][ T8204] netlink: Unknown conntrack attr (type=7430, max=9)
[  104.914048][ T8204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.919774][ T8205] o2cb: This node has not been configured.
[  104.922440][ T8205] o2cb: Cluster check failed. Fix errors before retrying.
[  104.925317][ T8205] (syz.4.661,8205,0):user_dlm_register:674 ERROR: status = -22
[  104.929053][ T8205] (syz.4.661,8205,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain"
[  104.929273][ T8206] netlink: 'syz.1.658': attribute type 2 has an invalid length.
[  104.942854][ T8212] 8021q: VLANs not supported on ip6gre0
[  104.950291][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[  104.995793][ T8218] overlayfs: failed to get index nlink (file0/file1, err=-61)
[  105.011788][ T5812] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  105.176475][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.184281][ T5812] usb 7-1: config 0 has no interfaces?
[  105.194233][ T5812] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  105.198311][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  105.201737][ T5812] usb 7-1: Product: syz
[  105.203551][ T5812] usb 7-1: SerialNumber: syz
[  105.208734][ T5812] usb 7-1: config 0 descriptor??
[  105.249541][ T8255] netlink: 'syz.0.672': attribute type 1 has an invalid length.
[  105.267524][ T8257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8257 comm=syz.4.673
[  105.415192][   T55] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  105.571327][   T24] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  105.585543][ T8270] netlink: 'syz.4.678': attribute type 11 has an invalid length.
[  105.624656][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.629304][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.683819][ T5867] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  105.690344][ T7707] usb 7-1: USB disconnect, device number 6
[  105.722304][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[  105.852317][   T24] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  105.867319][ T8280] dummy0: entered allmulticast mode
[  105.875332][ T8279] dummy0: left allmulticast mode
[  105.944265][   T42] kauditd_printk_skb: 100 callbacks suppressed
[  105.944286][   T42] audit: type=1400 audit(105.861:791): avc:  denied  { set_context_mgr } for  pid=8281 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  106.011777][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[  106.014057][   T24] usb usb5-port1: attempt power cycle
[  106.048740][   T42] audit: type=1400 audit(105.971:792): avc:  denied  { read } for  pid=8286 comm="syz.4.683" dev="nsfs" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  106.056043][   T42] audit: type=1400 audit(105.971:793): avc:  denied  { open } for  pid=8286 comm="syz.4.683" path="net:[4026532875]" dev="nsfs" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  106.063039][   T42] audit: type=1400 audit(105.971:794): avc:  denied  { getopt } for  pid=8286 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  106.138638][ T8291] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[  106.144362][   T42] audit: type=1400 audit(106.071:795): avc:  denied  { relabelto } for  pid=8290 comm="syz.4.685" name="49" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  106.154043][   T42] audit: type=1400 audit(106.071:796): avc:  denied  { associate } for  pid=8290 comm="syz.4.685" name="49" dev="tmpfs" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0"
[  106.168413][   T42] audit: type=1400 audit(106.091:797): avc:  denied  { write } for  pid=7617 comm="syz-executor" name="49" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  106.179728][   T42] audit: type=1400 audit(106.091:798): avc:  denied  { remove_name } for  pid=7617 comm="syz-executor" name="binderfs" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  106.190778][   T42] audit: type=1400 audit(106.091:799): avc:  denied  { write } for  pid=7617 comm="syz-executor" name="49" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  106.201413][   T42] audit: type=1400 audit(106.091:800): avc:  denied  { write } for  pid=7617 comm="syz-executor" name="49" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  106.252061][ T5079] Bluetooth: hci4: command 0x041b tx timeout
[  106.351730][   T24] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  106.375057][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[  106.501323][   T24] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  106.522192][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[  106.525896][   T24] usb usb5-port1: unable to enumerate USB device
[  106.721594][   T13] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  106.729137][   T13] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  106.831548][ T7707] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  106.993037][ T7707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.997688][ T7707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.001958][ T7707] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  107.007401][ T7707] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  107.011881][ T7707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.017960][ T7707] usb 7-1: config 0 descriptor??
[  107.134027][ T5812] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  107.193932][ T8329] __nla_validate_parse: 5 callbacks suppressed
[  107.193953][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'.
[  107.200649][ T8329] tmpfs: Bad value for 'mpol'
[  107.240864][ T7707] usbhid 7-1:0.0: can't add hid device: -71
[  107.249462][ T7707] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  107.254693][ T7707] usb 7-1: USB disconnect, device number 7
[  107.501456][ T6049] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  107.653099][ T6049] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.656461][ T6049] usb 9-1: config 0 has no interfaces?
[  107.659342][ T6049] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  107.662577][ T6049] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  107.665054][ T6049] usb 9-1: Product: syz
[  107.666398][ T6049] usb 9-1: SerialNumber: syz
[  107.669506][ T6049] usb 9-1: config 0 descriptor??
[  108.076553][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.080523][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.089165][ T4417] usb 9-1: USB disconnect, device number 2
[  108.239269][ T8357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.321368][ T5079] Bluetooth: hci4: command 0x041b tx timeout
[  108.438135][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'.
[  108.547749][ T8380] ip6t_srh: unknown srh match flags  4015
[  108.626351][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'.
[  108.668115][ T8389] netlink: 'syz.4.714': attribute type 23 has an invalid length.
[  109.101431][ T6049] playstation 0003:054C:05C4.0003: hidraw1: USB HID v0.01 Device [syz1] on syz1
[  109.135514][ T6049] playstation 0003:054C:05C4.0003: Invalid byte count transferred, expected 16 got 0
[  109.139945][ T6049] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 pairing info: -22
[  109.143991][ T6049] playstation 0003:054C:05C4.0003: Failed to get MAC address from DualShock4
[  109.147603][ T6049] playstation 0003:054C:05C4.0003: Failed to create dualshock4.
[  109.168701][ T6049] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22
[  109.229777][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'.
[  109.351867][ T8457] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  109.356095][ T8457] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock
[  109.358825][ T8457] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  109.362095][ T8457] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock
[  109.423333][ T8463] binder: 8461:8463 ioctl c0306201 200000000240 returned -14
[  109.430939][ T8463] binder: 8461:8463 ioctl c0306201 0 returned -14
[  109.440533][ T8463] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  109.604893][ T8477] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  109.730331][ T8487] input: syz0 as /devices/virtual/input/input12
[  109.900065][ T8493] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  109.951646][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'.
[  109.987363][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.028475][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.044273][ T8517] block nbd0: NBD_DISCONNECT
[  110.217984][ T8535] Invalid source name
[  110.219819][ T8535] UBIFS error (pid: 8535): cannot open "/dev/sg0", error -22
[  110.260198][ T8537] rdma_op ffff8880587329f0 conn xmit_rdma 0000000000000000
[  110.267081][ T8537] netlink: 'syz.0.759': attribute type 4 has an invalid length.
[  110.273699][ T8537] netlink: 'syz.0.759': attribute type 4 has an invalid length.
