last executing test programs:

1m7.956480893s ago: executing program 0 (id=359):
r0 = epoll_create(0x4)
r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f00000001c0)={{0x1fffe2000, 0x70000, 0x4, 0x4, 0x1, 0xd, 0xd, 0x0, 0x9, 0x2, 0x5, 0x7f}, {0xc000, 0x100000, 0x10, 0x3, 0x40, 0x6, 0x9, 0x2a, 0xb, 0x9, 0x0, 0x4}, {0x9000, 0x1000, 0x9, 0x5, 0xd, 0x6, 0x9, 0xa, 0x10, 0x0, 0x7f, 0x1}, {0xc000, 0x10000, 0x8, 0x0, 0x0, 0x2, 0x2, 0x2, 0x3, 0x2, 0x10, 0x1}, {0x4000, 0x4, 0xd, 0xfa, 0x91, 0x8, 0x1, 0x4, 0x1, 0x6, 0x6, 0xfc}, {0xfec00000, 0x9000, 0xd, 0x7, 0x3, 0xfb, 0xff, 0x7b, 0x0, 0x7, 0xd, 0xc0}, {0x9000, 0xfec00000, 0xa, 0x10, 0x7, 0x67, 0x0, 0x9, 0x8, 0x4, 0x5, 0x4}, {0x41000, 0x4000, 0xa, 0x6, 0x3f, 0x7, 0x7, 0x2, 0xfb, 0x6, 0x7, 0xff}, {0x2000, 0xbac7}, {0x30000}, 0x10, 0x0, 0xeeee0000, 0x8, 0xc, 0x100, 0xe000, 0x0, [0x100, 0x0, 0x4, 0x7]})
r2 = epoll_create(0x7)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf})
ioctl$int_in(r0, 0x5421, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000})

1m7.954348924s ago: executing program 0 (id=361):
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$P9_RVERSION(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="690291f0fe49b8"], 0x13)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000002c0), 0x12)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8e, 0x0, 0xfffffffffffffffa}]})
ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000680)={0xa22fc007, 0x0, "ee9a8000bc5e143f8437bb6bbe34fb7e7b692abe4bb49c3df484131ac9564da5", 0xffffff81, 0x9, 0xebc3, 0x5, 0x140})
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000))

1m7.835519501s ago: executing program 0 (id=367):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="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", 0xff, 0xfffffffffffffffe)
keyctl$update(0x2, r0, &(0x7f0000000180)="59d89f747957aa9a31515ed70fc82c24c6ef6a180955ae8c19693f39f27cdb0aa98f282af4cdb9388a8a9b8ed42b7a0010c54e50ad1cdd107f95ea4a7b60ce44", 0x40) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) (async)
r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$get_persistent(0x16, r1, r2) (async)
keyctl$invalidate(0x15, r2) (async, rerun: 64)
r3 = request_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='keyring\x00', 0xfffffffffffffffa) (rerun: 64)
keyctl$link(0x8, r2, r3) (async, rerun: 64)
r4 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="c2a1636812419ec931d41426cd8d8b3eaedbad213292468345fc489f5122c4892d49e1f0feeedebe57e6daf7a6d14e5decb7d8ce2b1f7c77cef83ae180f4e38e4c3ac0879e9a071ce976b7a31a103271f9b33390f8311d9cf54b7e401adf7aed5fd6f23a909406343cdc3f607090f20cd4dd7c8dd7787a5f6bf2903957a19c99cc4e74494bad9ddef963d5ab4040252690c3763f12dc75758ff509d9e468c655d9868721ead4d2b4dc261373c9f78e8eec771022bcb2d9b51ae288bc2e0b827799767f7b128999326157378d978de15c07757641e3d67dc3b44cedf7e38f02c5d6409e", 0xe3, r3) (rerun: 64)
keyctl$KEYCTL_MOVE(0x1e, r3, r4, r2, 0x0) (async)
r5 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "82fc13e2d8c3f3e31bb25c4c9237092a4fced55f0e87acfa09c68c173ce56ec0925db895430ea57219619d0e8c2e32d901c00de79cab308898d6e8c880ebce9d", 0x20}, 0x48, r2)
pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xa1) (async)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000700)) (async)
r7 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$search(0xa, r4, &(0x7f0000000740)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x3}, r7) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) (async)
r8 = add_key(&(0x7f0000000880)='trusted\x00', &(0x7f00000008c0)={'syz', 0x0}, 0x0, 0x0, r7)
keyctl$assume_authority(0x10, r8) (async)
keyctl$instantiate_iov(0x14, r4, &(0x7f0000000ac0)=[{&(0x7f0000000900)="3ada2ce82dd1e9c1302c305fb514da1a061a4ba3bd3d6ee52a93eee1ed70a0cdd17f5e38121e056a0dca4a7dedd7779372642e3fd65064e8952fea561b6fe84000bc90dc3a502e06d3b2fdbaa1159d9f7b035b2924e43765ffec2950334dfdc8150419636063cb6d8dee85c430ff6b2537f5005fd20950a289937d546e0c83d1bcc594e2f4e4887b41b29dbea0f3a9874c11ba1418cbddd6fdc522c718aea4741a96fbc410668f25da2e03e3b90681a1c3fb365112013e961ee66b44f4a87389b25a769cef40ab4c", 0xc8}, {&(0x7f0000000a00)="90f6ce37568ea89375995508cbb96a80521df60d42b5b34ead70938e90bf19beb8bc7a732bab081b77320e99033c09d0fcb5f704a34fca9a6cf62dcaf0a2f8dd31ad7ba957bb47ae0964baa9613c909823f0ee6b7cb7a0e7991707891b82098d52b798b0e1f2f71022", 0x69}, {&(0x7f0000000a80)="e2df835a4086c7bce059c73db4c7f83a38ba490b116a8e39e0cf8fa808ec5c0ce1df88cce0435d44a921f39cd2a89ff7c1", 0x31}], 0x3, r2) (async)
keyctl$reject(0x13, r7, 0x9, 0x74, r3) (async)
add_key$user(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, &(0x7f0000000b80)="a07357ec2a05abd55edda1bc5e9bc7f0b8d68816ab346100c0adcd04ef5f356585e8b6afdec2cd0eb800e0a511a55ff72b62f510b60e0911973e88a875f100b83426649a198ea41f1e0f946213d23647d07a6b50415a4fbf7bd8604c2a55cef361cebe9e6ccfb230b2206dfb8336e6fb2884b5d91e1ce6d5eba1d8e91954d9c4034b14b3c232bcf5fe790835e610f79b139573aeaf3dc0907e2a50f2", 0x9c, r7)
keyctl$negate(0xd, r4, 0x5, r2) (async)
syz_open_dev$video(&(0x7f0000000c40), 0xfffffffffffffffb, 0x20901) (async, rerun: 32)
syz_open_dev$video(&(0x7f0000000c80), 0xd, 0x8200) (async, rerun: 32)
syz_emit_vhci(&(0x7f0000000cc0)=@HCI_VENDOR_PKT, 0x2)
keyctl$get_persistent(0x16, r1, r2) (async)
setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000d00)=0x2, 0x4) (async)
r9 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000d40)='rxrpc\x00', &(0x7f0000000d80)={'syz', 0x0}, &(0x7f0000000dc0)="102d68baccc2540bade6af4ae80403b85fb3af6247e88aa8b6631d3adfc6d72c217d8dfd6c426bd1e5048ec215f130d823ad2df1a8330df24183fee5ce6a56769c71b3ba7aa82265b278a5ee70752be87280fcc1cc05e293c8a98292a6982f623dc729c4a1637c6ddc0a82f9884a9d92efa28beedcb00593e891a4bd7f7644ccd7c085179e7e9fae7dcade1ffdbc511e2e289c5c83aea98e8d70092feeeb63b55bc35eb81437f8b64165a2f48812bb6904dd9082375acda533d870609a2feaab06ae619833062be240cbd4a20a81ad1a2b5970dfc1ebd8c674", 0xd9, r9)

1m7.776943166s ago: executing program 0 (id=369):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
preadv(r0, &(0x7f00000032c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1, 0x4, 0x0)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8a042, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200001a, 0x8012, r2, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00') (async)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) (async)
open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000200)) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000200))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
accept4(r3, 0x0, 0x0, 0x80800)
syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async)
r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4)

1m7.707551461s ago: executing program 0 (id=373):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
setrlimit(0x7, &(0x7f0000000180)={0x1, 0x1}) (async)
fspick(r1, &(0x7f0000000000)='.\x00', 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x7d, 0x8, 0x9817b46, 0x0, 0x10, 0x9}, &(0x7f0000000140)=0x9c) (async, rerun: 32)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x0, r4, 0xb}, 0x10)

1m7.477377543s ago: executing program 0 (id=375):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0110fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0)

1m7.376669224s ago: executing program 32 (id=375):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0110fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0)

1m5.05722362s ago: executing program 2 (id=399):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m4.887523147s ago: executing program 2 (id=400):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'team_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000cc0)={0x5c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x1005c814)

1m4.806258757s ago: executing program 2 (id=401):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x8, 0x80000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
read$FUSE(r1, 0x0, 0x6c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
fanotify_init(0x8, 0x80000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async)
read$FUSE(r1, 0x0, 0x6c) (async)

1m4.806006835s ago: executing program 2 (id=402):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="32464dd0e7cd4aa13938d3f3d0215ca6ef6d5720bbfaaff7041e3032f39ea672c3c64bc38aaa734e268541ea4633fe47e80aa1edbb8b6f97a238f0da14bfc048bb4cb3e22440e3569a2fcd5c6a1fcba2c3637a849b2a6e5ac84eb66d44b35fc946358f595f5ee16365b4a8455aa1426aa3f8e062788dccaf4ed4d78cc6ad075cb30d64b0571675678e1265645253df5d2432ef5b77e9606b413cfb5f45f120180f45fcc1b09f132d68ae966ab9418c881945db56a15a93d0b14a6fd442aae4c182e9b9207b61fe02206fff30a564f1ffe65ed157dd8b6f6926bb319bf7b5ae90a2b0dd870056aa131e1fa29169c73b9088fac6f0", @ANYRES16=r3, @ANYRES64=r2], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000500), &(0x7f00000002c0)=r3}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x7, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xf9}]}}]}, 0x3c}}, 0x0)

1m4.717327854s ago: executing program 2 (id=403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}})
alarm(0x709abc910000)
alarm(0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r2 = socket(0x11, 0x2, 0x10001)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x8, 0x0, [0x0, 0x2, 0x2, 0x80, 0x6]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x1000, 0x4df6, 0x7c, 0x2, 0x9, 0xa5, 0x4, 0xf7, 0x3, 0x8, 0x1, 0x0, 0x8}, {0x7, 0x9, 0xd, 0x5c, 0x0, 0xa7, 0x5, 0x60, 0x1, 0x9, 0x1, 0x7c, 0x6}, {0xb8, 0x2, 0x3, 0x1, 0x9, 0xff, 0x2, 0x1, 0x6, 0x5, 0x2, 0x8, 0x5}], 0x7})

1m4.716198092s ago: executing program 2 (id=404):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x1)
r1 = socket(0x2, 0xa, 0x300)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = userfaultfd(0x801)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', '5', ':', 'a', '.', '19'}}, 0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00')
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a40)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xffff18a2}], 0x0, 0x0, 0x0, 0x0, 0x4}})
connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xa)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000280)={0xa, {0x3, 0x100000, 0x300, 0xf14}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x0, 0x3fc, 0x7, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18d70a0000400000009500"/32], &(0x7f0000000040)='GPL\x00', 0x2}, 0x90)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

54.326898119s ago: executing program 3 (id=531):
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 'WCK', 0x1}}}, 0xd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000005c0)={'dummy0\x00', @ifru_settings={0x1, 0x2, @fr_pvc_info=0x0}})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x1})
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)

54.326470282s ago: executing program 3 (id=532):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
shutdown(r1, 0x1)
clock_gettime(0x17, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x29, @remote, 0x1}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000240)="e5", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000d00)={0x1, 0x1, {0x6, @usage=0x1, 0x0, 0xffffffff, 0x7, 0x100000000, 0x6, 0x6, 0x14e431862c47394c, @struct={0x3, 0x1}, 0x41, 0x1000000, [0x7, 0x3, 0x5, 0x8, 0x3, 0x3]}, {0x1, @usage=0xffffffff80000001, <r2=>0x0, 0x8, 0x4, 0x3, 0xfff, 0x4, 0x52, @struct={0x0, 0x2}, 0x9, 0x7, [0x7, 0x1, 0x8, 0x9c74, 0x5, 0x59e]}, {0xe4a, @usage=0x800000000000, 0x0, 0x9, 0x400, 0x8, 0xb, 0x8, 0x6, @usage=0x5, 0x5, 0x982, [0x8, 0x2a50, 0x81, 0x8, 0x7, 0xfffffffffffffffc]}, {0x800, 0x74f, 0x4}})
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000e0601040000000000000000030000030900020073797a31000000000900020073797a320000000005bb23000700000005000100070000000500"/80], 0x50}, 0x1, 0x0, 0x0, 0x4044885}, 0x800)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={<r3=>r2, 0x24, 0x8, 0x1})
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000740)={0x6, 0x1, {0x57, 0x2, 0x1, {0x5, 0x8}, {0x8, 0x871f}, @ramp={0x1, 0x0, {0x5, 0xfff8, 0x4, 0x7}}}, {0x56, 0x4, 0x4, {0x4, 0x4}, {0xc, 0xfff}, @period={0x58, 0xe2e2, 0x9, 0x6, 0x2, {0x1d, 0x2, 0xff, 0x81}, 0x8, &(0x7f0000000200)=[0x5, 0x7, 0x5, 0x3, 0x4, 0x68f1, 0x6, 0x1]}}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r3, 0x1, 0xfffffffffffffffa, 0x1})
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x4, 0x10000000}, 0xc)

54.264202362s ago: executing program 3 (id=534):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0xfffffff7, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x80000001, 0xf5f6, 0x8, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)

54.263856074s ago: executing program 3 (id=535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x102)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x2, {0x7fff, 0x89, 0xfffffe00, 0x2}, {0x7, 0x10, 0x3, 0x8}, {0x3, 0x5}})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8})
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
poll(0x0, 0x0, 0x4)
r5 = socket$inet(0xa, 0x801, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0xc)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
r7 = socket(0x6, 0x1, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9, 0x5e68}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={r9, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8)

54.032641997s ago: executing program 3 (id=538):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x11, 0x5, {0x5, 0xe, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x0, 0x81, 0x6, &(0x7f00000002c0)={0x1, "3a68a1de904e98f30000039084f6f0b82db5a5b08a7c5c16d7ce762902dd9e6412"}})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

53.765459389s ago: executing program 3 (id=539):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x40800)
recvmmsg$unix(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000cc0)=""/178, 0xb2}], 0x1}}], 0x1, 0x10000, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L-', 0x6}, 0x16, 0x2)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x40800) (async)
recvmmsg$unix(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000cc0)=""/178, 0xb2}], 0x1}}], 0x1, 0x10000, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L-', 0x6}, 0x16, 0x2) (async)

53.720185889s ago: executing program 33 (id=539):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x40800)
recvmmsg$unix(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000cc0)=""/178, 0xb2}], 0x1}}], 0x1, 0x10000, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L-', 0x6}, 0x16, 0x2)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x40800) (async)
recvmmsg$unix(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000cc0)=""/178, 0xb2}], 0x1}}], 0x1, 0x10000, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L-', 0x6}, 0x16, 0x2) (async)

49.382552774s ago: executing program 34 (id=404):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x1)
r1 = socket(0x2, 0xa, 0x300)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = userfaultfd(0x801)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', '5', ':', 'a', '.', '19'}}, 0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00')
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a40)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xffff18a2}], 0x0, 0x0, 0x0, 0x0, 0x4}})
connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xa)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000280)={0xa, {0x3, 0x100000, 0x300, 0xf14}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x0, 0x3fc, 0x7, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18d70a0000400000009500"/32], &(0x7f0000000040)='GPL\x00', 0x2}, 0x90)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.236773199s ago: executing program 6 (id=1198):
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2d, 0x3, 0x7}]}, 0x10)
socketpair(0x1a, 0x80000, 0xc, &(0x7f0000000280))
setsockopt$sock_int(r4, 0x1, 0x1b, &(0x7f0000000040)=0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x4000886)

2.235891259s ago: executing program 6 (id=1199):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil})
pread64(r3, &(0x7f0000000200)=""/95, 0x5f, 0x475)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x16581)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, 0x0, &(0x7f0000001540))
r7 = fcntl$dupfd(r4, 0x0, r4)
r8 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000e3ffff840000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0)
io_uring_enter(r8, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
ioctl$TCSETS(r7, 0x80005520, 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='A\x92\xce\xa7\xfaO\xb6\xdbe\xd3\xf9\xf93\xa8\xbb\x14Sd\xf0\xfe\xbc\xd5\xc9q\x9c\xf3\xd9>r\x1d\xb7r\xa3\xdb\xc8\xf4\x97L);a\x80\x12\xed\x8bI#\x8e\xa676\x8b\x82\xd4\xe4:\x8a>\b\xba\xf6\xb7\x06\xfe\xd5\xe9]\xb1\x1d1\xb6as\b+\xc6\x95\xa1\x84\xae\xe6\x0f\xe5\xf2s\xd3Ru\xc1!\x8d2\xd3\xd5\nE\x050\x05\xb47\xb1o\xe0c\x12Ih\x11\xea\xf8', &(0x7f0000000140)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1.886250716s ago: executing program 4 (id=1201):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000280)=0x3b6, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0)

