last executing test programs:

2m47.635839083s ago: executing program 0 (id=175):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x308000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xc4f32000)

2m47.545202602s ago: executing program 0 (id=176):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
setns(0xc9, 0x0) (async)
r3 = socket(0x8, 0x5, 0x9) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r5, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x1}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_map={0x7, 0x8, 0xffff, 0x84, 0x9, 0x5}}) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) (async)
ioctl$sock_netdev_private(r7, 0x8948, &(0x7f0000000000)) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'dummy0\x00', {0x2, 0x4e22, @multicast1}}) (async)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x42000004, 0x0, 0x5c) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x9, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x1, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x8, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x6, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x8, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x7f, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x5, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x93f2, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x30, 0x61, 0x2e]}}, &(0x7f0000001500)=""/118, 0x2a, 0x76, 0x1, 0x1e2000, 0x10000, @value=r8}, 0x28) (async)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x12, &(0x7f0000000400)=[@cr4={0x1, 0x110100}], 0x1) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001280)={0x184, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xaf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x74}, {0x6, 0x11, 0xb087}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0xbed}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8080}, 0x40810)

2m47.394629056s ago: executing program 0 (id=179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10004, 0x2, 0x9000, 0x2000, &(0x7f0000ff0000/0x2000)=nil})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00?\x007y'], 0x24}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m47.135938252s ago: executing program 0 (id=183):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x4)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440)="22d4d0a51e560be8ec39fb89afef8aa681631d07b55ca82f35", 0x19, r0}, 0x68)
read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe}}}}}, 0x0)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0)
write(r2, &(0x7f0000001080)='a', 0x1)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', <r9=>0x0, 0x40, 0x40, 0x3, 0xbe8, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x66, 0x0, 0x80, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0xc, 0xe0, 0x0, 0x9, [0x0, 0xa2]}, @noop, @timestamp={0x44, 0x10, 0x88, 0x0, 0x9, [0x10001, 0xc, 0xffffff11]}, @generic={0x44, 0xd, "7d04db899d37e3de318fb3"}, @cipso={0x86, 0x2b, 0x2, [{0x6, 0xc, "20cc1784a8599d50d367"}, {0x0, 0x3, '0'}, {0x7, 0xf, "3f0fb45985ca6605416f949327"}, {0x1, 0x2}, {0x0, 0x5, "cf1ad8"}]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x7, [{@remote, 0xffffff81}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@mpls_getnetconf={0x5c, 0x52, 0xc5de1884b7b09ea9, 0x70bd26, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xf069}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xb}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10000}, @NETCONFA_IFINDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48004080)
lseek(r4, 0x9, 0x0)
r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r11, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

2m46.246775346s ago: executing program 0 (id=193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async)
sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) (async)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,uzeb_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r4=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={r4, @in={{0x2, 0x4e23, @empty}}}, &(0x7f00000001c0)=0x84) (async)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r5}, 0x10)

2m45.716764875s ago: executing program 0 (id=197):
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x24008081}, 0x4004)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x5}) (async, rerun: 64)
mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0)
read(r1, &(0x7f0000000540)=""/1000, 0x3e8) (async)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8001})
ioctl(r3, 0x3b92, &(0x7f0000000000)="10") (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14)

2m45.714007516s ago: executing program 32 (id=197):
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x24008081}, 0x4004)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x5}) (async, rerun: 64)
mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0)
read(r1, &(0x7f0000000540)=""/1000, 0x3e8) (async)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8001})
ioctl(r3, 0x3b92, &(0x7f0000000000)="10") (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14)

2m27.254278246s ago: executing program 4 (id=429):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x6c, 0x66, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {0xffff, 0xc}, {0xffec, 0x9}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffff801}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x1}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="00000004000001"], 0xfce)

2m27.1239677s ago: executing program 4 (id=434):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4})
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x2, 0x0, 0xff})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5965, 0x10000, 0x0, 0x36a}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="182ddb7622000000000001d6d9a94deba1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r6=>r5, {0x2}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000000)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x4005}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) (async)
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x2, 0x0, 0xff}) (async)
syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5965, 0x10000, 0x0, 0x36a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="182ddb7622000000000001d6d9a94deba1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000000) (async)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x4005}}) (async)
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async)

2m27.034768373s ago: executing program 4 (id=436):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40140)
poll(&(0x7f00000001c0)=[{r3, 0x20}, {r2, 0x4044}], 0x2, 0xffffff04)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010700ffffffc400000052"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x184, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd2d2}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xc0}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x10000050}, 0x48000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$FIBMAP(r6, 0x1, 0x0)
socket$inet(0x2, 0x1, 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r7, &(0x7f0000000070)='syz0:127.0.0.1', 0xe)
socket$rxrpc(0x21, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)

2m26.156609791s ago: executing program 4 (id=443):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x400000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x3}}, 0xe8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080))
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