[  110.281334][ T5812] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  110.321856][ T5079] Bluetooth: hci3: unexpected event for opcode 0x2041
[  110.326726][ T8546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8546 comm=syz.0.762
[  110.340400][ T8550] netlink: 96 bytes leftover after parsing attributes in process `syz.4.763'.
[  110.372009][ T8550] bond3 (unregistering): Released all slaves
[  110.434321][ T5812] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.437775][ T5812] usb 6-1: config 0 has no interfaces?
[  110.440819][ T5812] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  110.444162][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  110.447099][ T5812] usb 6-1: Product: syz
[  110.448543][ T5812] usb 6-1: SerialNumber: syz
[  110.452760][ T5812] usb 6-1: config 0 descriptor??
[  110.481368][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  110.522201][ T8555] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  110.524862][ T8555] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  110.527603][ T8555] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  110.530401][ T8555] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  110.616534][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'.
[  110.859756][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.869963][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.880803][ T5805] usb 6-1: USB disconnect, device number 10
[  111.040240][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[  111.046606][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'.
[  111.049846][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[  111.188338][   T42] kauditd_printk_skb: 37 callbacks suppressed
[  111.188359][   T42] audit: type=1326 audit(111.111:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.2.773" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b6139e0d9 code=0x0
[  111.418918][   T42] audit: type=1400 audit(111.341:839): avc:  denied  { create } for  pid=8627 comm="syz.1.776" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.421052][ T8628] SELinux:  Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped).
[  111.425962][   T42] audit: type=1400 audit(111.341:840): avc:  denied  { unlink } for  pid=8627 comm="syz.1.776" name="file0" dev="tmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.431340][ T5805] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  111.434131][ T8630] hugetlbfs: Bad value for 'uid'
[  111.434149][ T8630] hugetlbfs: Bad value for 'uid'
[  111.437843][   T42] audit: type=1400 audit(111.341:841): avc:  denied  { create } for  pid=8627 comm="syz.1.776" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  111.451992][   T42] audit: type=1400 audit(111.351:842): avc:  denied  { relabelto } for  pid=8627 comm="syz.1.776" name="file0" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0"
[  111.467192][   T42] audit: type=1400 audit(111.351:843): avc:  denied  { associate } for  pid=8627 comm="syz.1.776" name="file0" dev="tmpfs" ino=929 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0"
[  111.475256][ T8634] netlink: 'syz.1.778': attribute type 1 has an invalid length.
[  111.491324][ T8634] bond1: entered promiscuous mode
[  111.493332][ T8634] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.527431][ T8634] bond1: (slave bridge2): making interface the new active one
[  111.530644][ T8634] bridge2: entered promiscuous mode
[  111.536128][ T8634] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  111.562128][ T8637] batadv0: entered promiscuous mode
[  111.565223][ T8637] macsec1: entered promiscuous mode
[  111.567046][ T8637] macsec1: entered allmulticast mode
[  111.568752][ T8637] batadv0: entered allmulticast mode
[  111.572010][ T8637] 8021q: adding VLAN 0 to HW filter on device macsec1
[  111.574860][ T8637] batadv0: left allmulticast mode
[  111.576556][ T8637] batadv0: left promiscuous mode
[  111.616274][ T5805] usb 5-1: not running at top speed; connect to a high speed hub
[  111.620878][ T5805] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  111.626501][ T5805] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40
[  111.629469][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.632419][ T5805] usb 5-1: Product: syz
[  111.633818][ T5805] usb 5-1: Manufacturer: ┟퀆ⱟ啕ᜡ紛㇦ྴ棬刊膽趘顭껹ꃤᒑ뎮ꄮ槱삔ᜤ䖈ᙸ䣜犥蹔ꯛ傘谊㒅꺋拲控㌡岒䠑ᘶ⸁兩禪쫶⚞⇪舼Ⱪ姭ᛑ龯隹廗᷅ꨈ鑼䙀믱㒠珥߬Ƀ⧆곫䘸㛥皿㞘燖貃峧篤酏ᖎ엧䏺늧࿓⧔朊胄쮹땊鶫籾諡
[  111.643280][ T5805] usb 5-1: SerialNumber: syz
[  111.727632][ T8641] unsupported nlmsg_type 40
[  111.759430][ T8645] netlink: 'syz.1.783': attribute type 12 has an invalid length.
[  111.766545][   T42] audit: type=1400 audit(111.691:844): avc:  denied  { write } for  pid=8644 comm="syz.4.784" name="functions" dev="configfs" ino=15922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  111.774777][   T42] audit: type=1400 audit(111.701:845): avc:  denied  { write } for  pid=8644 comm="syz.4.784" name="uac2.usb0" dev="configfs" ino=23359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  111.783493][   T42] audit: type=1400 audit(111.701:846): avc:  denied  { create } for  pid=8644 comm="syz.4.784" name="p_volume_present" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[  111.789780][   T42] audit: type=1800 audit(111.701:847): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.784" name="p_volume_present" dev="configfs" ino=23360 res=0 errno=0
[  111.853264][ T5805] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  111.858231][ T5805] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  111.904096][ T1037] usb 5-1: USB disconnect, device number 20
[  112.062011][ T5812] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  112.117885][ T5867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.122221][ T5867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.213213][ T5812] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.222695][ T5812] usb 6-1: config 0 has no interfaces?
[  112.225282][ T5724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.226678][ T5812] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  112.235503][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  112.238077][ T5724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.238885][ T5812] usb 6-1: Product: syz
[  112.246627][ T5812] usb 6-1: SerialNumber: syz
[  112.249168][ T5724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.253434][ T5812] usb 6-1: config 0 descriptor??
[  112.256335][ T5724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.262298][ T5724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.317048][ T5867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.320602][ T5867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.405676][ T5867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.409320][ T5867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.508636][ T5867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.516491][ T5867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.562044][ T5724] Bluetooth: hci3: command 0x0c1a tx timeout
[  112.563724][ T5079] Bluetooth: hci2: command 0x0c1a tx timeout
[  112.563924][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.627845][ T8705] __nla_validate_parse: 4 callbacks suppressed
[  112.627860][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'.
[  112.666679][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.670534][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  112.674779][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  112.676936][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.685423][ T8705] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  112.690757][ T8705] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  112.694897][   T55] usb 6-1: USB disconnect, device number 11
[  112.817678][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'.
[  112.837525][ T5867] bridge_slave_1: left allmulticast mode
[  112.840793][ T5867] bridge_slave_1: left promiscuous mode
[  112.844395][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.850845][ T5867] bridge_slave_0: left allmulticast mode
[  112.853658][ T5867] bridge_slave_0: left promiscuous mode
[  112.857610][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.864189][ T5867] pim6reg9: left allmulticast mode
[  112.989649][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.997640][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.004805][ T5867] bond0 (unregistering): Released all slaves
[  113.009923][ T5867] bond1 (unregistering): Released all slaves
[  113.021077][ T5867] bond2 (unregistering): Released all slaves
[  113.088984][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'.