1.246933635s ago: executing program 6 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$uinput_user_dev(r0, &(0x7f0000002540)={'syz1\x00', {0x8, 0x8, 0xe0c, 0x930}, 0x1a, [0x0, 0x4, 0x930, 0x6, 0x8, 0x4, 0x8, 0x3, 0x4, 0x9, 0xd9a1, 0x41, 0x6, 0x40005f12, 0x80, 0x0, 0x0, 0x6, 0x0, 0x100, 0x10000, 0x4, 0x6, 0x3954, 0x68f3a3fb, 0x4af, 0x4, 0xe, 0x100, 0x5, 0x7, 0x7, 0x80, 0xb, 0x9, 0xffffffff, 0x1, 0x0, 0xe5, 0x100, 0x2a2, 0x20c6, 0x10000, 0x1, 0x8000, 0x3, 0x8001, 0x2, 0x4, 0xd6f, 0x10001, 0x81, 0xd5a, 0xfffffff8, 0x9e, 0x792, 0x9, 0x9, 0x5, 0x7, 0x8b, 0x0, 0x6, 0x1ff], [0x3, 0x3ff, 0x7, 0x8, 0x4, 0x5, 0x7, 0x6, 0x4d, 0x1, 0x3, 0xda4, 0x6, 0x4, 0x80000000, 0x1, 0x3, 0x100, 0x6, 0xe715, 0x8001, 0x400, 0x8, 0x9, 0xfffffffb, 0xcf29, 0x2, 0x401, 0x7fffffff, 0x3, 0x400, 0x4, 0x5, 0x80, 0x7, 0x8, 0xb9000000, 0x800, 0x6, 0x0, 0x8, 0x5, 0x3, 0x41e5, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7, 0x7, 0xd, 0x5, 0x4, 0x1, 0x6, 0x6, 0x33, 0x6, 0x2, 0xd, 0x1, 0xffffffff, 0xfffffc01], [0x7, 0x1ad4, 0x11, 0x66d, 0x3, 0x0, 0x2, 0x9, 0x5, 0xfefffffb, 0x40, 0x6, 0x8, 0x81, 0x400, 0xfffffffd, 0x5, 0x5, 0x81, 0x8, 0x1, 0x97c00000, 0x9, 0x200000, 0x4, 0x6, 0x0, 0x3, 0x0, 0xffffffff, 0x7, 0x7, 0xa, 0x3, 0x3, 0x6, 0x100, 0xb, 0x5, 0x3, 0x2, 0x0, 0x6, 0xc, 0x3, 0x9, 0x414d, 0x7ff, 0x7fff, 0x8000, 0x1, 0x2, 0x1c, 0x2, 0x5, 0x80, 0x0, 0xe, 0x0, 0xe91, 0x9, 0x80, 0x800, 0x9], [0x5, 0x37, 0x7, 0x8, 0x8, 0x4, 0x5, 0x81, 0x1, 0x0, 0xffffffff, 0x8, 0x65, 0x7, 0x4, 0x4, 0x5, 0xe4, 0x81, 0x9, 0x10001, 0x4b, 0xf6, 0x60, 0x2, 0x1000, 0x8, 0x8cec, 0x3f4779c1, 0xd, 0x2, 0x28f, 0x9, 0x8, 0x1e9d, 0xf63, 0xfff, 0x5, 0x2, 0x2, 0x9, 0x7, 0x401, 0x2, 0x80000001, 0x24e, 0x0, 0x4, 0x80, 0x9, 0x1, 0x0, 0xe1, 0x3, 0x0, 0x3, 0x100000, 0x29, 0xe, 0x6, 0x7, 0x4, 0x2, 0xffffffff]}, 0x45c)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0x6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r4 = syz_open_pts(r1, 0x0)
r5 = dup3(r4, r1, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17)
read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020)

1.016127705s ago: executing program 1 (id=1209):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r4, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffcd, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r8 = dup(r6)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x3}}, 0x20)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7a, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000180c200000008008906000000000000001190780800001ce4000001000017c100089078d2a915a4b00e180d1ef0f786c01f5672f33f7b560583aab3ad2a9eac2b045f37ddddf774365ffc51e7a2ca3a3774c6a67f8cd28b04e6d7f3960c2cc5c196d00437692d931e32"], 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x59, "43869f1bf536c419c89a78be4450da968fdb0eb5504052617f49f87d5d765e888a32148fd44818c99a2282e1636c0e2d2a8075a5c64a22f2b1d12485ecbdb42c0ba79d3a98fdf2ef66c63ac62653b999617152abe9e1b4620d"}, &(0x7f0000000300)=0x61)
pread64(0xffffffffffffffff, &(0x7f0000000600)=""/255, 0xff, 0xdd)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, r5, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000800)

956.055692ms ago: executing program 4 (id=1210):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0xfffffffffffffedd, &(0x7f0000000100)={0x44b})
ptrace(0x11, r3)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa00ffffffffffff08004500001c00000000fb02907800000000e000030000009078006400d2"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

896.874652ms ago: executing program 4 (id=1211):
r0 = socket$netlink(0x10, 0x3, 0x12)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2)
fsopen(&(0x7f0000001300)='jffs2\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000079e6ab73daccec7800", @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8040)

896.516827ms ago: executing program 1 (id=1212):
unshare(0x6a040000)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r4, 0x0, 0x0, 0x0, 0x12001, 0x1})
ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000000c0)={0x8, 0x2})
umount2(&(0x7f0000000040)='.\x00', 0x2)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000)
syz_emit_ethernet(0xc5, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x5, "ffffffffff600000000000009573de73ed4f1ab2f9febe8371b1f777374f629c8795839377eb7314bdf02b"}]}}}}}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000780))
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x2, 0x8a0f, 0x7fff, 0x200]}, &(0x7f0000000080)=0x78)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0x110)
fcntl$notify(r6, 0x402, 0x34)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)

836.838044ms ago: executing program 4 (id=1213):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async)
r1 = socket$inet_sctp(0x2, 0xa, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x4e, "f0ee1ce897e250431da4128f01d132e19fdf045eeb010338b127b965e330ba45d97937f2ec5459f75af3b31965faa8ead07e13beb562c5b626c78402cda1e02381f6dd307af52d6d1c1fb3fc3d8f"}, &(0x7f00000001c0)=0x56)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0xc, &(0x7f00000000c0)=[{0x29, '\x00', @data=0x5, 0xfffffff7}]}) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x900)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) (async)
read(r2, &(0x7f0000000200)=""/193, 0xc1) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0x4) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f00000005c0)='%'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)=0x5)

836.451715ms ago: executing program 5 (id=1214):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14}, 0x94)

835.604294ms ago: executing program 4 (id=1215):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async, rerun: 64)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async, rerun: 64)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffff9, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r3, r3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) (async)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, <r7=>0xffffffffffffffff}, './file0\x00'}) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006400000000000000002"], 0x5c}}, 0x0) (async, rerun: 64)
ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000500)={0x8000001, 0x0, 0x0, 0x1, 0x4000007}) (rerun: 64)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000580)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00008a1000/0x400000)=nil)

835.378075ms ago: executing program 5 (id=1216):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
close(r1) (async)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a"], 0x44}}, 0x0)

735.214534ms ago: executing program 4 (id=1217):
modify_ldt$write2(0x11, &(0x7f0000000040)={0x5, 0x0, 0xffffffffffffffff, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0xfffffffc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000004f00)={0x2, 0x5, "12a242", 0x1, 0x80}) (async)
syz_usb_connect(0x1, 0xeb, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x90, 0x44, 0xab, 0x8, 0xaf0, 0x7a01, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x2, 0x0, 0xff, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0xac, 0x2, 0x56, 0x38, 0x6e, 0x7, [], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0xc2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x143c}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0xad, 0x9, 0x2, 0xe8, 0xf1, 0x89, 0x4, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "fbcaf234cef8"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x9, 0x200, 0x1}, [@mdlm_detail={0x60, 0x24, 0x13, 0x0, "453b77ba401c978573a44f3fa71a6418dca2be47d578c6edde1e993aff36ecb28aed619e577b8c468051652a326518c2265c0f86921aac09ebe4d3d728576fa4d9db3212f2379abd0cbae51ca90b45293911646fe9c3365fb583810d"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x9, 0xbd, 0x7, [@generic={0x8, 0x21, "8742393d549c"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfe, 0x8b9}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x0, 0xc, 0x9f, 0x0, 0xff, 0xa0}, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}, 0x1, [{0x1c, &(0x7f0000000900)=@string={0x1c, 0x3, "277fd958627841e2a083b298333917f44139f298724abdb12b42"}}]})
r4 = getuid() (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'syzkaller1\x00', &(0x7f00000002c0)=@ethtool_rxfh_indir={0x39}})
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newsa={0xfc, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {{@in=@private=0xa010101, @in6=@empty, 0x4e20, 0x8, 0x4e24, 0x0, 0x2, 0x10, 0x0, 0x3a, r2, r4}, {@in6=@empty, 0x4d5, 0x6c}, @in6=@loopback, {0x1, 0x1ff, 0x1, 0x8000, 0x0, 0x0, 0x1, 0x7}, {0x5f, 0x4, 0x8, 0x3}, {0x7, 0x5, 0xfff}, 0x70bd29, 0x0, 0x2, 0xffffffffffffffff, 0x9, 0xae}, [@lastused={0xc, 0xf, 0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8011}, 0x8000)
r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000380), 0x840, 0x0)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x190, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x170, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x414}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa00}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ee9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffff81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffc848}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x610}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7d79}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffff8c6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) (async)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c27c80d408e5dafac07f86c361dafc", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf2505000000080006000500000008000400ffffff7f240002800800090006000000080009007f000000060002004e22000008000500260000000800050000000000080004000700000008000600450600001800018014000300ac14142b0000000000000000000000000c00028006000e004e24000008000500c00a00001c000180080009002200000008000b0073697000060002006c000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40080}, 0x54)

734.897614ms ago: executing program 5 (id=1218):
getrandom(&(0x7f0000000100)=""/246, 0xfffffffffffffd06, 0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1452c2, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfc, 0x2)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20000, 0x0)
ftruncate(r9, 0x8800000)
r10 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x42)
close(r10)
sendfile(r10, r9, 0x0, 0x578410ed)
ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000040)={0x3e, 0x8001, 0x4})
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r11 = dup2(r7, r7)
ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e})
bind$inet(r11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

734.59236ms ago: executing program 1 (id=1219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0xfffffffffffffedd, &(0x7f0000000100)={0x44b})
ptrace(0x11, r2)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa00ffffffffffff08004500001c00000000fb02907800000000e000030000009078006400d2"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

656.837842ms ago: executing program 1 (id=1220):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="8edc05f9", 0x4}], 0x1, &(0x7f00000005c0)=ANY=[], 0x60}}], 0x1, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close_range(r2, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000fb00)
socket$kcm(0x29, 0x2, 0x0) (async)
memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="8edc05f9", 0x4}], 0x1, &(0x7f00000005c0)=ANY=[], 0x60}}], 0x1, 0x0) (async)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) (async)
syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
sendfile(r0, r1, 0x0, 0x8000fb00) (async)

586.964024ms ago: executing program 1 (id=1221):
setreuid(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000380)='FROZEN\x00', 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x10, 0x1, 0xa78ddf8db9b949a4, 0x0, 0xf8})
timer_create(0x4, &(0x7f00000001c0)={0x0, 0x23, 0x2, @thr={&(0x7f0000000080)="e6ea16590a2dc55352e3b59e06e88701bbbe27837a8cc93ce8fbad8bdf6925fcc2b44885c643876f76e726246f9548de7a8ffa65afdad2331646df575f56fddd471370125f0cfc6a9a16193521b603a4", &(0x7f0000000100)="8591555bc61321103e5286fd0890166b9825aa42fb9253d6aac36bdfc3a150044f7a6229a3e251e7aacdf89a5ddf966bbe48e9f034d47cc45da05979d2ee761d24b5091027f77286c9a90ec7c86ddbdf69b212f7ed5b75bf3aeaad125aa120c7bd09fe3d452fcd4cc103b3e84b9375e7fcb52cb87d3c61f4dfd8a553f0914cde300c84bb770202770838b932c77ac8c62b307e44fe67098482bb56c9ee76c2"}}, &(0x7f0000000200))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x6}, 0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x8, 0x0, &(0x7f0000000240))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)