[  113.124542][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.126916][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.129298][ T8665] bridge_slave_0: entered allmulticast mode
[  113.132671][ T8665] bridge_slave_0: entered promiscuous mode
[  113.135940][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.138244][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.140652][ T8665] bridge_slave_1: entered allmulticast mode
[  113.143516][ T8665] bridge_slave_1: entered promiscuous mode
[  113.191503][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.249351][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  113.323230][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  113.352499][ T8665] team0: Port device team_slave_0 added
[  113.375484][ T8665] team0: Port device team_slave_1 added
[  113.504530][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.510581][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.531276][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.535969][ T5434] 8021q: adding VLAN 0 to HW filter on device eth2
[  113.542856][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.547325][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.559336][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.590521][ T8765] kvm: emulating exchange as write
[  113.619658][ T8665] hsr_slave_0: entered promiscuous mode
[  113.622453][ T8665] hsr_slave_1: entered promiscuous mode
[  113.624637][ T8665] debugfs: 'hsr0' already exists in 'hsr'
[  113.626434][ T8665] Cannot create hsr debugfs directory
[  113.794025][ T5867] hsr_slave_0: left promiscuous mode
[  113.796615][ T5867] hsr_slave_1: left promiscuous mode
[  113.799041][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.802614][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.814506][ T5867] veth1_macvtap: left promiscuous mode
[  113.817812][ T5867] veth0_macvtap: left promiscuous mode
[  113.819707][ T5867] veth1_vlan: left promiscuous mode
[  113.821692][ T5867] veth0_vlan: left promiscuous mode
[  113.963246][   T55] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  113.995173][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  113.999741][ T8794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8794 comm=syz.1.811
[  114.009371][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  114.065952][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'.
[  114.104126][ T5434] 8021q: adding VLAN 0 to HW filter on device eth3
[  114.115683][   T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.119505][   T55] usb 7-1: config 0 has no interfaces?
[  114.124573][   T55] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  114.128565][   T55] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  114.132232][   T55] usb 7-1: Product: syz
[  114.134013][   T55] usb 7-1: SerialNumber: syz
[  114.143398][   T55] usb 7-1: config 0 descriptor??
[  114.172075][ T8665] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.183193][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  114.186929][ T8665] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.203663][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  114.222366][ T8665] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  114.245423][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  114.248754][ T8665] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  114.261623][ T8665] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  114.325051][ T5079] Bluetooth: hci1: command tx timeout
[  114.332674][ T8813] overlayfs: missing 'lowerdir'
[  114.366818][ T5434] 8021q: adding VLAN 0 to HW filter on device eth4
[  114.379778][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.396645][ T8665] 8021q: adding VLAN 0 to HW filter on device team0
[  114.404755][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.407147][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.412915][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.415316][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.555310][ T5434] 8021q: adding VLAN 0 to HW filter on device eth5
[  114.558125][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.563313][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.573018][   T55] usb 7-1: USB disconnect, device number 8
[  114.709801][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.916357][ T8665] veth0_vlan: entered promiscuous mode
[  114.924505][ T8665] veth1_vlan: entered promiscuous mode
[  114.950912][ T8665] veth0_macvtap: entered promiscuous mode
[  114.957153][ T8665] veth1_macvtap: entered promiscuous mode
[  114.969234][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.979014][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.035305][ T5867] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.045221][ T5867] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.082125][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.085384][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.102501][ T8321] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.105351][ T8321] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.131804][ T8855] binder: 8854:8855 ioctl c0306201 200000000080 returned -14
[  115.137100][ T8855] binder: 8854:8855 ioctl c0306201 2000000003c0 returned -14
[  115.138768][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.144373][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.262285][ T8866] netlink: 23 bytes leftover after parsing attributes in process `syz.2.826'.
[  115.266605][ T8866] netlink: 'syz.2.826': attribute type 20 has an invalid length.
[  115.309041][ T8870] netlink: 'syz.5.828': attribute type 1 has an invalid length.
[  115.327224][ T8870] gretap1: entered allmulticast mode
[  115.542109][ T8894] ./cgroup: Can't lookup blockdev
[  115.682038][ T7707] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  115.815537][ T8913] netlink: 52 bytes leftover after parsing attributes in process `syz.0.839'.
[  115.832394][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.836162][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.865208][ T7707] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.869025][ T7707] usb 10-1: config 0 has no interfaces?
[  115.879214][ T7707] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  115.884978][ T7707] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  115.890648][ T7707] usb 10-1: Product: syz
[  115.892914][ T7707] usb 10-1: SerialNumber: syz
[  115.901563][ T7707] usb 10-1: config 0 descriptor??
[  116.249192][ T8925] netlink: 'syz.1.843': attribute type 5 has an invalid length.
[  116.315345][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.319441][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.328956][ T4417] usb 10-1: USB disconnect, device number 2
[  116.402321][ T5079] Bluetooth: hci1: command tx timeout
[  116.646694][ T8935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.846'.
[  116.680619][   T42] kauditd_printk_skb: 226 callbacks suppressed
[  116.680641][   T42] audit: type=1400 audit(116.601:1074): avc:  denied  { write } for  pid=8939 comm="syz.0.847" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  116.727847][   T42] audit: type=1400 audit(116.651:1075): avc:  denied  { execute } for  pid=8944 comm="syz.2.850" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  116.804377][ T8953] misc userio: Begin command sent, but we're already running
[  116.921634][   T42] audit: type=1326 audit(116.851:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.5.857" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f120939e0d9 code=0x0
[  117.200790][ T8665] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers
[  117.208398][ T8665] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers
[  117.214817][   T42] audit: type=1400 audit(117.141:1077): avc:  denied  { ioctl } for  pid=8981 comm="syz.1.862" path="socket:[26514]" dev="sockfs" ino=26514 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.227172][   T42] audit: type=1400 audit(117.151:1078): avc:  denied  { create } for  pid=8983 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  117.244649][ T5079] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  117.247129][ T5079] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  117.367545][ T8995] sctp: [Deprecated]: syz.0.867 (pid 8995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.367545][ T8995] Use struct sctp_sack_info instead
[  117.455981][ T9004] xt_recent: Unsupported userspace flags (000000b2)
[  117.488506][   T42] audit: type=1400 audit(117.411:1079): avc:  denied  { write } for  pid=9005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.541556][   T42] audit: type=1400 audit(117.471:1080): avc:  denied  { write } for  pid=9010 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.560340][   T42] audit: type=1400 audit(117.481:1081): avc:  denied  { ioctl } for  pid=9012 comm="syz.0.871" path="ipc:[4026532868]" dev="nsfs" ino=4026532868 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  117.789365][ T9018] block nbd0: shutting down sockets
[  118.331460][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  118.349726][ T9038] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  118.355812][   T42] audit: type=1400 audit(118.281:1082): avc:  denied  { write } for  pid=9037 comm="syz.1.877" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  118.358989][ T9038] CUSE: info not properly terminated
[  118.364575][   T42] audit: type=1400 audit(118.281:1083): avc:  denied  { open } for  pid=9037 comm="syz.1.877" path="/tracing/events/kvm/kvm_hv_stimer_cleanup/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  118.620535][ T8321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.755797][ T8321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.807792][ T5724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.815834][ T5724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.818985][ T5724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.830321][ T5724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.835964][ T5724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.933439][ T8321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.034319][ T8321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.241315][ T1481] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  119.250982][ T9113] netlink: 'syz.2.891': attribute type 10 has an invalid length.
[  119.270502][ T9113] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  119.278340][ T9113] usb usb9: usbfs: process 9113 (syz.2.891) did not claim interface 0 before use
[  119.339420][ T8321] bridge_slave_1: left allmulticast mode
[  119.341295][ T8321] bridge_slave_1: left promiscuous mode
[  119.344593][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.353497][ T8321] bridge_slave_0: left allmulticast mode
[  119.355501][ T8321] bridge_slave_0: left promiscuous mode
[  119.357354][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.393211][ T1481] usb 5-1: too many configurations: 248, using maximum allowed: 8
[  119.396879][ T1481] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  119.399583][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.402994][ T1481] usb 5-1: config 0 has no interfaces?
[  119.405546][ T1481] usb 5-1: config index 1 descriptor too short (expected 28277, got 36)
[  119.408230][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.411673][ T1481] usb 5-1: config 0 has no interfaces?
[  119.414188][ T1481] usb 5-1: config index 2 descriptor too short (expected 28277, got 36)
[  119.417349][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.420521][ T1481] usb 5-1: config 0 has no interfaces?
[  119.423593][ T1481] usb 5-1: config index 3 descriptor too short (expected 28277, got 36)
[  119.426326][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.429529][ T1481] usb 5-1: config 0 has no interfaces?
[  119.432241][ T1481] usb 5-1: config index 4 descriptor too short (expected 28277, got 36)
[  119.434896][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.438030][ T1481] usb 5-1: config 0 has no interfaces?
[  119.440505][ T1481] usb 5-1: config index 5 descriptor too short (expected 28277, got 36)
[  119.443728][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.446923][ T1481] usb 5-1: config 0 has no interfaces?
[  119.456040][ T1481] usb 5-1: config index 6 descriptor too short (expected 28277, got 36)
[  119.458704][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.462129][ T1481] usb 5-1: config 0 has no interfaces?
[  119.464755][ T1481] usb 5-1: config index 7 descriptor too short (expected 28277, got 36)
[  119.467538][ T1481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.470826][ T1481] usb 5-1: config 0 has no interfaces?
[  119.474013][ T1481] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  119.476928][ T1481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.481726][ T1481] usb 5-1: config 0 descriptor??
[  119.505342][ T8321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.511707][ T8321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.518062][ T8321] bond0 (unregistering): Released all slaves
[  119.572007][ T4417] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  119.666817][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.669249][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.671808][ T9073] bridge_slave_0: entered allmulticast mode
[  119.674732][ T9073] bridge_slave_0: entered promiscuous mode
[  119.678311][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.682934][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.685432][ T9073] bridge_slave_1: entered allmulticast mode
[  119.688324][ T9073] bridge_slave_1: entered promiscuous mode
[  119.715356][ T1481] usb 5-1: string descriptor 0 read error: -71
[  119.716343][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.722427][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.724170][ T4417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.725929][ T1481] usb 5-1: USB disconnect, device number 21
[  119.731740][ T4417] usb 7-1: config 0 has no interfaces?
[  119.735496][ T4417] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  119.738745][ T4417] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  119.741966][ T4417] usb 7-1: Product: syz
[  119.743447][ T4417] usb 7-1: SerialNumber: syz
[  119.752457][ T4417] usb 7-1: config 0 descriptor??
[  119.769960][ T5434] 8021q: adding VLAN 0 to HW filter on device eth6
[  119.785526][ T9073] team0: Port device team_slave_0 added
[  119.789568][ T9073] team0: Port device team_slave_1 added
[  119.818501][ T9138] __nla_validate_parse: 3 callbacks suppressed
[  119.818515][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  119.826609][ T9138] l2tp_ppp: sess 2/0: no socket in recv
[  119.852852][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.855109][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.863510][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.867874][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.870087][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.877901][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.912538][ T9073] hsr_slave_0: entered promiscuous mode
[  119.914879][ T9073] hsr_slave_1: entered promiscuous mode
[  119.916914][ T9073] debugfs: 'hsr0' already exists in 'hsr'
[  119.918706][ T9073] Cannot create hsr debugfs directory
[  119.924501][ T8321] hsr_slave_0: left promiscuous mode
[  119.926650][ T8321] hsr_slave_1: left promiscuous mode
[  119.928694][ T8321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.931077][ T8321] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.935723][ T8321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.938045][ T8321] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.948869][ T8321] veth1_macvtap: left promiscuous mode
[  119.950637][ T8321] veth0_macvtap: left promiscuous mode
[  119.952531][ T8321] veth1_vlan: left promiscuous mode
[  119.954329][ T8321] veth0_vlan: left promiscuous mode
[  120.156650][ T8321] team0 (unregistering): Port device team_slave_1 removed
[  120.164389][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.168017][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.168487][ T8321] team0 (unregistering): Port device team_slave_0 removed
[  120.177006][ T5832] usb 7-1: USB disconnect, device number 9
[  120.310732][ T9157] kvm: user requested TSC rate below hardware speed
[  120.317285][ T9157] program syz.0.899 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.527942][ T5434] 8021q: adding VLAN 0 to HW filter on device eth7
[  120.529449][ T9175] random: crng reseeded on system resumption
[  120.577157][ T9073] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  120.603029][ T9073] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  120.606384][ T9073] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  120.646153][ T9073] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  120.651587][ T9073] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  120.663572][ T9073] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  120.666934][ T9073] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  120.673594][ T9073] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  120.695997][ T9183] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0)
[  120.699452][ T9183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.778336][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.789369][ T9073] 8021q: adding VLAN 0 to HW filter on device team0
[  120.796886][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.799753][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.807048][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.807377][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  120.809935][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.865113][ T5434] 8021q: adding VLAN 0 to HW filter on device eth8
[  120.892085][ T5079] Bluetooth: hci1: command tx timeout
[  121.071896][ T5434] 8021q: adding VLAN 0 to HW filter on device eth9
[  121.134705][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.191368][ T4417] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  121.275563][ T9073] veth0_vlan: entered promiscuous mode
[  121.282318][ T9073] veth1_vlan: entered promiscuous mode
[  121.302409][ T9073] veth0_macvtap: entered promiscuous mode
[  121.310788][ T9073] veth1_macvtap: entered promiscuous mode
[  121.321035][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.327424][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.358481][ T4417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.368299][ T4417] usb 7-1: config 0 has no interfaces?