586.624238ms ago: executing program 1 (id=1222):
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0x7, <r0=>0xffffffffffffffff, 'id0\x00'})
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x2002)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x1a28, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)=0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xaf)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x1000, 0x1000, &(0x7f0000000740)="b5becd4ea4f9b7da9bef1d407d446e54f4ff3da3f7d7f1f9f8fe8386d9507962f387a5d901e56c8283c6651f267e8c700444bdac26fc0bc3f327f4cc4083a09c5069bf5c219c9bdd833a5ebf2d2adcd302328765e4061ace231b7776eb03a73610c9e02290dcf7525d558fa5fcbf7523b7e83269761ed5d57870fe4e58bbcb5bc31b688fb58e29eb89e99530048623e6adeb2eabb908c1c5d2f15e7d5b5ec93c22cb4f3664bb7c20e7c94d30a6f95b6a003bf90ff60f4b82e34eb8fdd356b2217510246433bb06f2eb9e8def68339f04be0aa22dacf0f5778b8c801a308afd3c841a0a8f3f291333651dfb4f7ea4c8428405cc64d77f60099391eefc73110c7480c0455723724fb37a9bd1209ad90640926866129e8fa09e3cb5c08f0b1d577a0d64d62d2eb63d332fbc1aa8d0b3de18560ca2038fb733a30a9b5025e1eb6bf0bf212d21619efc87f7e88b965769e30df6f8e354309a00b19c5b3b1e2ed56a9fbde1ed67a97ab943a28124e5198d2dd4396b5eb67fdbbe7588799c47b4255de802771c4720ec94713b906090dc6decf6b8956d7f5d4fa47a0a0d3bb2212298f4160bc13ddc19483f7a5bcb02ed69117970e8ca583c56b84c2fda85edf59a644f35c49eb061fca839a554998349dfe8a9fdac2bf7776de04435a356d8b93550f626fb6ef04ccebf21a01ec9138140858b8d1fe0969a1469f670de1505674c7bc487b70d39aa99b956cf30baab29d64f6dcc89dbf7f8ec8b17a879b5e191297d0335fe03ed726d7b0fb4bc25eedbb9b11c1bb8d57e48dd6b5559b5d3da6bbf4f571bc840a8e4a07c7d33e257f697adfcea2f0a5a82b52cfdd27022ccafa01f1198ccc447884de8749ba0ba9bb8629d295e9ffb84e53e9a73b2422608fe3693ef205cde45609bec5e413bee98c3c54096622cbf2342442cb087992f5ca0147d0a3c6077f28f1bf82c28b469cc68ddfdf69b269e70a643f6e86c5af1d2b60594a02242510a5a3534a915a2be8082ac6abd1b38672d15cf36d220a9a4a3f13f143babc5653be085a0586a2ecbd45a5fdc1cfee254a628f80d949213fe9c24724a7da856dc554552173551bfbd0fbbffc2b77cff81c70348f51c9da5882d8e02dbf8c57ef1ee0fb3ffde76b536681e15302d3b0ed82bb0de68e4079c35d75579d8f53536264815a85b10d1725505527f3302d35de82d172744aa100e21dfca08a4227cab75627ef405df776e42426689a75fa30133d6e518ee86b151614aa7d6ba1737c37628b29b7bcda36f5ccfd9b114ab462cffe2d417cf8f69dd8c147aae313155835ae185e141b4a87025c6b309f78b003543cb23291ba9c983ef88fb3e479db37d14051920fd3a8aee7fd7eb443369d98ea1078a36f3a9328e3e0634a80953c09255af4e0163a80db00a34805f2b0bf34133e499302a1a6377697df67df8d03209a4918242414d0eeddf00898e84c4ed902135929b0a64642c45aa04566312ec409e312800f02fc1f23f0c766eea85f571a9e8657c9443131a0c0e2254652753367cc8787e9d89842565495996fe64825516bde329115280b0875a6c9efaf7898b6b21d8b1e19b7940c9cd08a15712ee05876d5a6a801c88f12424d38f06aa94a20420485393fd3b6e764f256087d633f098f4709007d1275843373a99016cc70f6da7c675944dc24c3482ac28aa1b6060dedc96b1de1325ca3cd566d31b9057c57ccc190b9eb74a841fa8eb9868a63cae01f944b494af7cb0f67d0d7e3454c5b8d301a3769435e5202701cc753e6b7f7fb697f37ab1ea413d0caa49fd69686b6b33c2ff915c53cfcd44d25bf47394f7d07a4ad5792aaea7ffbf96061e2ea7063e9b7b6ac645200623acc7566f147f4b546eb3015ed211d96696314b8ba9964a5aad8a6e06d4ff72deef666eff706409a8dda4c185122f9c83c18abca413a6bb5fab5b0ffa5e63113dbf435a2e5677f70b536e6acdcd7e41026e57cfe4991d90dff396205949f7d2be5a423a04bd42b86dceb4feb1389b997145ccc8fe56bd0d5a38ad9ccca0d8447c5e95b76e9bd5cab03c84ce0b1fa45be42bff8b514a27c7d6c35cd19b915681670ca35e0e32be918a9b62e407914f09abcec77ea5b09f69b2d6b495bf82371ed980d02e222a7a81c59aa8187205fd127135a2b0fda694efda603b79342e595b6703c0b441886a9daf3657ec1b3a26d6be553f10a29126110cd6946ad2b4b59c27d7abda3a870835a84625b15e7077ae4429e16f60c2d411a003bcb56407e0c1e39b169077969dd77e3f46ba99213877db5ce5e366d0a36ead3a60e602d2201c7b834b1841680037dc953df7195ec28f56e8c499be4142b7963d7c6f5bfd8f71800ee4c5b9698f8e3ac85912b59d5d11decd7c979f2b1178353546339b3abdc0ffba9e62c763d91224171cd7ae1e2088cbd7ca34b166256035d11536b0a799e524b134a1e363382c4e431dc751b71947a58ce03365b8c76196abe4b57805cdbd80fbf327067ce48f02a647449d91a9906110ba69308ff289ee6c611eacbfc84947f4e1ca5b1907f4ceb6f7ed57475323973c6993cfd1e030197b50628bd284aaf66740d87848cdd512061a48fe82306693a4e5290e8e4dc109a9ea9b46945698d646f557adcc4253c737f637664f491dce8ee414fadf02080b403fd717ecf005bbadb7da56fac774e8f710da11b17a20dc118a6947e86f3fd35800043c3965e53b1e3f33ae3d8c96264a3edb416cd6f507b15a706e4fb4ea3bc5375fe7b40f3c01443b7b070334ba56daf7cc45cbd74082897743756e1f38bd8026163611305e480f31f98a285d30b3a43be3032fe99c537c81183a00f41820e46477104889d8a1e8c6e4f1a771342f4aa995ed139f3e034cc4f27ec4893ec8b04313e576d525eef7c728040559a2c6733b6d3e511bad754780321482e0deb72a88927eadc9bb303b9a78c68e636bcb7b5f58f4dadc3078bde6e58918b27facc79bdaca36a109e663d30754890f125cb1c25ca144a6c7cd78f6f3fe42bc1cb403b02b66c0aab0208f42259d657cb13f632d5a123dc3af5bfbbe5a6b7d0bd44a7d62e28ec64da1f787ebc4f1501e1785f80a5e75b3e8a90f1c8d9ff5824e2c9ae3ffa2e2212eba901d42d1060b273229817fd0801f2beb98e727a14caa72e2f5b7c0fa9f66e852c4cea2b8ab76a6fccefb773f75f9a187460ca9ef3acde0f46d2f1497e092a06aaa38413a82ca8e2fe079f719156e5a67a51e7f66100320a76a767e45d0aad49ef8a1ae8c5657d6ad55e488f13205ffa1fdb82b798e29658f74dba9eb15d736405fa9e863964dae2f21d5f2d94a98f56f48106eff308deff916b031d75ec1985c2b6ce5ec616da8b526f30c396b73c6031aa0cc04974712fe7fbed06f1c6a8eeebcae43510c05368ad3abf00873bae342ec8a2212f77d95962c8fc5b92d96e8b9169bd437a339521eda65c56165be2ce046dcb0fa523f1228c1709451f3cb4cbff005733b6c38d61664901a65f12b3ffc4875323db008133373695997bd7025e79950c17e9c141f5ada0591d2ab1987c4644e38eaa11ab57954ceffb479dadfdca5853f572cc764063eab0a5503b788a81c04a8b08a37b4caf418d9dece25aa5bace19a876a45bd76816142c310a7eb56286fe524fa758f932d7bfbbe03636447b02eb2b5a2ec5a1934b0bead1bfe748abce0c223648a65cf13864d0322d47196580ff560a7a2c11f44bf461eeafdff9ba8ef5f63b0ebab71666907f1af4199b4fae2c9d009f1ead971bb2c0ec1381703353ce057d3ede4eeb55b3e6fb63c76137d8702e9a05ae861128be7ba930ac66177fc815d5055b8fee6763f909706c812441ae4058362526fd983cc369599931937e6f8717d28548b1a15bc81259bdb5f8b8b9bcfa32db95296a1c36bd4811f80e357aa2cfba8e869d83ce82098f8bb7f4b5013293abf323b725f2d74686184eef9322535da7bf3feea3e4eed77327119c55ed6aebcb16add4c73e959fefa104343d483e632dc27b22d415be22af8faaf25ca28909aa1715d8fa5bb70b7a4eaaa535a1eed8383e1c74948479f40bb681ec2fe1b44edf3b946490aa062717c3b17b4d7750563c7492c96c20516c9be9cf83d567bb5ba87980055ee5a3af6aee2966d255c57fa6f805eb41ba741e6f77976ad1ea076a5821c05c3a7348808abacbf24ec8733769053ff114363457b2c66f2cd5ce9e3caf80bdef2f2afab045d09e2b3101e7b4d9660d12eaaf3e9a0238850c77b380477b4b227360a1e2f3b09dec8eaae9d924c38c3e6e25b5af102bd3b361cb78f4d654ec6c2ce9e9e4ddfc4d9025cfb4a66684de8f3ab06b02040b42074f36d6e926db092588f04a43f18b62eb98ef89c86b7d0e4dd46a50aa6ca24e2a99304521ffa513702b8bf1306fbb1bc5efe5db4c9ab501ac62c8e59344b96818f3093b14ab4e78a1f73549e4b56c86485236aafa57ba1bdae5e22e96f871bd8e8f84e5ee04a213eca8dd88515beb415c568227b762a4a1bc67c51ad5e9d5bf693c51fdbfe445489b50f73c8c2405a8135566f4104010a51308c11aa575c794204ce194d2ed538b097bf58624e437ac70ee12dbf9ace766a7148f9e35fed9e1103c57ce1276d376fd28d5ab8b421b727be8ca8d20cf15ba26782747ad46bb21d5c4fec973eec359ad572ca15eefbc91eb2329d14dfa31e4dac380e2e3553a7d71d1d4101cec8bbbcc276783c46bad4cd585bebdeecbac23bac6d4b86c9dbf316ba4529c73fb471237a7f0a10df28e9a4c5013e304ec7e3ba0f3fa0dfacffb73107ae1187ef89dd8b8c265903c195cf857bc256c98bc6a8e5745dc241157dc7e12ae4f9196b57e67f0922487be769985e1bbc7b3591bc72d36b0ce8bab00eb9643b8f90b315179ca8aa6b37c1640387064aede30c5e82251cd2fd5613087ea879443472b42ff7bb519b3b2c741bd39890f7dc441fb0f51f644659c46f2b0de07305655de27a216776bf5fa334da0dd0357e2921d4db97ed9624ed349b9eac9a2ed4dc2d1f788e0e61660fb7fc828018714149d71f0ecf4034ab19d510911b62bbec0f1c80dfd8aefd3f9fe8ba33925d8a8a2d3bbd4e64298cea6c6a62dc69422495d393f056a06de972b68b7ac2d3babc0069e3bc1378775705d6dafc129d631fc17d908c969c8ea589adddedbe71d8b98d03f978f03d71d13793d6794476b64478e830e8373c5800757901015accac8170228080d03b3bc3c6ae2cee450b4c41f2200f9b2fe2f4758c2b20efb662ca176299445a5f653262d439c56c0dfb841636dd9f2ec1460c4590279ca269d0e22e9caee31730d0b569b0bd249bfc37ac8088463b246ad133eaf21fdfd92de023a5db28e0d40dc43d2ef3100c01d1350464fa9e0420183020a3a598b5f7dbf92ed085441e312083e03eed78b90e59fbc21c3f5a9605f5477fd7f3047b23540be3709d19ceb64f55421f45398347a7d1a4604f060f632a86d4fb1945241e83949101b13da6a0e2b243d56ce63160e674f0160bed0122a848124dc9d0ecc9f8dbbc16525f917030b5e93bde98dc13416648f6d6ce05c740abf93348b0d01c3318430e9f64c71ca3f977046ec0ffcbdd4ee366c79ae9c035425eb643d1bf0c162fb0114231515d63129c04b42c0acdee6e93d2c6742034e33df1bf882d3c8702dc80ffd88ca72bf5692b81a35269b11f31b20c1296c74e6e1650be8bf8380c059496c83d047bcce1dda59ff6dbda90e8e7445e356bdbf6ecaa6ce7992bd27104583b4e52deab63a23e4cf2a0", &(0x7f0000001740)=""/4096, 0x25, 0x0, 0x29, 0x8a, &(0x7f0000000500)="dcd47b791aecd5e2f18cbaf9837a46fb15abc531b773a731347fe8d6fbfc49d8b6cc027fe86d5d5578", &(0x7f0000000540)="70daeafa171cf9e84ee0c3cb1ec266ddde5c1e2ff013a9e524e3b3e0fee6315fe30d0ff1e97dbe669fe07de45a96a8256ee07148dfb229dac6530fa59ef0d224128b532c6938e49fb212ac86763cd8e233551dbd10e3eabbfa3bc19f970ae4cfaa56fc38ac99648c1dcdd1a97a4f728ed2bee7faf2b826b1921ac93ec72820d6bfec1071550e29525fa7", 0x1}, 0x50)
r4 = dup(r1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r5, r5, 0x2f}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x240008c0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000380)={<r6=>0x0, 0xd7, "ef8abe664235c31b254ada8d9ff3191b5db6b54e3687178abfc1c4ed644e1ce964b578007c34f464a28b285f6c5aa77995d4786416bfd701bf6fa73fc2eadebbdf4395b228d45d096ea2a2292d025a94d55d4be17d351b46b70f299e72debf3314b775759c6517f0918d15302a5cd25216cd9916501f83511cf01e12d02f5ed50e305f407eb488d9a36f0eb3b033c6ff0906f1fcd00ef2bc9fc4f46af4cac362b7510698ee23714acb4c0b91f7db361ad21239253d42b8b74bcacc1d57213d634d1f21ce2b28923c936710fb8e519bc68c0ad440e23c79"}, &(0x7f0000000140)=0xdf)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r6}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd)

426.950444ms ago: executing program 5 (id=1223):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

415.36059ms ago: executing program 6 (id=1224):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_clone(0x20080000, &(0x7f0000000140), 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0xfffd, 0xee8, 0x8, 0xfffffffffffffff9, 0x7fb109e3, r0}) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0xfffd, 0xee8, 0x8, 0xfffffffffffffff9, 0x7fb109e3, r0})
unshare(0x6020400)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
gettid()
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc", 0x24)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef964", 0x79}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x91)
recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2) (async)
recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000480)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x4000ffc, 0x53}, 0x2c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)
r5 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0x2a)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x32) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x32)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4000}], 0x2, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000240)={[0x8]}, 0xffffffffffffff92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)

216.04456ms ago: executing program 6 (id=1225):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x81, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

213.159575ms ago: executing program 5 (id=1226):
r0 = socket$alg(0x26, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x1, 0x2, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x36}, @loopback}, 0x10)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x20000, 0x200000, 0x8})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
accept$alg(r0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0xbed, 0x3, 0xfd1, 0x0, [{0x9, 0x0, 0x4, '\x00', 0x6}, {0x9, 0x9, 0x6, '\x00', 0xad}, {0xf9, 0x8, 0x13}, {0x5, 0xfa, 0x40, '\x00', 0x2}, {0x1, 0x1, 0x1, '\x00', 0x4}, {0x81, 0x2, 0x2, '\x00', 0xed}, {0xa, 0x2, 0x7, '\x00', 0x9}, {0x2, 0x8, 0x4, '\x00', 0x2}, {0x8, 0x2, 0x5, '\x00', 0x10}, {0x1, 0x4, 0x3, '\x00', 0x3f}, {0x10, 0x3, 0x3, '\x00', 0xa}, {0x81, 0x7, 0x7b, '\x00', 0xf}, {0xc4, 0x9, 0x88, '\x00', 0x2}, {0xd6, 0x8, 0x59, '\x00', 0x8}, {0x1, 0x4, 0x5, '\x00', 0x3}, {0x6, 0x0, 0x40, '\x00', 0x8}, {0x8, 0x0, 0x6, '\x00', 0x8}, {0x1, 0x7d, 0x1, '\x00', 0x3}, {0x2, 0x81, 0x94, '\x00', 0x1}, {0x4, 0x7f, 0x0, '\x00', 0xd5}, {0x81, 0x8, 0x3, '\x00', 0x2}, {0x4, 0x7f, 0xa, '\x00', 0x2}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x9, 0x3, 0x3, '\x00', 0x7}]}})
close_range(r5, 0xffffffffffffffff, 0x0)

1.096385ms ago: executing program 6 (id=1227):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x1, 0x5000, 0x2000, &(0x7f0000dec000/0x2000)=nil})
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000cef000/0x2000)=nil)
sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

0s ago: executing program 5 (id=1228):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0xfffffffffffffedd, &(0x7f0000000100)={0x44b})
ptrace(0x11, r2)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa00ffffffffffff08004500001c00000000fb02907800000000e000030000009078006400d2"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=1229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_create(0x3, 0x0, &(0x7f0000044000)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r3, 0x407, 0x100004)
write$eventfd(r3, &(0x7f0000000240), 0xffffff14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

kernel console output (not intermixed with test programs):