[  121.371306][ T8321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.374325][ T8321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.382021][ T4417] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  121.385911][ T4417] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  121.393471][ T4417] usb 7-1: Product: syz
[  121.395351][ T4417] usb 7-1: SerialNumber: syz
[  121.399718][ T4417] usb 7-1: config 0 descriptor??
[  121.400891][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.411307][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.429193][  T603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.432395][  T603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.461309][ T8321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.465208][ T8321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.493071][ T9248] netlink: 'syz.6.885': attribute type 2 has an invalid length.
[  121.598257][ T9253] lo speed is unknown, defaulting to 1000
[  121.601891][ T9253] lo speed is unknown, defaulting to 1000
[  121.613622][ T9253] lo speed is unknown, defaulting to 1000
[  121.620714][ T9253] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  121.630306][ T9253] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  121.637798][ T9253] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  121.647587][ T9253] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.661895][ T9253] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  121.692545][ T9253] lo speed is unknown, defaulting to 1000
[  121.697654][ T9253] lo speed is unknown, defaulting to 1000
[  121.701005][ T9253] lo speed is unknown, defaulting to 1000
[  121.703769][ T9253] lo speed is unknown, defaulting to 1000
[  121.707694][ T9253] lo speed is unknown, defaulting to 1000
[  121.712845][   T42] kauditd_printk_skb: 17 callbacks suppressed
[  121.712865][   T42] audit: type=1400 audit(121.641:1101): avc:  denied  { lock } for  pid=9254 comm="syz.0.917" path="socket:[30112]" dev="sockfs" ino=30112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  121.812993][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.818119][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.825420][ T5832] usb 7-1: USB disconnect, device number 10
[  121.857004][ T9277] netlink: 'syz.6.924': attribute type 2 has an invalid length.
[  121.878099][ T9277] : entered promiscuous mode
[  121.893617][   T42] audit: type=1400 audit(121.821:1102): avc:  denied  { write } for  pid=9276 comm="syz.6.924" name="ports" dev="configfs" ino=5415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.899989][ T9277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.907707][ T9277] netlink: 'syz.6.924': attribute type 10 has an invalid length.
[  121.910556][   T42] audit: type=1800 audit(121.821:1103): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.924" name="addr_trsvcid" dev="configfs" ino=31830 res=0 errno=0
[  121.916185][ T9277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.919655][   T42] audit: type=1400 audit(121.821:1104): avc:  denied  { write } for  pid=9276 comm="syz.6.924" name="subsystems" dev="configfs" ino=31826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.932050][   T42] audit: type=1400 audit(121.821:1105): avc:  denied  { create } for  pid=9276 comm="syz.6.924" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  121.933572][ T9277] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  121.940334][   T42] audit: type=1400 audit(121.861:1106): avc:  denied  { getopt } for  pid=9282 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  122.038279][ T9293] xt_TCPMSS: Only works on TCP SYN packets
[  122.041651][   T42] audit: type=1400 audit(121.961:1107): avc:  denied  { getopt } for  pid=9287 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  122.043255][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'.
[  122.055192][ T9293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9293 comm=syz.1.930
[  122.059141][ T9293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9293 comm=syz.1.930
[  122.064900][ T9293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9293 comm=syz.1.930
[  122.068847][ T9293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9293 comm=syz.1.930
[  122.150650][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  122.175130][ T9304] binder: 9303:9304 ioctl c0145401 200000000440 returned -22
[  122.634662][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[  122.725739][ T9316] jffs2: notice: (9316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  122.738305][   T42] audit: type=1400 audit(122.661:1108): avc:  denied  { setattr } for  pid=9315 comm="syz.2.937" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  122.747425][   T42] audit: type=1400 audit(122.671:1109): avc:  denied  { bind } for  pid=9315 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  122.874833][ T9330] netlink: 76 bytes leftover after parsing attributes in process `syz.1.939'.
[  122.972390][ T5079] Bluetooth: hci1: command tx timeout
[  122.997491][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'.
[  122.998204][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.944'.
[  123.024752][ T9344] binder: 9343:9344 ioctl c0145401 200000000440 returned -22
[  123.151451][ T5832] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  123.157869][ T9352] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.163336][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'.
[  123.166227][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'.
[  123.176996][ T9352] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.181792][ T9352] bond3: (slave bond0): making interface the new active one
[  123.185407][ T9352] bond3: (slave bond0): Enslaving as an active interface with an up link
[  123.278829][   T42] audit: type=1400 audit(123.201:1110): avc:  denied  { read } for  pid=9362 comm="syz.2.950" lport=27751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  123.321553][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.330090][ T5832] usb 5-1: config 0 has no interfaces?
[  123.336814][ T5832] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  123.341767][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  123.347940][ T5832] usb 5-1: Product: syz
[  123.349557][ T5832] usb 5-1: SerialNumber: syz
[  123.355238][ T5832] usb 5-1: config 0 descriptor??
[  123.362092][ T9374] i2c i2c-0: new_device: Can't parse I2C address
[  123.577631][ T9387] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[  123.667439][ T9399] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  123.701848][ T9399] bridge2: entered allmulticast mode
[  123.713881][ T9399] bond5: (slave bridge2): making interface the new active one
[  123.717731][ T9399] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  123.764014][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.767228][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.774358][   T29] usb 5-1: USB disconnect, device number 22
[  123.774577][ T9406] No such timeout policy "syz1"
[  123.968384][ T9417] netlink: 'syz.6.970': attribute type 1 has an invalid length.
[  123.971015][ T9418] netlink: 'syz.6.970': attribute type 1 has an invalid length.
[  124.201402][ T5720] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  124.251265][ T5832] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  124.354753][ T5720] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  124.359065][ T5720] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8192, setting to 1024
[  124.368166][ T5720] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  124.368204][ T9429] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  124.373014][ T5720] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8192, setting to 1024
[  124.381679][ T5720] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  124.386829][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.390244][ T5720] usb 7-1: Product: syz
[  124.394276][ T5720] usb 7-1: Manufacturer: syz
[  124.396293][ T5720] usb 7-1: SerialNumber: syz
[  124.411514][ T5832] usb 11-1: Using ep0 maxpacket: 16
[  124.413568][ T5720] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  124.416604][ T5832] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.427638][ T5720] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  124.427781][ T5832] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.438137][ T5720] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  124.439580][ T5832] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.447497][ T5832] usb 11-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  124.451052][ T5832] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.456573][ T5832] usb 11-1: config 0 descriptor??
[  124.466891][ T5832] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input14
[  124.533787][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.564557][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.576754][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.583045][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.588810][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.594242][ T6460] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.609734][ T5812] usb 7-1: USB disconnect, device number 11
[  124.615965][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.625020][ T5116] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.625094][ T5812] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  124.650060][ T5812] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  124.656410][ T5812] ti_usb_3410_5052 7-1:2.0: device disconnected
[  124.666364][ T9420] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  124.675252][  T848] usb 11-1: USB disconnect, device number 2
[  124.781306][ T5720] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  124.931244][ T5720] usb 5-1: Using ep0 maxpacket: 32
[  124.934787][ T5720] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  124.937753][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.941932][ T5720] usb 5-1: config 0 descriptor??
[  124.951987][ T5720] as10x_usb: device has been detected
[  124.957544][ T5720] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  124.973465][ T5720] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  125.022781][ T5720] as10x_usb: error during firmware upload part1
[  125.025825][ T5720] Registered device nBox DVB-T Dongle
[  125.041298][ T5079] Bluetooth: hci1: command tx timeout
[  125.087566][ T9478] affs: No valid root block on device sr0
[  125.411251][ T5812] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  125.504896][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.508373][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.538501][ T9511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9511 comm=syz.6.991
[  125.553477][ T9499] geneve4: entered promiscuous mode
[  125.555310][ T9499] geneve4: entered allmulticast mode
[  125.573016][ T5812] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.576881][ T5812] usb 6-1: config 0 has no interfaces?
[  125.580038][ T5812] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  125.583445][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  125.586004][ T5812] usb 6-1: Product: syz
[  125.587497][ T5812] usb 6-1: SerialNumber: syz
[  125.591089][ T5812] usb 6-1: config 0 descriptor??
[  125.998044][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.001680][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.009104][ T5720] usb 6-1: USB disconnect, device number 12
[  126.357171][ T9536] __nla_validate_parse: 6 callbacks suppressed
[  126.357190][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'.
[  126.408394][ T9541] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  126.414509][ T9539] netlink: 'syz.6.997': attribute type 1 has an invalid length.
[  126.472700][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.997'.
[  126.523825][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.999'.
[  126.640704][ T9561] netlink: 'syz.6.1003': attribute type 1 has an invalid length.
[  126.695161][ T9568] ip_tables: iptables: counters copy to user failed while replacing table
[  126.758130][ T9579] netlink: 'syz.6.1008': attribute type 1 has an invalid length.
[  126.785979][ T9579] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.791720][ T9579] bond1: (slave bond2): making interface the new active one
[  126.794444][ T9579] bond1: (slave bond2): Enslaving as an active interface with an up link
[  126.808542][ T9584] overlayfs: empty lowerdir
[  126.868904][   T42] kauditd_printk_skb: 15 callbacks suppressed
[  126.868920][   T42] audit: type=1400 audit(126.791:1126): avc:  denied  { write } for  pid=9585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.920983][   T42] audit: type=1400 audit(126.841:1127): avc:  denied  { write } for  pid=9593 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.996483][   T42] audit: type=1400 audit(126.921:1128): avc:  denied  { append } for  pid=9602 comm="syz.1.1013" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  127.111504][ T5832] usb 11-1: new full-speed USB device number 3 using dummy_hcd
[  127.223741][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  127.226701][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'.
[  127.262386][   T42] audit: type=1400 audit(127.191:1129): avc:  denied  { append } for  pid=9622 comm="syz.2.1019" name="usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  127.273713][ T5832] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.279395][ T5832] usb 11-1: config 0 has no interfaces?
[  127.286710][ T5832] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  127.290642][ T5832] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  127.296088][ T5832] usb 11-1: Product: syz
[  127.297681][ T5832] usb 11-1: SerialNumber: syz
[  127.304237][ T5832] usb 11-1: config 0 descriptor??
[  127.323950][ T1481] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  127.369616][ T9627] fido_id[9627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  127.421963][ T9631] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  127.543010][ T1481] usb 5-1: USB disconnect, device number 23
[  127.589082][ T1481] Unregistered device nBox DVB-T Dongle
[  127.590495][ T1481] as10x_usb: device has been disconnected
[  127.724747][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.728748][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.735561][ T5720] usb 11-1: USB disconnect, device number 3
[  127.907452][ T9660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=9660 comm=syz.1.1030
[  128.048767][ T9667] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  128.143008][ T9674] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  128.186714][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'.
[  128.200829][ T9677] autofs4:pid:9677:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375)
[  128.204439][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'.
[  128.207053][ T9677] autofs4:pid:9677:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  128.215197][   T42] audit: type=1400 audit(128.141:1130): avc:  denied  { accept } for  pid=9676 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  128.320181][ T9689] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  128.326998][ T9691] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  128.361885][ T9691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1040'.
[  128.421761][ T9697] input: syz0 as /devices/virtual/input/input15
[  128.801332][ T1481] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  128.963529][ T1481] usb 5-1: config 125 has an invalid interface number: 6 but max is 1
[  128.966871][ T1481] usb 5-1: config 125 has an invalid interface number: 97 but max is 1
[  128.970360][ T1481] usb 5-1: config 125 has an invalid interface number: 170 but max is 1
[  128.974220][ T1481] usb 5-1: config 125 has 3 interfaces, different from the descriptor's value: 2
[  128.978041][ T1481] usb 5-1: config 125 has no interface number 0
[  128.980676][ T1481] usb 5-1: config 125 has no interface number 1
[  128.983824][ T1481] usb 5-1: config 125 has no interface number 2
[  128.988367][ T1481] usb 5-1: config 125 interface 6 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  128.993004][ T1481] usb 5-1: config 125 interface 6 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  128.997093][ T1481] usb 5-1: too many endpoints for config 125 interface 97 altsetting 234: 137, using maximum allowed: 30
[  129.000954][ T1481] usb 5-1: config 125 interface 97 altsetting 234 has an invalid descriptor for endpoint zero, skipping
[  129.005829][ T1481] usb 5-1: config 125 interface 97 altsetting 234 has 1 endpoint descriptor, different from the interface descriptor's value: 137
[  129.011739][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has a duplicate endpoint with address 0xB, skipping
[  129.015330][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has a duplicate endpoint with address 0xA, skipping
[  129.018817][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has an endpoint descriptor with address 0x3C, changing to 0xC
[  129.024212][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has a duplicate endpoint with address 0xC, skipping
[  129.028736][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has a duplicate endpoint with address 0xC, skipping
[  129.033241][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has a duplicate endpoint with address 0xD, skipping
[  129.037867][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has an invalid descriptor for endpoint zero, skipping
[  129.042284][ T1481] usb 5-1: config 125 interface 170 altsetting 96 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  129.046377][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has a duplicate endpoint with address 0xA, skipping
[  129.050962][ T1481] usb 5-1: config 125 interface 170 altsetting 96 has 10 endpoint descriptors, different from the interface descriptor's value: 8
[  129.057214][ T1481] usb 5-1: config 125 interface 6 has no altsetting 0
[  129.060115][ T1481] usb 5-1: config 125 interface 97 has no altsetting 0
[  129.063387][ T1481] usb 5-1: config 125 interface 170 has no altsetting 0
[  129.068533][ T1481] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=d6.6e
[  129.072802][ T1481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.076142][ T1481] usb 5-1: Product: 컬히汫輺䕴ᔫ䖈䐐煝沭할篵꒐댹틤㚤
[  129.079425][ T1481] usb 5-1: Manufacturer: 䶣胸㴺띴므땝აꭹ짆⺯栁쎿띄绲ꗓ骱Ѝ咵ᕚ뉵店癎臂⸧ჟ啙⼫涰覛췡ꪓ혠좹鉍ᗑ
[  129.085750][ T1481] usb 5-1: SerialNumber: syz
[  129.290533][   T42] audit: type=1400 audit(129.211:1131): avc:  denied  { cmd } for  pid=9718 comm="syz.2.1051" path="socket:[33898]" dev="sockfs" ino=33898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  129.356676][   T42] audit: type=1400 audit(129.281:1132): avc:  denied  { ioctl } for  pid=9726 comm="syz.2.1054" path="socket:[31501]" dev="sockfs" ino=31501 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  129.401614][ T6049] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  129.413091][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1055'.