t
[   93.519040][ T7851] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP)
[   93.565963][ T6574] usb 9-1: too many configurations: 9, using maximum allowed: 8
[   93.576256][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.581206][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.584890][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.591702][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.599296][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.603166][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.606089][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.609964][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.613601][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.616752][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.620220][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.623460][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.627077][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.631595][ T7860] nft_compat: unsupported protocol 0
[   93.632762][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.636916][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.639946][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.644480][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.649865][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.653551][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.657156][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.662615][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.667213][ T6574] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[   93.670931][ T6574] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   93.674390][ T6574] usb 9-1: config 0 interface 0 has no altsetting 0
[   93.678033][ T6574] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   93.681343][ T6574] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   93.683945][ T7864] binder: BINDER_SET_CONTEXT_MGR already set
[   93.684544][ T6574] usb 9-1: Product: syz
[   93.686541][ T7864] binder: 7863:7864 ioctl 4018620d 200000000000 returned -16
[   93.687926][ T6574] usb 9-1: Manufacturer: syz
[   93.691061][ T7864] binder: BINDER_SET_CONTEXT_MGR already set
[   93.694690][ T6574] usb 9-1: SerialNumber: syz
[   93.695637][ T7864] binder: 7863:7864 ioctl 4018620d 200000000000 returned -16
[   93.702541][ T7864] binder: BINDER_SET_CONTEXT_MGR already set
[   93.704943][ T7864] binder: 7863:7864 ioctl 4018620d 200000000000 returned -16
[   93.707042][ T7865] binder: BINDER_SET_CONTEXT_MGR already set
[   93.707776][ T6574] usb 9-1: config 0 descriptor??
[   93.713177][ T7865] binder: 7863:7865 ioctl 4018620d 200000000040 returned -16
[   93.713251][ T6574] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[   93.714611][ T7866] binder: 7863:7866 ioctl c0306201 2000000003c0 returned -22
[   93.799426][   T13] Bluetooth: hci4: Frame reassembly failed (-84)
[   93.923773][ T6574] usb 9-1: USB disconnect, device number 4
[   93.929860][ T6574] yurex 9-1:0.0: USB YUREX #0 now disconnected
[   94.336231][ T7893] tmpfs: Bad value for 'mpol'
[   94.337970][ T7893] tmpfs: Bad value for 'mpol'
[   94.343819][ T7893] tmpfs: Bad value for 'mpol'
[   94.345503][ T7893] tmpfs: Bad value for 'mpol'
[   94.347104][ T7893] tmpfs: Bad value for 'mpol'
[   94.349005][ T7893] tmpfs: Bad value for 'mpol'
[   94.351536][ T7893] tmpfs: Bad value for 'mpol'
[   94.353252][ T7893] tmpfs: Bad value for 'mpol'
[   94.354894][ T7893] tmpfs: Bad value for 'mpol'
[   94.356515][ T7893] tmpfs: Bad value for 'mpol'
[   94.358130][ T7893] tmpfs: Bad value for 'mpol'
[   94.360741][ T7893] tmpfs: Bad value for 'mpol'
[   94.362904][ T7893] tmpfs: Bad value for 'mpol'
[   94.364550][ T7893] tmpfs: Bad value for 'mpol'
[   94.366147][ T7893] tmpfs: Bad value for 'mpol'
[   94.367761][ T7893] tmpfs: Bad value for 'mpol'
[   94.369470][ T7893] tmpfs: Bad value for 'mpol'
[   94.371158][ T7893] tmpfs: Bad value for 'mpol'
[   94.372884][ T7893] tmpfs: Bad value for 'mpol'
[   94.374476][ T7893] tmpfs: Bad value for 'mpol'
[   94.376091][ T7893] tmpfs: Bad value for 'mpol'
[   94.377800][ T7893] tmpfs: Bad value for 'mpol'
[   94.379584][ T7893] tmpfs: Bad value for 'mpol'
[   94.381225][ T7893] tmpfs: Bad value for 'mpol'
[   94.382930][ T7893] tmpfs: Bad value for 'mpol'
[   94.384571][ T7893] tmpfs: Bad value for 'mpol'
[   94.386348][ T7893] tmpfs: Bad value for 'mpol'
[   94.388121][ T7893] tmpfs: Bad value for 'mpol'
[   94.389995][ T7893] tmpfs: Bad value for 'mpol'
[   94.498253][ T7903] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003
[   94.501785][ T7905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.534'.
[   94.504725][ T7905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.534'.
[   94.545187][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.547285][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.551613][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.554285][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.033811][ T2299] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   95.119555][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.122691][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.125956][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.130039][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.132674][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.154873][ T7923] xfrm0 speed is unknown, defaulting to 1000
[   95.180188][ T2299] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 39964, setting to 64
[   95.183625][ T2299] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   95.187494][ T2299] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   95.190458][ T2299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.195069][ T2299] usb 9-1: config 0 descriptor??
[   95.200394][ T2299] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[   95.251569][ T7923] chnl_net:caif_netlink_parms(): no params data found
[   95.298423][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.300768][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.302980][ T7923] bridge_slave_0: entered allmulticast mode
[   95.305553][ T7923] bridge_slave_0: entered promiscuous mode
[   95.308835][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.311108][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.313520][ T7923] bridge_slave_1: entered allmulticast mode
[   95.316249][ T7923] bridge_slave_1: entered promiscuous mode
[   95.331590][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.335996][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.351758][ T7923] team0: Port device team_slave_0 added
[   95.354732][ T7923] team0: Port device team_slave_1 added
[   95.369194][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.371446][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.379267][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.383501][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.385688][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.393775][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.417965][ T7923] hsr_slave_0: entered promiscuous mode
[   95.420330][ T7923] hsr_slave_1: entered promiscuous mode
[   95.422384][ T7923] debugfs: 'hsr0' already exists in 'hsr'
[   95.424206][ T7923] Cannot create hsr debugfs directory
[   95.514406][ T7923] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   95.519226][ T7923] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   95.523649][ T7923] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   95.528313][ T7923] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   95.538944][ T5291] Bluetooth: hci1: command 0x040f tx timeout
[   95.546415][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.548722][ T7923] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.551831][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.554032][ T7923] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.585952][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.593907][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.597085][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.610440][ T7923] 8021q: adding VLAN 0 to HW filter on device team0
[   95.620181][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.622487][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.631225][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.633633][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.766988][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.858810][ T5291] Bluetooth: hci4: command 0x1003 tx timeout
[   95.861840][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   95.909992][ T7923] veth0_vlan: entered promiscuous mode
[   95.915226][ T7923] veth1_vlan: entered promiscuous mode
[   95.931380][ T7923] veth0_macvtap: entered promiscuous mode
[   95.935239][ T7923] veth1_macvtap: entered promiscuous mode
[   95.943622][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.951265][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.957751][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.961505][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.964969][   T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.969488][   T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.018348][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.021759][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.036914][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.040271][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.056902][   T40] kauditd_printk_skb: 11 callbacks suppressed
[   96.056914][   T40] audit: type=1400 audit(1770660876.013:514): avc:  denied  { mounton } for  pid=7923 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   96.083156][ T7950] netlink: 'syz.5.540': attribute type 1 has an invalid length.
[   96.140466][   T40] audit: type=1400 audit(1770660876.103:515): avc:  denied  { listen } for  pid=7949 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   96.157263][ T7952] xfrm0 speed is unknown, defaulting to 1000
[   96.234260][ T7957] netlink: 'syz.5.541': attribute type 1 has an invalid length.
[   96.483262][ T7975] netlink: 'syz.5.546': attribute type 3 has an invalid length.
[   96.490479][   T40] audit: type=1400 audit(1770660876.453:516): avc:  denied  { mounton } for  pid=7971 comm="syz.1.545" path="/proc/462/task" dev="proc" ino=21156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   96.513699][ T7972] netlink: 52 bytes leftover after parsing attributes in process `syz.1.545'.
[   96.517575][ T7972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.545'.
[   96.808890][ T6152] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   96.898890][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   96.958666][ T6152] usb 10-1: Using ep0 maxpacket: 32
[   96.960911][ T6152] usb 10-1: no configurations
[   96.962422][ T6152] usb 10-1: can't read configurations, error -22
[   97.048757][   T10] usb 6-1: Using ep0 maxpacket: 8
[   97.051657][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   97.054440][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.065043][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[   97.067657][   T10] pvrusb2: **********
[   97.069778][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   97.072913][   T10] pvrusb2: Important functionality might not be entirely working.
[   97.075298][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   97.078815][   T10] pvrusb2: **********
[   97.088748][ T6152] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   97.138801][ T5932] Bluetooth: hci3: command tx timeout
[   97.238684][ T6152] usb 10-1: Using ep0 maxpacket: 32
[   97.240860][ T6152] usb 10-1: no configurations
[   97.242625][ T6152] usb 10-1: can't read configurations, error -22
[   97.245358][ T6152] usb usb10-port1: attempt power cycle
[   97.265768][ T2490] pvrusb2: Invalid write control endpoint
[   97.292526][ T2490] pvrusb2: Invalid write control endpoint
[   97.295814][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   97.299702][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   97.302184][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   97.305397][ T2490] pvrusb2: Device being rendered inoperable
[   97.307392][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   97.310523][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   97.316017][ T2490] pvrusb2: Attached sub-driver cx25840
[   97.318065][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   97.321848][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   97.468872][ T7986] geneve2: entered promiscuous mode
[   97.475692][   T53] usb 6-1: USB disconnect, device number 9
[   97.579184][ T6152] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   97.599419][ T6152] usb 10-1: Using ep0 maxpacket: 32
[   97.602600][ T6152] usb 10-1: no configurations
[   97.604228][ T6152] usb 10-1: can't read configurations, error -22
[   97.656052][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.728688][ T6152] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[   97.742097][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.749243][ T6152] usb 10-1: Using ep0 maxpacket: 32
[   97.750104][ T6012] usb 9-1: USB disconnect, device number 5
[   97.753551][ T6152] usb 10-1: no configurations
[   97.756544][ T6152] usb 10-1: can't read configurations, error -22
[   97.759760][ T6152] usb usb10-port1: unable to enumerate USB device
[   97.811317][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.907015][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.018540][   T12] bridge_slave_1: left allmulticast mode
[   98.021051][   T12] bridge_slave_1: left promiscuous mode
[   98.023263][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.039349][   T12] bridge_slave_0: left allmulticast mode
[   98.041332][   T12] bridge_slave_0: left promiscuous mode
[   98.044210][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.122434][ T8000] xt_CT: You must specify a L4 protocol and not use inversions on it
[   98.193492][   T12] bond3 (unregistering): (slave geneve2): Releasing active interface
[   98.238761][ T6012] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   98.398735][ T6012] usb 9-1: Using ep0 maxpacket: 8
[   98.402847][ T6012] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   98.407596][ T6012] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   98.411627][ T6012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.417096][ T6012] usb 9-1: config 0 descriptor??
[   98.433616][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.439816][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.444909][   T12] bond0 (unregistering): Released all slaves
[   98.526869][   T12] bond1 (unregistering): Released all slaves
[   98.605908][   T12] bond2 (unregistering): Released all slaves
[   98.631852][ T6012] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   98.675938][   T12] bond3 (unregistering): Released all slaves
[   98.833958][ T6012] usb 9-1: USB disconnect, device number 6
[   98.996201][   T12] hsr_slave_0: left promiscuous mode
[   99.000259][   T12] hsr_slave_1: left promiscuous mode
[   99.002337][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.004625][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.007407][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.010085][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.021344][   T12] veth1_macvtap: left promiscuous mode
[   99.023267][   T12] veth0_macvtap: left promiscuous mode
[   99.025035][   T12] veth1_vlan: left promiscuous mode
[   99.218757][ T5932] Bluetooth: hci3: command tx timeout
[   99.470896][ T5291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   99.474430][ T5291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   99.477347][ T5291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   99.489037][ T5291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   99.491985][ T5291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   99.571302][   T12] team0 (unregistering): Port device team_slave_1 removed
[   99.611852][   T12] team0 (unregistering): Port device team_slave_0 removed
[   99.828739][ T6012] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   99.868152][ T8023] xfrm0 speed is unknown, defaulting to 1000
[   99.988687][ T6012] usb 9-1: Using ep0 maxpacket: 8
[  100.001280][ T6012] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  100.004620][ T6012] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.009501][ T6012] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.013192][ T6012] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.016951][ T6012] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.028837][ T6012] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  100.030084][   T54] libceph: connect (1)[c::]:6789 error -101
[  100.032075][ T6012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.036600][ T8036] xfrm0 speed is unknown, defaulting to 1000
[  100.050506][   T54] libceph: mon0 (1)[c::]:6789 connect error
[  100.054767][ T8039] ceph: No mds server is up or the cluster is laggy
[  100.059539][   T54] libceph: connect (1)[c::]:6789 error -101
[  100.061515][   T54] libceph: mon0 (1)[c::]:6789 connect error
[  100.090845][ T8023] chnl_net:caif_netlink_parms(): no params data found
[  100.155936][   T40] audit: type=1400 audit(1770660880.113:517): avc:  denied  { write } for  pid=8057 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  100.220528][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.223056][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.225405][ T8023] bridge_slave_0: entered allmulticast mode
[  100.231907][ T8023] bridge_slave_0: entered promiscuous mode
[  100.237230][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.240756][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.245642][ T8023] bridge_slave_1: entered allmulticast mode
[  100.248288][ T8023] bridge_slave_1: entered promiscuous mode
[  100.251580][ T6012] usb 9-1: usb_control_msg returned -32
[  100.253384][ T6012] usbtmc 9-1:16.0: can't read capabilities
[  100.291054][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.295363][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.312871][ T8023] team0: Port device team_slave_0 added
[  100.318129][ T8023] team0: Port device team_slave_1 added
[  100.344116][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.346928][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.357727][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.363988][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.366915][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.377328][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.413298][ T8023] hsr_slave_0: entered promiscuous mode
[  100.415733][ T8023] hsr_slave_1: entered promiscuous mode
[  100.425278][   T40] audit: type=1400 audit(1770660880.383:518): avc:  denied  { write } for  pid=8076 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  100.461777][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'.
[  100.606877][ T8092] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0
[  100.612438][   T53] usb 9-1: USB disconnect, device number 7
[  100.639194][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.567'.
[  100.651677][ T8023] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  100.670550][ T8023] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  100.675421][ T8023] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  100.685686][ T8023] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  100.708353][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.711524][ T8023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.714738][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.717742][ T8023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.765039][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.788264][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.792694][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.849652][ T8023] 8021q: adding VLAN 0 to HW filter on device team0
[  100.856354][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.858715][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.868093][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.870451][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.905461][ T8121] netlink: 'syz.1.570': attribute type 1 has an invalid length.
[  100.933671][   T40] audit: type=1400 audit(1770660880.893:519): avc:  denied  { create } for  pid=8125 comm="syz.5.572" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  100.946241][ T8121] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.972172][ T8121] bond1: (slave ip6erspan0): making interface the new active one
[  100.975726][ T8121] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  101.015660][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.066930][ T8143] /dev/nullb0: Can't open blockdev
[  101.071924][ T8143] /dev/nullb0: Can't open blockdev
[  101.074541][ T8143] /dev/nullb0: Can't open blockdev
[  101.077150][ T8143] /dev/nullb0: Can't open blockdev
[  101.082541][ T8143] /dev/nullb0: Can't open blockdev
[  101.084961][ T8143] /dev/nullb0: Can't open blockdev
[  101.087524][ T8143] /dev/nullb0: Can't open blockdev
[  101.090369][ T8143] /dev/nullb0: Can't open blockdev
[  101.092930][ T8143] /dev/nullb0: Can't open blockdev
[  101.096946][ T8143] /dev/nullb0: Can't open blockdev
[  101.100635][ T8143] /dev/nullb0: Can't open blockdev
[  101.104609][ T8143] /dev/nullb0: Can't open blockdev
[  101.107178][ T8143] /dev/nullb0: Can't open blockdev
[  101.109849][ T8143] /dev/nullb0: Can't open blockdev
[  101.112715][ T8143] /dev/nullb0: Can't open blockdev
[  101.115236][ T8143] /dev/nullb0: Can't open blockdev
[  101.118309][ T8143] /dev/nullb0: Can't open blockdev
[  101.121270][ T8143] /dev/nullb0: Can't open blockdev
[  101.123873][ T8143] /dev/nullb0: Can't open blockdev
[  101.126442][ T8143] /dev/nullb0: Can't open blockdev
[  101.129373][ T8143] /dev/nullb0: Can't open blockdev
[  101.132137][ T8143] /dev/nullb0: Can't open blockdev
[  101.134694][ T8143] /dev/nullb0: Can't open blockdev
[  101.137570][ T8143] /dev/nullb0: Can't open blockdev
[  101.141293][ T8143] /dev/nullb0: Can't open blockdev
[  101.143854][ T8143] /dev/nullb0: Can't open blockdev
[  101.146422][ T8143] /dev/nullb0: Can't open blockdev
[  101.149758][ T8143] /dev/nullb0: Can't open blockdev
[  101.152300][ T8143] /dev/nullb0: Can't open blockdev
[  101.154823][ T8143] /dev/nullb0: Can't open blockdev
[  101.157345][ T8143] /dev/nullb0: Can't open blockdev
[  101.160540][ T8143] /dev/nullb0: Can't open blockdev
[  101.163035][ T8143] /dev/nullb0: Can't open blockdev
[  101.202837][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'.
[  101.206640][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'.
[  101.219728][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'.
[  101.223622][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'.
[  101.230294][   T60] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.231247][   T40] audit: type=1400 audit(1770660881.193:520): avc:  denied  { bind } for  pid=8150 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  101.233821][   T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.241851][   T40] audit: type=1400 audit(1770660881.193:521): avc:  denied  { name_bind } for  pid=8150 comm="syz.1.576" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  101.255324][   T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.256883][   T40] audit: type=1400 audit(1770660881.193:522): avc:  denied  { node_bind } for  pid=8150 comm="syz.1.576" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  101.259056][   T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.259715][ T8153] vcan0: tx address claim with dest, not broadcast