[  129.416066][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1055'.
[  129.424718][ T1481] appledisplay 5-1:125.6: Could not find int-in endpoint
[  129.431403][ T1481] usbhid 5-1:125.6: couldn't find an input interrupt endpoint
[  129.444777][ T1481] usb 5-1: USB disconnect, device number 24
[  129.457234][ T6460] udevd[6460]: setting mode of /dev/bus/usb/005/024 to 020664 failed: No such file or directory
[  129.461596][ T6460] udevd[6460]: setting owner of /dev/bus/usb/005/024 to uid=0, gid=0 failed: No such file or directory
[  129.554135][ T6049] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.558430][ T6049] usb 6-1: config 0 has no interfaces?
[  129.562850][ T6049] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  129.566708][ T6049] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  129.570099][ T6049] usb 6-1: Product: syz
[  129.571567][ T6049] usb 6-1: SerialNumber: syz
[  129.574789][ T6049] usb 6-1: config 0 descriptor??
[  129.752669][   T42] audit: type=1400 audit(129.681:1133): avc:  denied  { ioctl } for  pid=9747 comm="syz.6.1062" path="/45/tracing/current_tracer" dev="tracefs" ino=976 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  129.986083][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.989667][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.995024][ T1481] usb 6-1: USB disconnect, device number 13
[  130.061296][ T7707] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  130.145176][ T9796] xt_hashlimit: size too large, truncated to 1048576
[  130.147617][ T5812] IPVS: starting estimator thread 0...
[  130.222613][ T7707] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 16027, setting to 1024
[  130.226186][ T7707] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  130.229920][ T7707] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  130.233244][ T7707] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.238407][ T9755] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  130.242294][ T7707] spcp8x5 11-1:1.0: SPCP8x5 converter detected
[  130.250875][ T7707] usb 11-1: SPCP8x5 converter now attached to ttyUSB0
[  130.251788][ T9797] IPVS: using max 45 ests per chain, 108000 per kthread
[  130.261914][   T42] audit: type=1400 audit(130.191:1134): avc:  denied  { getopt } for  pid=9799 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  130.525842][ T9807] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  130.561463][ T5079] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.564303][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  130.570889][ T5832] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  130.603301][ T9755] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  130.605994][ T9755] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  130.609710][ T9755] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  130.627536][ T9814] netlink: 'syz.1.1073': attribute type 32 has an invalid length.
[  130.703332][ T9755] SPCP8x5 ttyUSB0: Set UART format 0x50a failed (error = -32)
[  130.710377][ T9755] SPCP8x5 ttyUSB0: failed to set work mode: -32
[  130.898215][ T5720] usb 11-1: USB disconnect, device number 4
[  130.906568][ T5720] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  130.909483][ T5720] spcp8x5 11-1:1.0: device disconnected
[  131.071467][ T5812] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  131.112719][   T42] audit: type=1400 audit(131.041:1135): avc:  denied  { write } for  pid=9854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.225573][ T5812] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.229881][ T5812] usb 6-1: config 0 has no interfaces?
[  131.234241][ T5812] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  131.238108][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  131.241854][ T5812] usb 6-1: Product: syz
[  131.243628][ T5812] usb 6-1: SerialNumber: syz
[  131.249665][ T5812] usb 6-1: config 0 descriptor??
[  131.382338][ T9872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=9872 comm=syz.2.1085
[  131.389006][ T9872] __nla_validate_parse: 1 callbacks suppressed
[  131.389027][ T9872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1085'.
[  131.648883][ T9903] binder: 9901:9903 ioctl c0306201 200000000080 returned -14
[  131.650068][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  131.653521][ T9903] binder: 9901:9903 ioctl c0306201 2000000003c0 returned -14
[  131.655951][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  131.662871][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.671929][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.678009][ T1481] usb 6-1: USB disconnect, device number 14
[  131.699917][ T9903] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  131.711104][ T9903] binder: BINDER_SET_CONTEXT_MGR already set
[  131.714509][ T9903] binder: 9901:9903 ioctl 4018620d 200000003280 returned -16
[  131.739239][ T9908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  131.879290][   T42] kauditd_printk_skb: 7 callbacks suppressed
[  131.879303][   T42] audit: type=1400 audit(131.801:1143): avc:  denied  { connect } for  pid=9918 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  131.891675][ T9921] 9pnet_virtio: no channels available for device syz
[  131.893734][   T42] audit: type=1400 audit(131.821:1144): avc:  denied  { mounton } for  pid=9918 comm="syz.2.1098" path="/328/file0" dev="9p" ino=75524131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  132.068902][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'.
[  132.072796][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'.