[  101.275982][ T8023] veth0_vlan: entered promiscuous mode
[  101.286779][ T8023] veth1_vlan: entered promiscuous mode
[  101.299837][ T5932] Bluetooth: hci3: command tx timeout
[  101.311233][ T8023] veth0_macvtap: entered promiscuous mode
[  101.317218][ T8023] veth1_macvtap: entered promiscuous mode
[  101.326782][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.331009][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.342699][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.345489][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.350854][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.353612][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.423382][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.425855][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.456682][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.468735][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.515009][ T8164] netlink: 'syz.4.580': attribute type 21 has an invalid length.
[  101.518238][ T8164] netlink: 'syz.4.580': attribute type 6 has an invalid length.
[  101.527466][ T8164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.580'.
[  101.540148][ T5291] Bluetooth: hci4: command tx timeout
[  101.552516][ T8168] netlink: 'syz.1.581': attribute type 1 has an invalid length.
[  101.555006][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.671578][ T8179] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  101.716451][   T40] audit: type=1400 audit(1770660881.673:523): avc:  denied  { read } for  pid=8181 comm="syz.4.586" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  101.726116][   T40] audit: type=1400 audit(1770660881.673:524): avc:  denied  { open } for  pid=8181 comm="syz.4.586" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  101.738086][   T40] audit: type=1400 audit(1770660881.683:525): avc:  denied  { ioctl } for  pid=8181 comm="syz.4.586" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  101.821755][ T8195] netlink: 'syz.6.589': attribute type 2 has an invalid length.
[  102.168816][ T6012] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  102.258738][ T6011] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  102.328685][ T6012] usb 6-1: Using ep0 maxpacket: 32
[  102.332030][ T6012] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  102.337315][ T6012] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  102.341748][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  102.345256][ T6012] usb 6-1: Product: syz
[  102.347115][ T6012] usb 6-1: Manufacturer: syz
[  102.349866][ T6012] usb 6-1: SerialNumber: syz
[  102.354137][ T6012] usb 6-1: config 0 descriptor??
[  102.357060][ T8210] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  102.361858][ T6012] hub 6-1:0.0: bad descriptor, ignoring hub
[  102.365217][ T6012] hub 6-1:0.0: probe with driver hub failed with error -5
[  102.408748][ T6011] usb 11-1: Using ep0 maxpacket: 8
[  102.414340][ T6011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  102.420240][ T6011] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  102.424013][ T6011] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.432466][ T6011] usb 11-1: config 0 descriptor??
[  102.568357][ T8210] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  102.574194][ T8210] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock
[  102.578078][ T8210] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  102.591126][ T8210] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock
[  102.602591][ T8229] syzkaller0: entered promiscuous mode
[  102.606084][ T8229] syzkaller0: entered allmulticast mode
[  102.627925][ T8229] tipc: Started in network mode
[  102.630666][ T8229] tipc: Node identity ba50535bd3b8, cluster identity 4711
[  102.634297][ T8229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.644933][ T8229] tipc: Resetting bearer <eth:syzkaller0>
[  102.648902][ T8229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.653920][ T8228] tipc: Resetting bearer <eth:syzkaller0>
[  102.663874][ T8228] tipc: Disabling bearer <eth:syzkaller0>
[  102.708867][ T6574] usb 6-1: USB disconnect, device number 10
[  102.839225][ T8217] tmpfs: Unknown parameter 'nr_inodes	2'
[  102.841968][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.846266][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.862312][ T6011] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  102.870834][ T6011] usb 11-1: USB disconnect, device number 2
[  103.137790][ T8237] netlink: 'syz.1.603': attribute type 5 has an invalid length.
[  103.140625][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  103.144935][ T8237] netlink: 'syz.1.603': attribute type 5 has an invalid length.
[  103.148023][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  103.212861][   T40] audit: type=1400 audit(1770660883.173:526): avc:  denied  { connect } for  pid=8242 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  103.224705][ T8244] 9pnet: Found fid 0 not clunked
[  103.233161][ T8243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  103.256653][ T8243] input: failed to attach handler evdev to device input9, error: -4
[  103.378705][ T5291] Bluetooth: hci3: command tx timeout
[  103.463213][ T8263] vlan2: entered promiscuous mode
[  103.465458][ T8263] bridge0: entered promiscuous mode
[  103.468958][ T8265] overlayfs: conflicting options: userxattr,redirect_dir=on
[  103.476487][ T8265] overlayfs: conflicting options: userxattr,redirect_dir=on
[  103.482327][ T8263] tmpfs: Unknown parameter 'fowner>18446744073709551615'
[  103.527363][   T40] audit: type=1400 audit(1770660883.483:527): avc:  denied  { remount } for  pid=8270 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  103.538213][   T40] audit: type=1400 audit(1770660883.493:528): avc:  denied  { read } for  pid=8269 comm="syz.6.612" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  103.549110][   T40] audit: type=1400 audit(1770660883.493:529): avc:  denied  { open } for  pid=8269 comm="syz.6.612" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  103.618961][ T5291] Bluetooth: hci4: command tx timeout
[  103.818715][ T6011] usb 11-1: new full-speed USB device number 3 using dummy_hcd
[  103.824784][ T8284] netlink: 64 bytes leftover after parsing attributes in process `syz.4.615'.
[  103.869233][ T8286] program syz.4.616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  103.949178][ T6011] usb 11-1: device descriptor read/64, error -71
[  104.208806][ T6011] usb 11-1: new full-speed USB device number 4 using dummy_hcd
[  104.358682][ T6011] usb 11-1: device descriptor read/64, error -71
[  104.475890][ T8302] netlink: 'syz.5.622': attribute type 15 has an invalid length.
[  104.478954][ T6011] usb usb11-port1: attempt power cycle
[  104.561658][ T8306] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  104.572149][ T8306] syz_tun: entered allmulticast mode
[  104.589087][ T8309] create_pit_timer: 12 callbacks suppressed
[  104.589105][ T8309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  104.605644][ T8308] xt_TPROXY: Can be used only with -p tcp or -p udp
[  104.617624][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  104.658381][ T8308] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[  104.741475][ T8311] syz_tun: left allmulticast mode
[  104.770465][ T8320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8320 comm=syz.1.628
[  104.775605][ T8320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8320 comm=syz.1.628
[  104.848716][ T6011] usb 11-1: new full-speed USB device number 5 using dummy_hcd
[  104.869112][ T6011] usb 11-1: device descriptor read/8, error -71
[  104.918656][   T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  105.012619][ T8331] xt_TCPMSS: Only works on TCP SYN packets
[  105.098744][   T34] usb 10-1: Using ep0 maxpacket: 32
[  105.101974][   T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.105338][   T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.108383][   T34] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  105.111248][ T6011] usb 11-1: new full-speed USB device number 6 using dummy_hcd
[  105.113778][   T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.117947][   T34] usb 10-1: config 0 descriptor??
[  105.129533][ T6011] usb 11-1: device descriptor read/8, error -71
[  105.240101][ T6011] usb usb11-port1: unable to enumerate USB device
[  105.504461][ T8345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8345 comm=syz.4.637
[  105.510596][ T8345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8345 comm=syz.4.637
[  105.537176][   T34] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  105.588987][ T6574] IPVS: starting estimator thread 0...
[  105.589015][ T8347] IPVS: set_ctl: invalid protocol: 137 10.1.1.5:20001
[  105.595318][ T8347] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  105.598397][ T8347] __nla_validate_parse: 3 callbacks suppressed
[  105.598407][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'.
[  105.699845][ T8350] IPVS: using max 43 ests per chain, 103200 per kthread
[  105.708727][ T5291] Bluetooth: hci4: command tx timeout
[  105.782874][   T34] usb 10-1: USB disconnect, device number 6
[  106.066682][ T8376] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  106.151291][ T8385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8385 comm=syz.1.646
[  106.157277][ T8385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8385 comm=syz.1.646
[  106.345081][ T8392] loop6: detected capacity change from 0 to 524287999
[  106.348575][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.351850][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.354901][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.359473][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.362663][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.365790][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.369984][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.372443][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.375522][ T6340] ldm_validate_partition_table(): Disk read failed.
[  106.378039][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.381342][ T6340] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.384569][ T6340] Dev loop6: unable to read RDB block 0
[  106.386671][ T6340]  loop6: unable to read partition table
[  106.392221][ T8392] ldm_validate_partition_table(): Disk read failed.
[  106.395134][ T8392] Dev loop6: unable to read RDB block 0
[  106.476517][ T8392]  loop6: unable to read partition table
[  106.478530][ T8392] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  106.482188][ T6340] ldm_validate_partition_table(): Disk read failed.
[  106.485095][ T6340] Dev loop6: unable to read RDB block 0
[  106.487567][ T6340]  loop6: unable to read partition table
[  106.499466][ T8393] ldm_validate_partition_table(): Disk read failed.
[  106.501652][ T8393] Dev loop6: unable to read RDB block 0
[  106.503516][ T8393]  loop6: unable to read partition table
[  106.505584][ T8393] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  106.615610][ T8397] 9pnet_virtio: no channels available for device syz
[  106.778369][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  106.778385][   T40] audit: type=1400 audit(1770660886.733:537): avc:  denied  { append } for  pid=8405 comm="syz.6.654" path="/15/file0/cpuset.effective_cpus" dev="9p" ino=72614223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.796208][   T40] audit: type=1400 audit(1770660886.743:538): avc:  denied  { lock } for  pid=8405 comm="syz.6.654" path="/15/file0/cpuset.effective_cpus" dev="9p" ino=72614223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.811309][   T40] audit: type=1400 audit(1770660886.773:539): avc:  denied  { mounton } for  pid=8405 comm="syz.6.654" path="/15/file0/file0" dev="9p" ino=72613971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.811327][ T8407] fuse: Bad value for 'fd'
[  107.002206][   T40] audit: type=1400 audit(1770660886.963:540): avc:  denied  { watch watch_reads } for  pid=8426 comm="syz.6.657" path="/17/file1" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.057416][ T8427] netlink: 'syz.6.657': attribute type 1 has an invalid length.
[  107.078276][ T8432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8432 comm=syz.1.658
[  107.080475][ T8427] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.084629][ T8432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8432 comm=syz.1.658
[  107.095094][ T8427] netlink: 48 bytes leftover after parsing attributes in process `syz.6.657'.
[  107.125823][ T8434] program syz.1.659 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.158242][ T8436] netlink: 72 bytes leftover after parsing attributes in process `syz.6.660'.
[  107.168334][   T40] audit: type=1400 audit(1770660887.103:541): avc:  denied  { write } for  pid=8433 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  107.184726][ T8443] syz.5.661 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  107.201744][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.206945][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.258723][   T40] audit: type=1400 audit(1770660887.213:542): avc:  denied  { write } for  pid=8457 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  107.286084][ T8460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8460 comm=syz.6.667
[  107.291617][ T8460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8460 comm=syz.6.667
[  107.373441][ T8473] netlink: 'syz.6.671': attribute type 11 has an invalid length.
[  107.376174][ T8473] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.671'.
[  107.382313][ T8474] wg1: entered promiscuous mode
[  107.384091][ T8474] wg1: entered allmulticast mode
[  107.458784][ T8472] nbd0: detected capacity change from 0 to 127
[  107.468255][ T5291] block nbd0: Receive control failed (result -104)
[  107.538436][ T8482] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.591481][ T8491] nftables ruleset with unbound set
[  107.610771][   T40] audit: type=1400 audit(1770660887.563:543): avc:  denied  { ioctl } for  pid=8488 comm="syz.1.677" path="socket:[26700]" dev="sockfs" ino=26700 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  107.721967][   T40] audit: type=1400 audit(1770660887.683:544): avc:  denied  { watch_sb } for  pid=8494 comm="syz.4.678" path="/74/file0" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.748943][ T8500] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  107.752813][ T8500] syz_tun: entered allmulticast mode
[  107.764382][ T8503] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  107.775190][ T8505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.680'.
[  107.778854][ T5291] Bluetooth: hci4: command tx timeout
[  107.778921][ T8505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.680'.
[  107.837688][ T8503] devpts: Bad value for 'max'
[  107.931198][ T8502] syz_tun: left allmulticast mode
[  108.239278][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.683'.
[  108.339775][ T8522] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  108.343000][ T8522] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  108.349523][ T8522] netlink: 'syz.5.686': attribute type 1 has an invalid length.
[  108.352116][ T8522] netlink: 14436 bytes leftover after parsing attributes in process `syz.5.686'.
[  108.359868][   T40] audit: type=1400 audit(1770660888.323:545): avc:  denied  { map } for  pid=8521 comm="syz.5.686" path="socket:[26285]" dev="sockfs" ino=26285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  108.520462][ T8533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.690'.
[  108.524875][ T8533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.690'.
[  108.629959][   T40] audit: type=1400 audit(1770660888.593:546): avc:  denied  { bpf } for  pid=8538 comm="syz.6.692" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  108.832978][ T8558] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  108.840771][ T8558] syz_tun: entered allmulticast mode
[  108.862248][ T8564] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  108.954175][ T8569] netlink: 'syz.4.697': attribute type 10 has an invalid length.
[  108.960513][ T8569] team0: Device vxcan1 is of different type
[  108.983918][ T8573] tmpfs: Bad value for 'mpol'
[  109.658796][ T8589] nbd1: detected capacity change from 0 to 127
[  110.023648][ T5291] block nbd1: Receive control failed (result -104)
[  110.306104][ T8598] xfrm0 speed is unknown, defaulting to 1000
[  110.376598][ T8603] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  110.593145][ T8621] Unsupported ieee802154 address type: 0
[  110.703135][ T8629] __nla_validate_parse: 5 callbacks suppressed
[  110.703153][ T8629] netlink: 36 bytes leftover after parsing attributes in process `syz.6.718'.
[  110.711643][ T8629] netlink: 36 bytes leftover after parsing attributes in process `syz.6.718'.
[  110.838058][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.720'.
[  110.955195][ T8646] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080
[  111.134441][ T8655] hfs: can't find a HFS filesystem on dev sr0
[  111.238411][   T34] IPVS: starting estimator thread 0...
[  111.308449][ T8668] xt_connbytes: Forcing CT accounting to be enabled
[  111.338738][ T8663] IPVS: using max 43 ests per chain, 103200 per kthread
[  111.450426][ T8677] netem: change failed
[  111.589074][    T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  111.657704][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'.
[  111.675901][ T8687] kernel read not supported for file /policy (pid: 8687 comm: syz.1.731)
[  111.743172][    T9] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  111.746428][    T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  111.750439][    T9] usb 11-1: Product: syz
[  111.751896][    T9] usb 11-1: Manufacturer: syz
[  111.753467][    T9] usb 11-1: SerialNumber: syz
[  111.757068][    T9] usb 11-1: config 0 descriptor??
[  111.761264][    T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  111.764093][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  111.770663][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  111.775740][    T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  111.781116][    T9] usb 11-1: media controller created
[  111.797446][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  111.963703][ T8673] cxusb: i2c rd: len=8192 is too big!
[  111.963703][ T8673] 
[  111.972413][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.726'.
[  112.067276][    T9] cxusb: set interface failed
[  112.069462][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  112.093713][    T9] DVB: Unable to find symbol mt352_attach()
[  112.096350][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  112.100356][    T9] zl10353_read_register: readreg error (reg=127, ret==-121)
[  112.103913][    T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  112.158701][    T9] rc_core: IR keymap rc-dvico-mce not found
[  112.161330][    T9] Registered IR keymap rc-empty
[  112.177542][    T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0
[  112.185968][    T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input13
[  112.200616][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  112.203669][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  112.210934][    T9] usb 11-1: USB disconnect, device number 7
[  112.257600][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  112.286859][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  112.286877][   T40] audit: type=1400 audit(1770660892.243:561): avc:  denied  { create } for  pid=8695 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  112.372376][   T40] audit: type=1400 audit(1770660892.333:562): avc:  denied  { connect } for  pid=8704 comm="syz.5.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.384636][   T40] audit: type=1400 audit(1770660892.343:563): avc:  denied  { execute } for  pid=8704 comm="syz.5.735" dev="hugetlbfs" ino=28771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  112.398765][   T40] audit: type=1400 audit(1770660892.343:564): avc:  denied  { execute_no_trans } for  pid=8704 comm="syz.5.735" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=28771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  112.457313][ T8714] netlink: 'syz.5.737': attribute type 21 has an invalid length.
[  112.464046][   T40] audit: type=1400 audit(1770660892.423:565): avc:  denied  { ioctl } for  pid=8713 comm="syz.5.737" path="socket:[28781]" dev="sockfs" ino=28781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  112.546917][ T8719] netlink: 44 bytes leftover after parsing attributes in process `syz.5.739'.
[  112.550290][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.739'.
[  112.568049][ T8719] block device autoloading is deprecated and will be removed.
[  112.632430][   T40] audit: type=1400 audit(1770660892.583:566): avc:  denied  { accept } for  pid=8722 comm="syz.6.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  112.639005][   T40] audit: type=1400 audit(1770660892.593:567): avc:  denied  { read } for  pid=8722 comm="syz.6.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  112.653010][ T8727] iommufd_mock iommufd_mock2: Adding to iommu group 11
[  112.664439][ T8727] syz_tun: entered allmulticast mode
[  112.698706][ T8729] ipt_rpfilter: unknown options
[  112.789828][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.6.746'.
[  112.799594][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.6.746'.
[  112.811673][ T8740] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  112.859970][   T40] audit: type=1400 audit(1770660892.823:568): avc:  denied  { lock } for  pid=8744 comm="syz.6.749" path="socket:[27085]" dev="sockfs" ino=27085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.867908][   T40] audit: type=1400 audit(1770660892.823:569): avc:  denied  { connect } for  pid=8744 comm="syz.6.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.895001][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4
[  112.908954][ T8740] bond3: (slave bond4): making interface the new active one
[  112.912219][ T8740] bond3: (slave bond4): Enslaving as an active interface with an up link
[  112.969511][ T8756] iommufd_mock iommufd_mock3: Adding to iommu group 12
[  112.995327][ T8748] i2c i2c-1: dtv_property_process_set: SET cmd 0x8b5efc1c undefined
[  113.086556][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.6.754'.
[  113.113908][   T40] audit: type=1400 audit(1770660893.073:570): avc:  denied  { write } for  pid=8762 comm="syz.5.755" path="socket:[28140]" dev="sockfs" ino=28140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  113.384567][ T8789] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  113.391609][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8790 comm=syz.1.762
[  113.482461][ T8800] hpfs: hpfs_map_sector(): read error
[  113.619150][ T8807] futex_wake_op: syz.1.765 tries to shift op by -1; fix this program
[  113.639425][ T8798] netlink: 'syz.1.765': attribute type 39 has an invalid length.
[  113.729947][ T8826] bond1: Unable to set down delay as MII monitoring is disabled
[  113.740152][ T8826] bond1 (unregistering): Released all slaves
[  113.752615][ T8832] binder: 8831:8832 ioctl c0306201 200000000640 returned -22
[  113.770329][ T8832] xt_l2tp: missing protocol rule (udp|l2tpip)