[  132.180513][   T42] audit: type=1400 audit(132.101:1145): avc:  denied  { rmdir } for  pid=9939 comm="syz.6.1105" name="control" dev="9p" ino=75524187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  132.309472][   T42] audit: type=1400 audit(132.231:1146): avc:  denied  { bind } for  pid=9949 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  132.641445][ T5832] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  132.646216][ T5832] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  132.651258][    C0] ------------[ cut here ]------------
[  132.653668][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci2
[  132.656267][    C0] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#0: swapper/0/0
[  132.659312][    C0] Modules linked in:
[  132.660976][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  132.664295][    C0] Tainted: [L]=SOFTLOCKUP
[  132.665658][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  132.668812][    C0] RIP: 0010:__queue_work+0xd31/0x12b0
[  132.670509][    C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d f3 08 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03
[  132.676427][    C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010046
[  132.678245][    C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004f3394e
[  132.680729][    C0] RDX: ffff888035f20170 RSI: ffffffff8aad94f0 RDI: ffffffff9124d000
[  132.683204][    C0] RBP: ffff88802799ca58 R08: 0000000000000005 R09: 0000000000000000
[  132.685681][    C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035f20000
[  132.688171][    C0] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001
[  132.690692][    C0] FS:  0000000000000000(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000
[  132.693501][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.695505][    C0] CR2: 00007fe91b9f6d58 CR3: 000000003cca4000 CR4: 0000000000352ef0
[  132.697973][    C0] Call Trace:
[  132.699061][    C0]  <IRQ>
[  132.700020][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  132.701880][    C0]  call_timer_fn+0x19a/0x610
[  132.703363][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  132.704984][    C0]  ? __run_timers+0x560/0xb00
[  132.706478][    C0]  ? __run_timers+0x560/0xb00
[  132.707900][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  132.709664][    C0]  __run_timers+0x570/0xb00
[  132.711052][    C0]  ? __pfx___run_timers+0x10/0x10
[  132.712595][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  132.714152][    C0]  run_timer_base+0x114/0x190
[  132.715558][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  132.717187][    C0]  run_timer_softirq+0x1a/0x50
[  132.718703][    C0]  handle_softirqs+0x1ea/0x9b0
[  132.720270][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  132.721944][    C0]  ? _raw_spin_unlock+0x28/0x50
[  132.723496][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  132.725261][    C0]  __irq_exit_rcu+0x162/0x210
[  132.726763][    C0]  irq_exit_rcu+0x9/0x30
[  132.728221][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  132.730012][    C0]  </IRQ>
[  132.730962][    C0]  <TASK>
[  132.731936][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.733766][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  132.735565][    C0] Code: 65 8c 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 df 10 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  132.741373][    C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202
[  132.743198][    C0] RAX: 0000000000127ed5 RBX: ffffffff8e891480 RCX: ffffffff8bbac335
[  132.745627][    C0] RDX: 0000000000000000 RSI: ffffffff8e1a8e56 RDI: ffffffff8c400380
[  132.748120][    C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d
[  132.750605][    C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000
[  132.753072][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
[  132.755337][    C0]  ? ct_kernel_exit+0x125/0x180
[  132.756899][    C0]  default_idle+0x9/0x10
[  132.758202][    C0]  default_idle_call+0x6c/0xb0
[  132.759657][    C0]  do_idle+0x3a7/0x5b0
[  132.760983][    C0]  ? __pfx_do_idle+0x10/0x10
[  132.762468][    C0]  ? rest_init+0x23d/0x260
[  132.763903][    C0]  cpu_startup_entry+0x4f/0x60
[  132.765428][    C0]  rest_init+0x251/0x260
[  132.766781][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  132.768541][    C0]  start_kernel+0x48e/0x490
[  132.770055][    C0]  x86_64_start_reservations+0x24/0x30
[  132.771806][    C0]  x86_64_start_kernel+0x12b/0x130
[  132.773429][    C0]  common_startup_64+0x13e/0x158
[  132.775017][    C0]  </TASK>
[  132.776045][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  132.778324][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  132.781640][    C0] Tainted: [L]=SOFTLOCKUP
[  132.783005][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  132.786160][    C0] Call Trace:
[  132.787231][    C0]  <IRQ>
[  132.788166][    C0]  dump_stack_lvl+0x100/0x190
[  132.789678][    C0]  vpanic+0x552/0x970
[  132.790975][    C0]  ? __pfx_vpanic+0x10/0x10
[  132.792463][    C0]  panic+0xd1/0xe0
[  132.793674][    C0]  ? __pfx_panic+0x10/0x10
[  132.795110][    C0]  ? check_panic_on_warn+0x1f/0x90
[  132.796763][    C0]  check_panic_on_warn.cold+0x19/0x34
[  132.798482][    C0]  ? __queue_work+0xd2d/0x12b0
[  132.800029][    C0]  __warn.cold+0x191/0x318
[  132.801481][    C0]  __report_bug+0x30f/0x440
[  132.802940][    C0]  ? __queue_work+0xd2d/0x12b0
[  132.804500][    C0]  ? __pfx___report_bug+0x10/0x10
[  132.806103][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  132.807789][    C0]  ? look_up_lock_class+0x55/0x120
[  132.809438][    C0]  report_bug_entry+0xe1/0x290
[  132.810970][    C0]  ? __queue_work+0xd31/0x12b0
[  132.812537][    C0]  handle_bug+0x1cd/0x2a0
[  132.813925][    C0]  exc_invalid_op+0x17/0x50
[  132.815403][    C0]  asm_exc_invalid_op+0x1a/0x20
[  132.816956][    C0] RIP: 0010:__queue_work+0xd31/0x12b0
[  132.818675][    C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d f3 08 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03
[  132.824797][    C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010046
[  132.826714][    C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004f3394e
[  132.829211][    C0] RDX: ffff888035f20170 RSI: ffffffff8aad94f0 RDI: ffffffff9124d000
[  132.831726][    C0] RBP: ffff88802799ca58 R08: 0000000000000005 R09: 0000000000000000
[  132.834207][    C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035f20000
[  132.836743][    C0] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001
[  132.839217][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  132.841093][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  132.842771][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  132.844622][    C0]  call_timer_fn+0x19a/0x610
[  132.846092][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  132.847725][    C0]  ? __run_timers+0x560/0xb00
[  132.849222][    C0]  ? __run_timers+0x560/0xb00
[  132.850746][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  132.852616][    C0]  __run_timers+0x570/0xb00
[  132.854065][    C0]  ? __pfx___run_timers+0x10/0x10
[  132.855670][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  132.857268][    C0]  run_timer_base+0x114/0x190
[  132.858762][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  132.860444][    C0]  run_timer_softirq+0x1a/0x50
[  132.861985][    C0]  handle_softirqs+0x1ea/0x9b0
[  132.863533][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  132.865237][    C0]  ? _raw_spin_unlock+0x28/0x50
[  132.866779][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  132.868580][    C0]  __irq_exit_rcu+0x162/0x210
[  132.870110][    C0]  irq_exit_rcu+0x9/0x30
[  132.871493][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  132.873262][    C0]  </IRQ>
[  132.874211][    C0]  <TASK>
[  132.875160][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.877091][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  132.878868][    C0] Code: 65 8c 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 df 10 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  132.884970][    C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202
[  132.886887][    C0] RAX: 0000000000127ed5 RBX: ffffffff8e891480 RCX: ffffffff8bbac335
[  132.889385][    C0] RDX: 0000000000000000 RSI: ffffffff8e1a8e56 RDI: ffffffff8c400380
[  132.891896][    C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d
[  132.894380][    C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000
[  132.896848][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
[  132.899335][    C0]  ? ct_kernel_exit+0x125/0x180
[  132.900910][    C0]  default_idle+0x9/0x10
[  132.902298][    C0]  default_idle_call+0x6c/0xb0
[  132.903840][    C0]  do_idle+0x3a7/0x5b0
[  132.905140][    C0]  ? __pfx_do_idle+0x10/0x10
[  132.906621][    C0]  ? rest_init+0x23d/0x260
[  132.908057][    C0]  cpu_startup_entry+0x4f/0x60
[  132.909593][    C0]  rest_init+0x251/0x260
[  132.910954][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  132.912728][    C0]  start_kernel+0x48e/0x490
[  132.914180][    C0]  x86_64_start_reservations+0x24/0x30
[  132.915918][    C0]  x86_64_start_kernel+0x12b/0x130
[  132.917546][    C0]  common_startup_64+0x13e/0x158
[  132.919116][    C0]  </TASK>
[  132.920765][    C0] Kernel Offset: disabled
[  132.922181][    C0] Rebooting in 86400 seconds..