[  113.826592][ T8836] sp0: Synchronizing with TNC
[  113.878015][ T8840] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  113.890029][ T8840] syz_tun: entered allmulticast mode
[  113.940452][ T8846] program syz.5.777 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.076798][ T8858] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  114.079055][ T8857] netlink: 'syz.6.781': attribute type 1 has an invalid length.
[  114.087384][ T8844] syz_tun: left allmulticast mode
[  114.098064][ T8857] bond2: entered promiscuous mode
[  114.100796][ T8857] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.113321][ T8855] bond2: (slave bridge1): making interface the new active one
[  114.115899][ T8855] bridge1: entered promiscuous mode
[  114.118186][ T8855] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  114.254674][ T8873] xt_hashlimit: size too large, truncated to 1048576
[  114.277220][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.282588][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.400601][ T8881] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  114.539961][   T54] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  114.841637][ T8908] dvmrp0: entered allmulticast mode
[  114.910256][ T5932] Bluetooth: hci4: command 0x0405 tx timeout
[  115.080624][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.085349][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.088234][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.151446][ T8956] tmpfs: Bad value for 'mpol'
[  115.214182][ T8942] infiniband syz2: set down
[  115.216929][   T24] vxcan1 speed is unknown, defaulting to 1000
[  115.218740][ T8942] infiniband syz2: added vxcan1
[  115.246513][ T8942] RDS/IB: syz2: added
[  115.248434][ T8942] smc: adding ib device syz2 with port count 1
[  115.250742][ T8942] smc:    ib device syz2 port 1 has pnetid S (user defined)
[  115.254960][   T24] vxcan1 speed is unknown, defaulting to 1000
[  115.257945][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.341820][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.358704][    T9] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  115.422508][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.506045][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.510368][    T9] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  115.514326][    T9] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.518733][    T9] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66
[  115.522674][    T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.527411][    T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.531980][    T9] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  115.534895][    T9] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  115.538458][    T9] usb 11-1: Product: syz
[  115.540646][    T9] usb 11-1: Manufacturer: syz
[  115.549458][    T9] cdc_wdm 11-1:1.0: skipping garbage
[  115.551815][    T9] cdc_wdm 11-1:1.0: skipping garbage
[  115.555629][    T9] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  115.558817][    T9] cdc_wdm 11-1:1.0: Unknown control protocol
[  115.617283][ T8942] vxcan1 speed is unknown, defaulting to 1000
[  115.818694][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.822119][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.825880][ T8966] cdc_wdm 11-1:1.0: Error submitting int urb - -90
[  115.874003][ T8952] __nla_validate_parse: 8 callbacks suppressed
[  115.874016][ T8952] netlink: 40 bytes leftover after parsing attributes in process `syz.6.810'.
[  115.883151][ T8952] openvswitch: netlink: Duplicate or invalid key (type 0).
[  115.886219][ T8952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.957438][   T54] usb 11-1: USB disconnect, device number 8
[  116.468684][   T54] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  116.652596][   T54] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  116.655249][   T54] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  116.659432][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[  116.663429][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'.
[  116.667248][   T54] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  116.667684][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'.
[  116.678760][   T54] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  116.682736][   T54] usb 10-1: Product: syz
[  116.684805][   T54] usb 10-1: Manufacturer: syz
[  116.686983][   T54] usb 10-1: SerialNumber: syz
[  116.693305][   T54] usb 10-1: config 0 descriptor??
[  116.700339][   T54] hub 10-1:0.0: bad descriptor, ignoring hub
[  116.702793][   T54] hub 10-1:0.0: probe with driver hub failed with error -5
[  116.708369][   T54] usb 10-1: selecting invalid altsetting 0
[  116.754208][ T9001] program syz.1.824 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.780144][ T9001] binder: 8999:9001 ioctl c0306201 2000000003c0 returned -14
[  116.784862][ T9001] binder: 8999:9001 ioctl c0306201 200000000780 returned -11
[  116.792362][ T9001] IPv6: sit2: Disabled Multicast RS
[  116.795423][ T9001] sit2: entered allmulticast mode
[  116.920169][ T9009] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  117.018447][ T9014] mkiss: ax0: crc mode is auto.
[  117.274499][ T9018] xt_policy: output policy not valid in PREROUTING and INPUT
[  117.350312][ T9011] usb 10-1: reset high-speed USB device number 8 using dummy_hcd
[  117.523131][ T9011] usb 10-1: device firmware changed
[  117.527682][   T54] usb 10-1: USB disconnect, device number 8
[  117.530645][   T24] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  117.678777][   T54] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  117.690226][   T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.694720][   T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.698935][   T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.704318][   T24] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.708130][   T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.713842][   T24] usb 11-1: config 0 descriptor??
[  117.842146][   T54] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  117.845950][   T54] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  117.850243][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[  117.857134][   T54] usb 10-1: string descriptor 0 read error: -22
[  117.860025][   T54] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  117.863912][   T54] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  117.870540][   T54] usb 10-1: config 0 descriptor??
[  117.879513][   T54] hub 10-1:0.0: bad descriptor, ignoring hub
[  117.882260][   T54] hub 10-1:0.0: probe with driver hub failed with error -5
[  117.889087][   T54] usb 10-1: selecting invalid altsetting 0
[  117.936270][   T24] usbhid 11-1:0.0: can't add hid device: -71
[  117.938277][   T24] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  117.944609][   T24] usb 11-1: USB disconnect, device number 9
[  118.146780][ T8956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.158440][   T40] kauditd_printk_skb: 19 callbacks suppressed
[  118.158456][   T40] audit: type=1400 audit(1770660898.113:590): avc:  denied  { read append } for  pid=9027 comm="syz.6.832" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  118.174368][   T40] audit: type=1400 audit(1770660898.133:591): avc:  denied  { open } for  pid=9027 comm="syz.6.832" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  118.191937][   T40] audit: type=1400 audit(1770660898.153:592): avc:  denied  { ioctl } for  pid=9027 comm="syz.6.832" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  118.233186][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'.
[  118.235334][ T9034] /dev/nullb0: Can't open blockdev
[  118.283408][   T40] audit: type=1804 audit(1770660898.233:593): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.835" name="/newroot/242/file1" dev="tmpfs" ino=1329 res=1 errno=0
[  118.296078][ T9033] hsr_slave_1 (unregistering): left promiscuous mode
[  118.298950][    T9] usb 10-1: USB disconnect, device number 9
[  118.308965][ T9038] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  118.347410][   T40] audit: type=1400 audit(1770660898.303:594): avc:  denied  { name_bind } for  pid=9040 comm="syz.1.837" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  118.566731][ T9066] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  118.593258][ T9065] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3529401184 (7058802368 ns) > initial count (1806965786 ns). Using initial count to start timer.
[  118.605331][ T5291] Bluetooth: hci4: unexpected cc 0x2005 length: 7 > 1
[  118.607582][ T5291] Bluetooth: hci4: unexpected event for opcode 0x2005
[  118.628557][ T9061] usb usb8: usbfs: process 9061 (syz.6.844) did not claim interface 0 before use
[  118.709381][   T40] audit: type=1400 audit(1770660898.673:595): avc:  denied  { listen } for  pid=9087 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  118.722333][   T40] audit: type=1400 audit(1770660898.673:596): avc:  denied  { accept } for  pid=9087 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  118.755799][ T9094] netlink: 104 bytes leftover after parsing attributes in process `syz.5.855'.
[  118.849928][ T9096] tipc: Cannot configure node identity twice
[  118.914219][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'.
[  118.949143][ T6574] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  118.974951][ T9101] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  119.098702][ T6574] usb 11-1: Using ep0 maxpacket: 8
[  119.102900][ T6574] usb 11-1: config 0 interface 0 has no altsetting 0
[  119.105769][ T6574] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  119.109414][ T6574] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.114045][ T6574] usb 11-1: config 0 descriptor??
[  119.527629][ T6574] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  119.530160][ T6574] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  119.532437][ T6574] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  119.534750][ T6574] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  119.537082][ T6574] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  119.539930][ T6574] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  119.702075][ T9120] binder: 9116:9120 ioctl c00c620f 2000000004c0 returned -22
[  119.706498][ T9123] syzkaller0: entered promiscuous mode
[  119.708340][ T9123] syzkaller0: entered allmulticast mode
[  119.717739][ T9122] tipc: Started in network mode
[  119.719582][ T9122] tipc: Node identity fe6aab22f33e, cluster identity 4711
[  119.722508][ T9122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.730057][ T9122] tipc: Resetting bearer <eth:syzkaller0>
[  119.732085][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.736792][ T9122] sock: sock_set_timeout: `syz.1.864' (pid 9122) tries to set negative timeout
[  119.747374][ T6574] usb 11-1: USB disconnect, device number 10
[  119.751055][ T9121] tipc: Resetting bearer <eth:syzkaller0>
[  119.763980][ T9121] tipc: Disabling bearer <eth:syzkaller0>
[  119.967026][ T9136] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  120.006431][ T9138] binder: 9133:9138 unknown command 0
[  120.006466][ T9134] binder: 9133:9134 ioctl c0306201 200000000540 returned -14
[  120.008428][ T9138] binder: 9133:9138 ioctl c0306201 200000000640 returned -22
[  120.016146][   T40] audit: type=1400 audit(1770660899.973:597): avc:  denied  { write } for  pid=9133 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  120.161932][ T9146] overlayfs: failed to resolve './file1/file0': -2
[  120.187049][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.869'.
[  120.333749][    C3] vcan0: j1939_tp_rxtimer: 0xffff8880128dcc00: rx timeout, send abort
[  120.341706][   T40] audit: type=1400 audit(1770660900.303:598): avc:  denied  { read } for  pid=5321 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  120.342249][ T9162] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  120.353220][   T40] audit: type=1400 audit(1770660900.303:599): avc:  denied  { search } for  pid=5321 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.403512][ T9167] delete_channel: no stack
[  120.485222][ T9185] FAULT_INJECTION: forcing a failure.
[  120.485222][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  120.489909][ T9185] CPU: 2 UID: 0 PID: 9185 Comm: syz.5.883 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  120.489928][ T9185] Tainted: [L]=SOFTLOCKUP
[  120.489931][ T9185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  120.489938][ T9185] Call Trace:
[  120.489942][ T9185]  <TASK>
[  120.489947][ T9185]  dump_stack_lvl+0x100/0x190
[  120.489993][ T9185]  should_fail_ex.cold+0x5/0xa
[  120.490005][ T9185]  _copy_from_user+0x2e/0xd0
[  120.490031][ T9185]  copy_msghdr_from_user+0x9f/0x4f0
[  120.490053][ T9185]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  120.490070][ T9185]  ___sys_sendmsg+0x106/0x1e0
[  120.490083][ T9185]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.490100][ T9185]  ? find_held_lock+0x2b/0x80
[  120.490123][ T9185]  __sys_sendmsg+0x170/0x220
[  120.490138][ T9185]  ? __pfx___sys_sendmsg+0x10/0x10
[  120.490161][ T9185]  do_syscall_64+0xc9/0xf80
[  120.490176][ T9185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.490187][ T9185] RIP: 0033:0x7f4c28b9af79
[  120.490196][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.490206][ T9185] RSP: 002b:00007f4c2997c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.490218][ T9185] RAX: ffffffffffffffda RBX: 00007f4c28e15fa0 RCX: 00007f4c28b9af79
[  120.490225][ T9185] RDX: 0000000024044040 RSI: 0000200000000200 RDI: 0000000000000003
[  120.490231][ T9185] RBP: 00007f4c2997c090 R08: 0000000000000000 R09: 0000000000000000
[  120.490237][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.490244][ T9185] R13: 00007f4c28e16038 R14: 00007f4c28e15fa0 R15: 00007fff6b6c5be8
[  120.490257][ T9185]  </TASK>
[  120.561934][ T9184] syzkaller0: entered promiscuous mode
[  120.563763][ T9184] syzkaller0: entered allmulticast mode
[  120.590318][ T9193] netlink: 'syz.6.885': attribute type 7 has an invalid length.
[  120.652042][ T9196] netlink: 64 bytes leftover after parsing attributes in process `syz.5.886'.
[  120.672318][ T9196] syzkaller1: entered promiscuous mode
[  120.674675][ T9196] syzkaller1: entered allmulticast mode
[  120.681546][ T9198] iommufd_mock iommufd_mock5: Adding to iommu group 14
[  120.803607][   T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  120.808288][   T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  120.837234][    C3] vcan0: j1939_tp_rxtimer: 0xffff8880128dcc00: abort rx timeout. Force session deactivation
[  120.838688][   T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  120.844614][   T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  120.847697][   T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  120.862167][   T24] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  120.931656][ T9217] fido_id[9217]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  120.981738][ T9227] overlayfs: workdir and upperdir must reside under the same mount
[  121.078298][ T9241] netlink: 32 bytes leftover after parsing attributes in process `syz.6.900'.
[  121.212827][ T9254] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  121.218410][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.6.905'.
[  121.570521][ T9280] overlayfs: statfs failed on './file0'
[  121.577341][ T9280] netlink: 'syz.4.915': attribute type 12 has an invalid length.
[  121.622613][ T9282] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3790305557 (30322444456 ns) > initial count (10893623512 ns). Using initial count to start timer.
[  121.671088][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.918'.
[  121.781869][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.5.920'.
[  122.135412][ T9307] 9pnet_virtio: no channels available for device syz
[  122.146617][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.186685][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.198811][   T10] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  122.202469][ T9308] netlink: 200 bytes leftover after parsing attributes in process `syz.5.925'.
[  122.359736][   T10] usb 11-1: Using ep0 maxpacket: 8
[  122.364324][   T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.368511][   T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.375520][   T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  122.380313][   T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.385761][   T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  122.390268][   T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.454828][ T8412] Bluetooth: hci2: Frame reassembly failed (-84)
[  122.599760][   T10] usb 11-1: GET_CAPABILITIES returned 0
[  122.602300][   T10] usbtmc 11-1:16.0: can't read capabilities
[  122.801980][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.805851][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.809650][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.813261][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.816769][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.820417][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.823999][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.827498][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.833551][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.836891][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.840547][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.844059][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.847479][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.850980][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.854587][    C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  122.860116][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  124.498775][ T5932] Bluetooth: hci2: command 0x1003 tx timeout
[  124.498801][ T5291] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  124.829067][ T8032] usb 11-1: USB disconnect, device number 11
[  124.947733][ T9338] netlink: 'syz.6.932': attribute type 1 has an invalid length.
[  124.967754][ T9338] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.981569][ T9338] bond3: (slave gretap1): making interface the new active one
[  124.984718][ T9338] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  124.991247][ T9338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9338 comm=syz.6.932
[  125.212669][ T9347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58128 sclass=netlink_route_socket pid=9347 comm=syz.6.935
[  125.389310][   T40] kauditd_printk_skb: 17 callbacks suppressed
[  125.389327][   T40] audit: type=1400 audit(1770660905.353:617): avc:  denied  { watch watch_reads } for  pid=9355 comm="syz.6.938" path="/107/file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  125.440067][ T9359] iommufd_mock iommufd_mock5: Adding to iommu group 14
[  125.500821][ T9365] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.940'.
[  125.504498][   T40] audit: type=1400 audit(1770660905.463:618): avc:  denied  { append } for  pid=9361 comm="syz.5.940" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  125.555761][   T40] audit: type=1400 audit(1770660905.513:619): avc:  denied  { create } for  pid=9361 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  125.606752][ T9375] netlink: 'syz.5.943': attribute type 1 has an invalid length.
[  125.623760][ T9375] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.629481][ T9375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44098 sclass=netlink_route_socket pid=9375 comm=syz.5.943
[  125.672113][ T9381] binder: 9378:9381 unknown command 0
[  125.673890][ T9381] binder: 9378:9381 ioctl c0306201 200000000080 returned -22
[  125.705184][   T40] audit: type=1400 audit(1770660905.663:620): avc:  denied  { read } for  pid=9386 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  125.796451][ T9385] befs: (nbd5): unable to read superblock
[  125.919483][ T9394] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  126.083506][ T9402] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  126.375648][ T9417] sp0: Synchronizing with TNC
[  126.397337][ T9420] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  126.407756][ T9417] [U] �
[  126.445238][ T9422] netlink: 'syz.6.959': attribute type 1 has an invalid length.
[  126.450226][ T9422] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  126.505318][ T9427] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  126.566687][   T40] audit: type=1400 audit(1770660906.523:621): avc:  denied  { create } for  pid=9432 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  126.574513][   T40] audit: type=1400 audit(1770660906.533:622): avc:  denied  { bind } for  pid=9432 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  126.581246][   T40] audit: type=1400 audit(1770660906.533:623): avc:  denied  { accept } for  pid=9432 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  126.587843][   T40] audit: type=1400 audit(1770660906.533:624): avc:  denied  { write } for  pid=9432 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  126.598820][   T40] audit: type=1400 audit(1770660906.543:625): avc:  denied  { ioctl } for  pid=9432 comm="syz.6.962" path="socket:[30545]" dev="sockfs" ino=30545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  126.606723][   T40] audit: type=1400 audit(1770660906.563:626): avc:  denied  { unmount } for  pid=8023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  126.630567][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.964'.
[  126.646528][ T9436] overlayfs: conflicting options: nfs_export=on,index=off
[  126.747466][ T9441] FAULT_INJECTION: forcing a failure.
[  126.747466][ T9441] name failslab, interval 1, probability 0, space 0, times 1
[  126.752891][ T9441] CPU: 1 UID: 0 PID: 9441 Comm: syz.5.965 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.752921][ T9441] Tainted: [L]=SOFTLOCKUP
[  126.752927][ T9441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  126.752937][ T9441] Call Trace:
[  126.752943][ T9441]  <TASK>
[  126.752950][ T9441]  dump_stack_lvl+0x100/0x190
[  126.752975][ T9441]  should_fail_ex.cold+0x5/0xa
[  126.752993][ T9441]  should_failslab+0xc2/0x120
[  126.753014][ T9441]  ? switchdev_deferred_enqueue+0x3e/0x2d0
[  126.753030][ T9441]  ? switchdev_deferred_enqueue+0x3e/0x2d0
[  126.753046][ T9441]  __kmalloc_noprof+0xf6/0x9c0
[  126.753060][ T9441]  ? br_rtr_notify+0x228/0x970
[  126.753089][ T9441]  ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10
[  126.753108][ T9441]  ? switchdev_deferred_enqueue+0x3e/0x2d0
[  126.753122][ T9441]  switchdev_deferred_enqueue+0x3e/0x2d0
[  126.753142][ T9441]  switchdev_port_attr_set+0xb5/0x100
[  126.753162][ T9441]  br_multicast_rport_del_notify.part.0+0x15c/0x230
[  126.753189][ T9441]  ? __pfx_br_multicast_rport_del_notify.part.0+0x10/0x10
[  126.753218][ T9441]  ? do_raw_spin_lock+0x128/0x260
[  126.753241][ T9441]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  126.753266][ T9441]  br_multicast_set_port_router+0x76d/0x9d0
[  126.753289][ T9441]  br_setport+0xdd0/0x17d0
[  126.753304][ T9441]  ? __pfx_br_setport+0x10/0x10
[  126.753317][ T9441]  ? do_raw_spin_lock+0x128/0x260
[  126.753345][ T9441]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.753371][ T9441]  br_port_slave_changelink+0xcf/0x190
[  126.753389][ T9441]  ? __pfx_br_port_slave_changelink+0x10/0x10
[  126.753410][ T9441]  rtnl_newlink+0x117c/0x2380
[  126.753442][ T9441]  ? __pfx_rtnl_newlink+0x10/0x10
[  126.753464][ T9441]  ? find_held_lock+0x2b/0x80
[  126.753487][ T9441]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  126.753512][ T9441]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  126.753541][ T9441]  ? avc_has_perm_noaudit+0x145/0x3b0
[  126.753587][ T9441]  ? find_held_lock+0x2b/0x80
[  126.753607][ T9441]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  126.753627][ T9441]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  126.753648][ T9441]  ? __pfx_rtnl_newlink+0x10/0x10
[  126.753669][ T9441]  rtnetlink_rcv_msg+0x95e/0xe90
[  126.753694][ T9441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  126.753726][ T9441]  ? ref_tracker_free+0x37e/0x6c0
[  126.753752][ T9441]  netlink_rcv_skb+0x159/0x420
[  126.753776][ T9441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  126.753798][ T9441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  126.753828][ T9441]  ? netlink_deliver_tap+0x1ae/0xcc0
[  126.753863][ T9441]  netlink_unicast+0x5aa/0x870
[  126.753892][ T9441]  ? __pfx_netlink_unicast+0x10/0x10
[  126.753923][ T9441]  netlink_sendmsg+0x8b0/0xda0
[  126.753949][ T9441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.753969][ T9441]  ? PageHuge+0x180/0x180
[  126.753995][ T9441]  ____sys_sendmsg+0xa54/0xc30
[  126.754017][ T9441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  126.754046][ T9441]  ___sys_sendmsg+0x190/0x1e0
[  126.754064][ T9441]  ? __pfx____sys_sendmsg+0x10/0x10
[  126.754090][ T9441]  ? find_held_lock+0x2b/0x80
[  126.754125][ T9441]  __sys_sendmsg+0x170/0x220
[  126.754147][ T9441]  ? __pfx___sys_sendmsg+0x10/0x10
[  126.754188][ T9441]  do_syscall_64+0xc9/0xf80
[  126.754209][ T9441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.754225][ T9441] RIP: 0033:0x7f4c28b9af79
[  126.754238][ T9441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.754252][ T9441] RSP: 002b:00007f4c2997c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.754268][ T9441] RAX: ffffffffffffffda RBX: 00007f4c28e15fa0 RCX: 00007f4c28b9af79
[  126.754278][ T9441] RDX: 0000000024044040 RSI: 0000200000000200 RDI: 0000000000000003
[  126.754287][ T9441] RBP: 00007f4c2997c090 R08: 0000000000000000 R09: 0000000000000000
[  126.754297][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.754308][ T9441] R13: 00007f4c28e16038 R14: 00007f4c28e15fa0 R15: 00007fff6b6c5be8
[  126.754339][ T9441]  </TASK>
[  126.760439][ T5291] Bluetooth: hci4: Malformed LE Event: 0x0d
[  126.814370][ T9448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.906508][ T9455] dlm: no local IP address has been set
[  126.908405][ T9455] dlm: cannot start dlm midcomms -107
[  127.084860][ T9462] kvm: pic: non byte write
[  127.087575][ T9462] kvm: pic: non byte write
[  127.090567][ T9462] kvm: pic: non byte write
[  127.093183][ T9462] kvm: pic: level sensitive irq not supported
[  127.093473][ T9462] kvm: pic: non byte write
[  127.098145][ T9462] kvm: pic: single mode not supported
[  127.098155][ T9462] kvm: pic: level sensitive irq not supported
[  127.102176][ T9462] kvm: pic: non byte write
[  127.106923][ T9462] kvm: pic: non byte write
[  127.110281][ T9462] kvm: pic: non byte write
[  127.112973][ T9462] kvm: pic: non byte write
[  127.115580][ T9462] kvm: pic: level sensitive irq not supported
[  127.115848][ T9462] kvm: pic: non byte write
[  127.120998][ T9462] kvm: pic: non byte read
[  127.122961][ T9462] kvm: pic: non byte read
[  127.124869][ T9462] kvm: pic: non byte read
[  127.126791][ T9462] kvm: pic: non byte read
[  127.128781][ T9462] kvm: pic: non byte read
[  127.130916][ T9462] kvm: pic: non byte read
[  127.133134][ T9462] kvm: pic: non byte read
[  127.135029][ T9462] kvm: pic: non byte read
[  127.137797][ T9462] kvm: pic: non byte write
[  127.177178][ T9466] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  127.741433][ T9459] syz.6.970 (9459): drop_caches: 1
[  127.827030][ T9479] netlink: 220 bytes leftover after parsing attributes in process `syz.6.974'.
[  127.887794][ T9482] netlink: 'syz.6.975': attribute type 1 has an invalid length.
[  127.910709][ T9482] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  127.913997][ T9482] bond4: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  127.918218][ T9482] bond4: (slave vxcan1): making interface the new active one
[  127.921163][ T9482] bond4: (slave vxcan1): Enslaving as an active interface with an up link
[  127.976819][ T9489] 9pnet_virtio: no channels available for device syz
[  127.977511][ T9490] 9pnet_virtio: no channels available for device syz
[  128.082987][ T9494] IPv6: NLM_F_CREATE should be specified when creating new route
[  128.415241][ T9503] IPv6: sit1: Disabled Multicast RS
[  128.417385][ T9503] sit1: entered allmulticast mode
[  128.424634][ T9507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.983'.
[  128.482140][ T9512] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.982'.
[  129.433369][ T9533] PM: Enabling pm_trace changes system date and time during resume.
[  129.433369][ T9533] PM: Correct system time has to be restored manually after resume.
[  129.446420][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.6.991'.
[  129.556258][ T9535] usb usb8: usbfs: process 9535 (syz.6.992) did not claim interface 0 before use
[  129.608741][   T34] usb 10-1: new low-speed USB device number 10 using dummy_hcd
[  129.627909][ T9543] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  129.770047][   T34] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  129.772641][   T34] usb 10-1: config 0 has no interface number 0
[  129.774595][   T34] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.777953][   T34] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  129.781842][   T34] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  129.785460][   T34] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  129.789076][   T34] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  129.792534][   T34] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  129.796555][   T34] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  129.800213][   T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.810238][   T34] usb 10-1: config 0 descriptor??
[  129.814655][ T9530] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  129.817070][ T9530] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  129.826358][   T34] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  130.026897][   T34] usb 10-1: USB disconnect, device number 10
[  130.034989][   T34] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  130.704773][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  130.704789][   T40] audit: type=1400 audit(1770660910.663:631): avc:  denied  { block_suspend } for  pid=9563 comm="syz.5.999" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  132.725932][ T9550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.805220][ T9569] input input15: cannot allocate more than FF_MAX_EFFECTS effects
[  132.965427][ T9578] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  133.035367][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1004'.
[  133.039604][ T9581] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1004'.
[  133.044506][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1004'.
[  133.086436][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1005'.
[  133.560574][ T9593] mkiss: ax0: crc mode is auto.
[  133.569679][ T9593] vxfs: unable to read disk superblock at 1
[  133.572120][ T9593] vxfs: unable to read disk superblock at 8
[  133.574015][ T9593] vxfs: can't find superblock.
[  133.678342][ T9598] overlayfs: failed to resolve '/8	]	6�;x�a��	�/X�"r'��g��i��¨t�*����./file1': -2
[  133.747519][ T9602] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  133.808232][   T40] audit: type=1400 audit(1770660913.763:632): avc:  denied  { bind } for  pid=9604 comm="syz.5.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  133.816639][   T40] audit: type=1400 audit(1770660913.763:633): avc:  denied  { node_bind } for  pid=9604 comm="syz.5.1013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  133.843714][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1014'.
[  133.876611][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'.
[  133.948093][ T7354] block nbd0: Connection timed out, retrying (0/1 alive)
[  133.951875][ T7354] block nbd0: Connection timed out, retrying (0/1 alive)
[  133.954197][ T7354] block nbd0: Connection timed out, retrying (0/1 alive)
[  133.956906][ T7354] block nbd0: Connection timed out, retrying (0/1 alive)
[  133.959819][ T1175] block nbd0: Dead connection, failed to find a fallback
[  133.964200][ T1175] block nbd0: shutting down sockets
[  133.966531][ T1175] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.970878][ T1175] buffer_io_error: 57 callbacks suppressed
[  133.970889][ T1175] Buffer I/O error on dev nbd0, logical block 2, async page read
[  133.975414][ T1175] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.978681][ T1175] Buffer I/O error on dev nbd0, logical block 1, async page read
[  133.981476][ T1175] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.984762][ T1175] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.987644][ T1175] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.991193][ T1175] Buffer I/O error on dev nbd0, logical block 3, async page read
[  133.995244][ T6340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.999783][ T6340] Buffer I/O error on dev nbd0, logical block 0, async page read
[  134.002296][ T6340] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  134.006194][ T6340] Buffer I/O error on dev nbd0, logical block 1, async page read
[  134.008917][ T6340] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  134.011967][ T6340] Buffer I/O error on dev nbd0, logical block 2, async page read
[  134.014432][ T6340] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  134.017431][ T6340] Buffer I/O error on dev nbd0, logical block 3, async page read
[  134.020108][ T6340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  134.023062][ T6340] Buffer I/O error on dev nbd0, logical block 0, async page read
[  134.025512][ T6340] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  134.028547][ T6340] Buffer I/O error on dev nbd0, logical block 1, async page read
[  134.032204][ T6340] ldm_validate_partition_table(): Disk read failed.
[  134.035170][ T6340] Dev nbd0: unable to read RDB block 0
[  134.037271][ T6340]  nbd0: unable to read partition table
[  134.041429][ T6340] ldm_validate_partition_table(): Disk read failed.
[  134.044383][ T6340] Dev nbd0: unable to read RDB block 0
[  134.046832][ T6340]  nbd0: unable to read partition table
[  134.071363][   T40] audit: type=1400 audit(1770660914.033:634): avc:  denied  { bind } for  pid=9619 comm="syz.5.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  134.358864][   T53] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  134.518844][   T53] usb 10-1: Using ep0 maxpacket: 8
[  134.522251][   T53] usb 10-1: unable to get BOS descriptor or descriptor too short
[  134.525499][   T53] usb 10-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 64
[  134.528798][   T53] usb 10-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  134.532908][   T53] usb 10-1: config 1 interface 0 has no altsetting 0
[  134.536614][   T53] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  134.539777][   T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.542377][   T53] usb 10-1: Product: 《
[  134.543750][   T53] usb 10-1: Manufacturer: 헶쾦ᝈ溓ℨ频塹磴끑팱鵉졫툻亳￑㏈︻Ḹ꧒旚ᛛੜ䲺窜鳜衤꥔荓툪➽珦縏ᓌ潷✔䒛ᶗܡ緿줦Ⅼ⶷䯖沚⹚썡č囨쥆툚崔ɠ⠐迳ヂ뮶逈⋫圜
[  134.550585][   T53] usb 10-1: SerialNumber: Г
[  134.553945][ T9622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  134.556363][ T9622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  134.568739][   T34] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  134.718931][   T34] usb 11-1: Using ep0 maxpacket: 32
[  134.722396][   T34] usb 11-1: config 0 has no interfaces?
[  134.725665][   T34] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  134.728521][   T34] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  134.731351][   T34] usb 11-1: Product: syz
[  134.732796][   T34] usb 11-1: Manufacturer: syz
[  134.734288][   T34] usb 11-1: SerialNumber: syz
[  134.737311][   T34] usb 11-1: config 0 descriptor??
[  134.974749][   T53] usb 10-1: USB disconnect, device number 11
[  134.976916][    T9] usb 11-1: USB disconnect, device number 12
[  135.521557][ T9635] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  135.645347][ T8417] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  135.659594][ T9654] netlink: 'syz.6.1027': attribute type 1 has an invalid length.
[  135.660141][ T9655] netlink: 'syz.6.1027': attribute type 1 has an invalid length.
[  135.679307][ T9654] bond5: entered promiscuous mode
[  135.681738][ T9654] 8021q: adding VLAN 0 to HW filter on device bond5
[  135.731137][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1030'.
[  135.742220][ T9654] 8021q: adding VLAN 0 to HW filter on device bond5
[  135.745270][ T9654] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address
[  135.752961][ T9654] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  135.758809][ T9654] bond5: (slave xfrm1): making interface the new active one
[  135.762213][ T9654] xfrm1: entered promiscuous mode
[  135.765399][ T9654] bond5: (slave xfrm1): Enslaving as an active interface with an up link
[  135.866815][   T64] block nbd1: Connection timed out, retrying (0/1 alive)
[  135.870065][   T64] block nbd1: Connection timed out, retrying (0/1 alive)
[  135.873094][   T64] block nbd1: Connection timed out, retrying (0/1 alive)
[  135.876126][   T64] block nbd1: Connection timed out, retrying (0/1 alive)
[  135.879859][   T64] block nbd1: Dead connection, failed to find a fallback
[  135.883159][   T64] block nbd1: shutting down sockets
[  135.886188][ T6548] ldm_validate_partition_table(): Disk read failed.
[  135.889139][ T6548] Dev nbd1: unable to read RDB block 0
[  135.890181][   T40] audit: type=1400 audit(1770660915.843:635): avc:  denied  { firmware_load } for  pid=9665 comm="syz.5.1031" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  135.891350][ T6548]  nbd1: unable to read partition table
[  135.903232][ T6548] ldm_validate_partition_table(): Disk read failed.
[  135.905823][ T6548] Dev nbd1: unable to read RDB block 0
[  135.907866][ T6548]  nbd1: unable to read partition table
[  135.914669][ T9666] netlink: 'syz.5.1031': attribute type 7 has an invalid length.
[  135.919705][ T9310] ldm_validate_partition_table(): Disk read failed.
[  135.922593][ T9310] Dev nbd1: unable to read RDB block 0
[  135.937257][ T9310]  nbd1: unable to read partition table
[  135.942574][ T9311] ldm_validate_partition_table(): Disk read failed.
[  135.945476][ T9311] Dev nbd1: unable to read RDB block 0
[  135.947894][ T9311]  nbd1: unable to read partition table
[  136.060193][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.062737][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.070794][ T5291] Bluetooth: hci4: hcon ffff88802e14c000 sent 1 < count 3840
[  136.077308][ T5291] Bluetooth: hci4: hcon ffff88802e14c000 sent 0 < count 6
[  136.080832][ T5291] Bluetooth: hci4: hcon ffff88802e14c000 sent 0 < count 6
[  136.083373][ T5291] Bluetooth: hci4: hcon ffff88802e14c000 sent 0 < count 6
[  136.115337][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1036'.
[  136.199816][ T9673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.266306][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'.
[  136.362320][ T8415] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.366353][ T8415] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.379492][ T8417] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.383225][ T8417] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.407172][ T8417] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.411682][ T8417] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.416017][ T9697] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1037'.
[  136.419843][ T8417] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.423577][ T8417] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.546553][ T9712] overlayfs: failed to resolve './file0': -2
[  136.614270][ T9725] veth0_to_team: entered promiscuous mode
[  136.827649][   T40] audit: type=1400 audit(1770660916.783:636): avc:  denied  { getopt } for  pid=9746 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  136.844811][ T9747] nfs: Unknown parameter '-'
[  136.848072][   T40] audit: type=1400 audit(1770660916.803:637): avc:  denied  { lock } for  pid=9746 comm="syz.1.1054" path="socket:[33595]" dev="sockfs" ino=33595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  136.958757][ T2299] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  136.983354][ T9764] dlm: no locking on control device
[  137.018687][   T40] audit: type=1400 audit(1770660916.973:638): avc:  denied  { shutdown } for  pid=9765 comm="syz.6.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  137.060713][   T40] audit: type=1400 audit(1770660917.023:639): avc:  denied  { cmd } for  pid=9768 comm="syz.6.1059" path="socket:[31496]" dev="sockfs" ino=31496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  137.110420][ T2299] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  137.114090][ T2299] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  137.118064][ T2299] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  137.121022][ T2299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.125400][ T2299] usb 9-1: config 0 descriptor??
[  137.127887][ T9734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  137.149135][   T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  137.310335][   T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  137.315189][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  137.320035][   T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  137.325992][   T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  137.329886][   T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.333095][   T53] usb 6-1: Product: syz
[  137.333646][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.334804][   T53] usb 6-1: Manufacturer: syz
[  137.334820][   T53] usb 6-1: SerialNumber: syz
[  137.336980][   T53] usb 6-1: config 0 descriptor??
[  137.339012][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.340351][ T9756] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  137.380395][ T2299] usbhid 9-1:0.0: can't add hid device: -71
[  137.382331][ T2299] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  137.389982][ T2299] usb 9-1: USB disconnect, device number 8
[  137.551151][ T9756] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  137.640602][ T9771] netdevsim netdevsim4: Direct firmware load for . failed with error -2
[  137.644827][ T9771] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  137.644850][   T40] audit: type=1400 audit(1770660917.603:640): avc:  denied  { firmware_load } for  pid=9770 comm="syz.4.1060" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  137.760527][    T9] usb 6-1: USB disconnect, device number 11
[  137.784256][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  137.786884][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  138.078847][ T8032] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  138.238740][ T8032] usb 10-1: Using ep0 maxpacket: 8
[  138.241871][ T8032] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  138.244396][ T8032] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  138.247295][ T8032] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  138.250189][ T8032] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.253256][ T8032] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.256946][ T8032] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  138.259820][ T8032] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.294537][ T9784] macsec2: entered promiscuous mode
[  138.296213][ T9784] macsec2: entered allmulticast mode
[  138.360258][ T9790] ldm_validate_partition_table(): Disk read failed.
[  138.363884][ T9790] Dev nbd1: unable to read RDB block 0
[  138.368057][ T9790]  nbd1: unable to read partition table
[  138.370892][ T9790] befs: (nbd1): unable to read superblock
[  138.377253][ T9788] __nla_validate_parse: 2 callbacks suppressed
[  138.377265][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1067'.
[  138.403910][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1067'.
[  138.407173][ T9788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9788 comm=syz.6.1067
[  138.413392][ T9788] ptrace attach of "/syz-executor exec"[9791] was attempted by "/syz-executor exec"[9788]
[  138.467488][ T8032] usb 10-1: usb_control_msg returned -32
[  138.469325][ T8032] usbtmc 10-1:16.0: can't read capabilities
[  138.660153][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  138.808857][ T2299] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  138.811531][   T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  138.815145][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.819392][   T24] usb 6-1: Product: syz
[  138.819573][ T9799] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0
[  138.821203][   T24] usb 6-1: Manufacturer: syz
[  138.825152][   T24] usb 6-1: SerialNumber: syz
[  138.828484][   T24] usb 6-1: config 0 descriptor??
[  138.970400][ T2299] usb 9-1: config 0 has no interfaces?
[  138.980133][ T2299] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  138.983152][ T2299] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  138.985759][ T2299] usb 9-1: Product: syz
[  138.987122][ T2299] usb 9-1: Manufacturer: syz
[  138.994046][ T2299] usb 9-1: SerialNumber: syz
[  138.996807][ T2299] usb 9-1: config 0 descriptor??
[  138.999058][ T9803] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1073'.
[  139.024239][ T8032] usb 10-1: USB disconnect, device number 12
[  139.037808][   T24] usb 6-1: USB disconnect, device number 12
[  139.207571][ T2299] usb 9-1: USB disconnect, device number 9
[  139.448705][   T54] usb 11-1: new full-speed USB device number 13 using dummy_hcd
[  139.560833][ T9816] overlayfs: failed to resolve './file1': -2
[  139.610258][   T54] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6
[  139.613970][   T54] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0
[  139.627273][   T54] usb 11-1: config 0 interface 0 has no altsetting 0
[  139.631144][   T54] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  139.633992][   T54] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  139.636562][   T54] usb 11-1: Product: syz
[  139.638221][   T54] usb 11-1: Manufacturer: syz
[  139.640085][   T54] usb 11-1: SerialNumber: syz
[  139.643214][   T54] usb 11-1: config 0 descriptor??
[  139.646771][   T40] audit: type=1400 audit(1770660919.603:641): avc:  denied  { mount } for  pid=9818 comm="syz.5.1079" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  139.647414][   T54] usb 11-1: selecting invalid altsetting 0
[  139.653997][   T40] audit: type=1400 audit(1770660919.603:642): avc:  denied  { ioctl } for  pid=9818 comm="syz.5.1079" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  139.764249][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'.
[  139.830140][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  139.847419][ T9833] kAFS: unable to lookup cell 'syz1'
[  139.856885][   T54] usb 11-1: USB disconnect, device number 13
[  139.869367][ T9839] unsupported nla_type 4111
[  139.882141][ T9841] ata1.00: invalid multi_count 128 ignored
[  139.922470][ T9845] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1088'.
[  139.976813][ T9848] syzkaller0: entered promiscuous mode
[  139.978678][ T9848] syzkaller0: entered allmulticast mode
[  140.004028][   T40] audit: type=1400 audit(1770660919.963:643): avc:  denied  { lock } for  pid=9850 comm="syz.4.1090" path="/114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  140.194682][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1091'.
[  140.197770][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1091'.
[  140.235425][ T9863] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  140.235428][ T9864] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  140.239479][ T9865] tmpfs: Bad value for 'mpol'
[  140.429839][ T9876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.506525][ T9876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.579934][ T9876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.658254][ T9876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.775481][ T8411] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.790151][ T8415] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.804469][ T8415] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.817567][ T8413] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.907232][   T40] audit: type=1400 audit(1770660920.863:644): avc:  denied  { map } for  pid=9879 comm="syz.4.1097" path="/118/file0/cgroup.kill" dev="9p" ino=72614235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  140.917666][   T40] audit: type=1400 audit(1770660920.863:645): avc:  denied  { write } for  pid=9879 comm="syz.4.1097" path="/118/file0/cgroup.kill" dev="9p" ino=72614235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  141.232048][   T40] audit: type=1804 audit(1770660921.193:646): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1099" name="/newroot/170/file1" dev="fuse" ino=1 res=1 errno=0
[  141.915485][ T9905] tipc: Started in network mode
[  141.917160][ T9905] tipc: Node identity 529bd199cbc5, cluster identity 4711
[  141.919920][ T9905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.931665][ T9904] tipc: Disabling bearer <eth:syzkaller0>
[  142.173416][ T9923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9923 comm=syz.5.1110
[  142.180065][ T9923] netlink: 'syz.5.1110': attribute type 3 has an invalid length.
[  142.182615][ T9923] netlink: 'syz.5.1110': attribute type 3 has an invalid length.
[  142.302287][ T9930] binder: 9929:9930 ioctl c0306201 2000000001c0 returned -14
[  142.339649][ T9937] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1115'.
[  142.393962][ T9944] netlink: 'syz.5.1118': attribute type 5 has an invalid length.
[  142.418978][ T5932] Bluetooth: hci2: command 0x1003 tx timeout
[  142.419329][ T5291] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  142.628459][ T9961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.642237][ T9961] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1122'.
[  142.677476][ T9968] binder: BINDER_SET_CONTEXT_MGR already set
[  142.678302][ T9966] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  142.680503][ T9968] binder: 9965:9968 ioctl 4018620d 2000000000c0 returned -16
[  142.681358][ T9967] binder: 9965:9967 unknown command 808464432
[  142.681375][ T9967] binder: 9965:9967 ioctl c0306201 200000000080 returned -22
[  142.853546][ T9983] netlink: 'syz.5.1130': attribute type 30 has an invalid length.
[  143.194133][T10003] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  143.228849][ T8032] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  143.288754][ T2299] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  143.380450][ T8032] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  143.384060][ T8032] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  143.387228][ T8032] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  143.390258][ T8032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.395212][ T9999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  143.399470][ T8032] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  143.468233][T10017] misc userio: Begin command sent, but we're already running
[  143.470727][ T2299] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  143.475200][ T2299] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  143.488696][ T2299] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  143.492422][ T2299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.498997][T10001] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  143.504490][ T2299] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  143.608035][ T8032] usb 9-1: USB disconnect, device number 10
[  143.766119][ T2299] usb 10-1: USB disconnect, device number 13
[  143.796672][ T8412] Bluetooth: hci2: Frame reassembly failed (-84)
[  143.802983][T10025] Bluetooth: hci2: Frame reassembly failed (-84)
[  143.850194][T10031] input: syz1 as /devices/virtual/input/input17
[  144.029784][T10034] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  144.034505][T10034] bond0: (slave lo): Error: Device can not be enslaved while up
[  144.269680][   T40] audit: type=1400 audit(1770660924.233:647): avc:  denied  { ioctl } for  pid=10037 comm="syz.4.1148" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  144.346140][   T40] audit: type=1400 audit(1770660924.303:648): avc:  denied  { setcurrent } for  pid=10044 comm="syz.5.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  144.398136][ T6548] udevd[6548]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory
[  144.455026][   T40] audit: type=1400 audit(1770660924.413:649): avc:  denied  { ioctl } for  pid=10056 comm="syz.5.1154" path="socket:[35003]" dev="sockfs" ino=35003 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  144.594359][T10072] __nla_validate_parse: 2 callbacks suppressed
[  144.594376][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'.
[  144.602887][   T40] audit: type=1400 audit(1770660924.563:650): avc:  denied  { setopt } for  pid=10071 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  144.631691][T10070] sd 0:0:0:0: PR command failed: 1026
[  144.634235][T10070] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  144.637133][T10070] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  144.641415][   T40] audit: type=1400 audit(1770660924.603:651): avc:  denied  { create } for  pid=10076 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  144.693315][   T40] audit: type=1400 audit(1770660924.653:652): avc:  denied  { setopt } for  pid=10076 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  144.708950][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'.
[  144.744070][   T40] audit: type=1400 audit(1770660924.703:653): avc:  denied  { ioctl } for  pid=10082 comm="syz.1.1162" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  144.791680][T10094] netlink: 'syz.4.1165': attribute type 1 has an invalid length.
[  144.806656][T10094] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.852915][T10104] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  145.013987][T10113] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  145.026253][T10113] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  145.063022][T10118] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1171'.
[  145.069171][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1171'.
[  145.301757][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1175'.
[  145.443251][T10138] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1176'.
[  145.564532][T10141] syzkaller0: entered promiscuous mode
[  145.566288][T10141] syzkaller0: entered allmulticast mode
[  145.801538][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'.
[  145.805128][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1181'.
[  145.814810][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'.
[  145.818268][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1181'.
[  145.818766][ T8411] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  145.824695][ T8411] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  145.829473][ T8411] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  145.834183][ T8411] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  145.858876][ T5291] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  145.858942][ T5932] Bluetooth: hci2: command 0x1003 tx timeout
[  145.874818][T10158] sch_tbf: burst 19920 is lower than device lo mtu (65550) !
[  145.915622][T10165] 9pnet_virtio: no channels available for device syz
[  145.927682][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  145.927693][   T40] audit: type=1400 audit(1770660925.883:656): avc:  denied  { remove_name } for  pid=10162 comm="syz.6.1185" name="file1" dev="9p" ino=72614063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  145.939051][   T40] audit: type=1400 audit(1770660925.883:657): avc:  denied  { unlink } for  pid=10162 comm="syz.6.1185" name="file1" dev="9p" ino=72614063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.066032][T10173] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  146.067533][T10172] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  146.071851][T10174] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  146.072944][T10172] overlayfs: missing 'lowerdir'
[  146.148048][T10184] : entered promiscuous mode
[  146.207095][ T5932] Bluetooth: hci3: unexpected event for opcode 0x2042
[  146.555850][   T53] libceph: connect (1)[c::]:6789 error -101
[  146.558133][   T53] libceph: mon0 (1)[c::]:6789 connect error
[  146.820707][ T6152] libceph: connect (1)[c::]:6789 error -101
[  146.823361][ T6152] libceph: mon0 (1)[c::]:6789 connect error
[  147.077073][T10230] x_tables: ip_tables: CT target: only valid in raw table, not 
[  147.136744][   T40] audit: type=1326 audit(1770660927.093:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb23b9af79 code=0x7ffc0000
[  147.146039][   T40] audit: type=1326 audit(1770660927.093:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb23b9af79 code=0x7ffc0000
[  147.155785][   T40] audit: type=1326 audit(1770660927.093:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb23b5b84e code=0x7ffc0000
[  147.163336][   T40] audit: type=1326 audit(1770660927.093:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb23b5b84e code=0x7ffc0000
[  147.170735][   T40] audit: type=1326 audit(1770660927.093:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb23b9af79 code=0x7ffc0000
[  147.177970][   T40] audit: type=1326 audit(1770660927.093:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb23b9af79 code=0x7ffc0000
[  147.185544][   T40] audit: type=1326 audit(1770660927.093:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb23b9af79 code=0x7ffc0000
[  147.193311][   T40] audit: type=1326 audit(1770660927.093:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.1.1207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb23b9af79 code=0x7ffc0000
[  147.331345][   T53] libceph: connect (1)[c::]:6789 error -101
[  147.334319][   T53] libceph: mon0 (1)[c::]:6789 connect error
[  147.440881][T10206] ceph: No mds server is up or the cluster is laggy
[  147.804341][T10242] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  147.881432][T10247] xfrm0 speed is unknown, defaulting to 1000
[  147.885974][T10247] vxcan1 speed is unknown, defaulting to 1000
[  147.972380][T10261] bridge_slave_0: left allmulticast mode
[  147.974588][T10261] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.248793][   T24] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  148.430267][   T24] usb 9-1: No LPM exit latency info found, disabling LPM.
[  148.434049][   T24] usb 9-1: config 0 has an invalid interface number: 173 but max is 1
[  148.437545][   T24] usb 9-1: config 0 has no interface number 1
[  148.440235][   T24] usb 9-1: config 0 interface 0 altsetting 172 endpoint 0x6 has invalid maxpacket 1024, setting to 8
[  148.445100][   T24] usb 9-1: config 0 interface 0 altsetting 172 endpoint 0x7 has invalid maxpacket 16, setting to 8
[  148.449562][   T24] usb 9-1: config 0 interface 173 altsetting 9 endpoint 0xD has invalid maxpacket 32, setting to 8
[  148.453524][   T24] usb 9-1: config 0 interface 173 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  148.457501][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  148.460308][   T24] usb 9-1: config 0 interface 173 has no altsetting 0
[  148.492779][T10292] tipc: Started in network mode
[  148.494331][T10292] tipc: Node identity ac1414aa, cluster identity 4711
[  148.499115][T10292] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.501756][T10292] tipc: Enabled bearer <udp:s>, priority 10
[  148.531522][T10298] netlink: 'syz.6.1225': attribute type 1 has an invalid length.
[  148.553404][T10298] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  148.557143][T10298] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  148.574844][T10301] dvmrp1: entered allmulticast mode
[  148.602576][T10302] gretap2: entered promiscuous mode
[  148.606290][T10302] bond6: (slave gretap2): making interface the new active one
[  148.609577][T10302] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  148.626594][T10298] macvlan2: entered promiscuous mode
[  148.629020][T10298] macvlan2: entered allmulticast mode
[  148.631162][T10298] bond6: entered promiscuous mode
[  148.633397][T10298] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  148.639084][T10298] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  148.640305][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.649380][T10298] bond6: left promiscuous mode
[  148.778774][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.829768][T10310] 
[  148.830884][T10310] ======================================================
[  148.833674][T10310] WARNING: possible circular locking dependency detected
[  148.835962][T10310] syzkaller #0 Tainted: G             L     
[  148.838175][T10310] ------------------------------------------------------
[  148.840454][T10310] syz.5.1229/10310 is trying to acquire lock:
[  148.842675][T10310] ffff88803511c068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80
[  148.846050][T10310] 
[  148.846050][T10310] but task is already holding lock:
[  148.849075][T10310] ffff88803b1d2420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370
[  148.852605][T10310] 
[  148.852605][T10310] which lock already depends on the new lock.
[  148.852605][T10310] 
[  148.856948][T10310] 
[  148.856948][T10310] the existing dependency chain (in reverse order) is:
[  148.860715][T10310] 
[  148.860715][T10310] -> #4 (sb_writers#6){.+.+}-{0:0}:
[  148.863756][T10310]        mnt_want_write+0x6f/0x450
[  148.865997][T10310]        ovl_fileattr_set+0x108/0x300
[  148.867773][T10310]        vfs_fileattr_set+0x783/0xd70
[  148.869479][T10310]        ioctl_setflags+0x1c7/0x200
[  148.871207][T10310]        do_vfs_ioctl+0x705/0x13e0
[  148.872827][T10310]        __x64_sys_ioctl+0x114/0x210
[  148.874562][T10310]        do_syscall_64+0xc9/0xf80
[  148.876187][T10310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.878242][T10310] 
[  148.878242][T10310] -> #3 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}:
[  148.881087][T10310]        down_read+0x99/0x460
[  148.882916][T10310]        lookup_slow+0x42/0x70
[  148.884507][T10310]        path_lookupat+0x5e8/0xc40
[  148.886623][T10310]        filename_lookup+0x202/0x590
[  148.888800][T10310]        kern_path+0x35/0x50
[  148.890704][T10310]        lookup_bdev+0xd8/0x280
[  148.892608][T10310]        resume_store+0x1d6/0x460
[  148.894454][T10310]        kobj_attr_store+0x58/0x80
[  148.896427][T10310]        sysfs_kf_write+0xf2/0x150
[  148.898371][T10310]        kernfs_fop_write_iter+0x3e0/0x5f0
[  148.900368][T10310]        vfs_write+0x6ac/0x1070
[  148.901958][T10310]        ksys_write+0x12a/0x250
[  148.903612][T10310]        do_syscall_64+0xc9/0xf80
[  148.905295][T10310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.907525][T10310] 
[  148.907525][T10310] -> #2 (&of->mutex){+.+.}-{4:4}:
[  148.909782][T10310]        __mutex_lock+0x1a2/0x1b90
[  148.911419][T10310]        kernfs_seq_start+0x4f/0x2a0
[  148.913104][T10310]        seq_read_iter+0x2c1/0x1270
[  148.914821][T10310]        kernfs_fop_read_iter+0x46c/0x610
[  148.916673][T10310]        copy_splice_read+0x4ba/0xb90
[  148.918645][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.918835][T10310]        do_splice_read+0x285/0x370
[  148.922874][T10310]        splice_direct_to_actor+0x2a1/0xa30
[  148.924844][T10310]        do_splice_direct+0x174/0x240
[  148.926546][T10310]        do_sendfile+0xadc/0xe20
[  148.928194][T10310]        __x64_sys_sendfile64+0x1d8/0x220
[  148.930024][T10310]        do_syscall_64+0xc9/0xf80
[  148.931686][T10310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.933735][T10310] 
[  148.933735][T10310] -> #1 (&p->lock){+.+.}-{4:4}:
[  148.936043][T10310]        __mutex_lock+0x1a2/0x1b90
[  148.937685][T10310]        seq_read_iter+0xe1/0x1270
[  148.939772][T10310]        proc_reg_read_iter+0x220/0x310
[  148.942135][T10310]        copy_splice_read+0x4ba/0xb90
[  148.944460][T10310]        do_splice_read+0x285/0x370
[  148.946682][T10310]        splice_file_to_pipe+0x82/0x120
[  148.949099][T10310]        do_sendfile+0x366/0xe20
[  148.951216][T10310]        __x64_sys_sendfile64+0x1d8/0x220
[  148.953559][T10310]        do_syscall_64+0xc9/0xf80
[  148.955375][T10310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.957570][T10310] 
[  148.957570][T10310] -> #0 (&pipe->mutex){+.+.}-{4:4}:
[  148.960178][T10310]        __lock_acquire+0x14b8/0x2630
[  148.961930][T10310]        lock_acquire+0x17c/0x330
[  148.963647][T10310]        __mutex_lock+0x1a2/0x1b90
[  148.965812][T10310]        pipe_lock+0x69/0x80
[  148.967729][T10310]        iter_file_splice_write+0x1f8/0x10a0
[  148.969942][T10310]        do_splice+0x109c/0x1fd0
[  148.971595][T10310]        __do_splice+0x33b/0x370
[  148.973283][T10310]        __x64_sys_splice+0x187/0x250
[  148.975349][T10310]        do_syscall_64+0xc9/0xf80
[  148.977214][T10310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.979343][T10310] 
[  148.979343][T10310] other info that might help us debug this:
[  148.979343][T10310] 
[  148.982836][T10310] Chain exists of:
[  148.982836][T10310]   &pipe->mutex --> &ovl_i_mutex_dir_key[depth]#2 --> sb_writers#6
[  148.982836][T10310] 
[  148.987221][T10310]  Possible unsafe locking scenario:
[  148.987221][T10310] 
[  148.989628][T10310]        CPU0                    CPU1
[  148.991381][T10310]        ----                    ----
[  148.993115][T10310]   rlock(sb_writers#6);
[  148.994470][T10310]                                lock(&ovl_i_mutex_dir_key[depth]#2);
[  148.997171][T10310]                                lock(sb_writers#6);
[  149.000034][T10310]   lock(&pipe->mutex);
[  149.001565][T10310] 
[  149.001565][T10310]  *** DEADLOCK ***
[  149.001565][T10310] 
[  149.004967][T10310] 1 lock held by syz.5.1229/10310:
[  149.007106][T10310]  #0: ffff88803b1d2420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370
[  149.010593][T10310] 
[  149.010593][T10310] stack backtrace:
[  149.013133][T10310] CPU: 3 UID: 0 PID: 10310 Comm: syz.5.1229 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  149.013161][T10310] Tainted: [L]=SOFTLOCKUP
[  149.013168][T10310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.013179][T10310] Call Trace:
[  149.013187][T10310]  <TASK>
[  149.013195][T10310]  dump_stack_lvl+0x100/0x190
[  149.013221][T10310]  print_circular_bug.cold+0x178/0x1c7
[  149.013247][T10310]  check_noncircular+0x146/0x160
[  149.013278][T10310]  __lock_acquire+0x14b8/0x2630
[  149.013297][T10310]  ? __do_splice+0x33b/0x370
[  149.013317][T10310]  ? __x64_sys_splice+0x187/0x250
[  149.013340][T10310]  lock_acquire+0x17c/0x330
[  149.013353][T10310]  ? pipe_lock+0x69/0x80
[  149.013374][T10310]  ? __pfx___might_resched+0x10/0x10
[  149.013395][T10310]  __mutex_lock+0x1a2/0x1b90
[  149.013415][T10310]  ? pipe_lock+0x69/0x80
[  149.013434][T10310]  ? pipe_lock+0x69/0x80
[  149.013455][T10310]  ? __pfx___mutex_lock+0x10/0x10
[  149.013475][T10310]  ? rcu_is_watching+0x12/0xc0
[  149.013497][T10310]  ? iter_file_splice_write+0x1d3/0x10a0
[  149.013518][T10310]  ? trace_kmalloc+0x83/0xb0
[  149.013539][T10310]  ? __kmalloc_noprof+0x365/0x9c0
[  149.013557][T10310]  ? pipe_lock+0x69/0x80
[  149.013576][T10310]  pipe_lock+0x69/0x80
[  149.013593][T10310]  iter_file_splice_write+0x1f8/0x10a0
[  149.013615][T10310]  ? preempt_schedule_thunk+0x16/0x30
[  149.013634][T10310]  ? preempt_schedule_common+0x42/0xc0
[  149.013654][T10310]  ? __pfx_iter_file_splice_write+0x10/0x10
[  149.013676][T10310]  ? __lock_acquire+0x4a5/0x2630
[  149.013694][T10310]  ? __pfx_try_to_wake_up+0x10/0x10
[  149.013715][T10310]  ? find_held_lock+0x2b/0x80
[  149.013743][T10310]  ? __pfx_iter_file_splice_write+0x10/0x10
[  149.013766][T10310]  do_splice+0x109c/0x1fd0
[  149.013788][T10310]  ? __lock_acquire+0x4a5/0x2630
[  149.013807][T10310]  ? __pfx_do_splice+0x10/0x10
[  149.013826][T10310]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  149.013845][T10310]  ? find_held_lock+0x2b/0x80
[  149.013869][T10310]  __do_splice+0x33b/0x370
[  149.013892][T10310]  ? __pfx___do_splice+0x10/0x10
[  149.013927][T10310]  __x64_sys_splice+0x187/0x250
[  149.013950][T10310]  do_syscall_64+0xc9/0xf80
[  149.013971][T10310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.013989][T10310] RIP: 0033:0x7f4c28b9af79
[  149.014005][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.014022][T10310] RSP: 002b:00007f4c2997c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  149.014039][T10310] RAX: ffffffffffffffda RBX: 00007f4c28e15fa0 RCX: 00007f4c28b9af79
[  149.014050][T10310] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
[  149.014061][T10310] RBP: 00007f4c28c316e0 R08: 00000000088000cc R09: 0000000000000000
[  149.014070][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.014079][T10310] R13: 00007f4c28e16038 R14: 00007f4c28e15fa0 R15: 00007fff6b6c5be8
[  149.014096][T10310]  </TASK>
[  149.058689][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.142197][T10310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.208637][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.348679][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.488660][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.628681][ T8032] tipc: Node number set to 2886997162
[  149.768693][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  150.258702][ T5932] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  150.261487][ T5932] Bluetooth: hci3: Injecting HCI hardware error event
[  150.264306][ T5932] Bluetooth: hci3: hardware error 0x00
[  151.026276][   T24] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a01, bcdDevice= 0.00
[  151.029220][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.032469][   T24] usb 9-1: config 0 descriptor??
[  151.036219][   T24] usb 9-1: can't set config #0, error -71
[  151.040499][   T24] usb 9-1: USB disconnect, device number 11
[  152.338756][ T5932] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  153.708675][    C0] net_ratelimit: 4 callbacks suppressed
[  153.708695][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  154.738681][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  155.778748][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  156.818736][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  157.858747][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available