2m25.976700913s ago: executing program 4 (id=444):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, &(0x7f00000003c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0xa80, 0x0)
futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000076c0))
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
read$FUSE(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
getsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, &(0x7f00000003c0)) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0xa80, 0x0) (async)
futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) (async)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000076c0)) (async)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
read$FUSE(r1, 0x0, 0x0) (async)

2m25.817391078s ago: executing program 4 (id=445):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

2m10.806337278s ago: executing program 33 (id=445):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x240458c0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r2, 0x100000000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r0, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x2000042, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

2m4.760245559s ago: executing program 5 (id=615):
r0 = syz_clone(0x80, &(0x7f0000000480)="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", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="62dc0443a96182910c59f39fad32e6bdfb3ca7664eddbcd67bf80cf93b1d182deb2881d87733f3094c5a248e7f2d03576b02c7cbfdffa871ed269d52c5ea43c9765c7b891f4f0de9c0bdf7b5f7c5ffc4a8917bdd78c0a00a67e794bfb4a63a1a6e4405bc78ccda252997d7fcbead0f250d946f9d")
r1 = syz_open_procfs$userns(r0, &(0x7f0000000000))
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000440))
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2)
syz_clone(0x80, &(0x7f0000000480)="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", 0x1000, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="62dc0443a96182910c59f39fad32e6bdfb3ca7664eddbcd67bf80cf93b1d182deb2881d87733f3094c5a248e7f2d03576b02c7cbfdffa871ed269d52c5ea43c9765c7b891f4f0de9c0bdf7b5f7c5ffc4a8917bdd78c0a00a67e794bfb4a63a1a6e4405bc78ccda252997d7fcbead0f250d946f9d") (async)
syz_open_procfs$userns(r0, &(0x7f0000000000)) (async)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000440)) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) (async)

2m4.675323054s ago: executing program 5 (id=642):
setns(0xc9, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1])
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) (async)
r7 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xfc, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x658, 0xb607, 0x73}) (async)
close_range(r6, r7, 0x0) (async)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
write$tcp_congestion(r8, 0x0, 0x0)
dup2(r8, r2)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8)
close_range(r1, 0xffffffffffffffff, 0x2) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0)

2m4.623290106s ago: executing program 5 (id=643):
r0 = socket(0x10, 0x3, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0)
keyctl$chown(0x4, r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0xfffffffd, 0x0, 0xfffffffe}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010103000000000000001c"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x804)

2m4.622767508s ago: executing program 5 (id=644):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e, 0x0)
connect$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4080, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x14, 0xfff1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x94, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x67c, 0xf, 0x5, 0x5, 0xcc9, 0x10000, 0x2, 0xfffff800, 0x5, 0x6, 0x2, 0x10, 0x11, 0x5, 0xffffff21, 0xffff}}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0xf, 0x8}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_PARMS={0x38, 0x1, {0xb, 0x5b9b, 0xec, 0x6, 0x2, 0xa09, 0x40, 0xbfb, 0x11200, 0x3, 0x0, 0x0, 0x3, 0x8, 0x3, 0x5}}]}}]}, 0xc4}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x9, 0xa}, {0x2}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x849}, 0x80)

2m4.455660393s ago: executing program 5 (id=647):
mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba)
capset(&(0x7f0000000080)={0x399f1316}, &(0x7f00000000c0)={0x200000, 0x3, 0xa1, 0xa44})
mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e24,privport'])

2m3.491518679s ago: executing program 5 (id=662):
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x33f4)
r0 = socket(0x2c, 0x4, 0x6be6)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x7)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00')
socket$nl_route(0x10, 0x3, 0x0)

2m3.408735239s ago: executing program 34 (id=662):
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x33f4)
r0 = socket(0x2c, 0x4, 0x6be6)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x7)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00')
socket$nl_route(0x10, 0x3, 0x0)

1m29.096691042s ago: executing program 3 (id=1044):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc86, 0x0, 0xfc13, 0x2000, 0xffffffffffffffff, 0xfe000000, '\x00', r2, r3, 0x2, 0x2, 0x4, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r4}, 0x50)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r5, &(0x7f0000000040)=""/17, 0x11, 0x1)
r6 = eventfd(0x7ffe)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r6, 0x5, 0x2, r6})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r6, 0x5, 0x1, r0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x4001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

1m28.08305782s ago: executing program 3 (id=1046):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x7, 0x1, 0xfffffe00, 0xc456, 0x4, 0x1}, {0x0, 0x4, 0x1, 0x4b90, 0x9, 0x8001, 0xf7f}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bdab, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x50000, 0x6, 0x1}}}}]}, 0x48}}, 0x20000)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@delqdisc={0x180, 0x25, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {0x1, 0x9}, {0x1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x4f, 0x2}}, @TCA_RATE={0x6, 0x5, {0xe, 0xf8}}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0x1, 0x9, 0x2, 0x705, 0x4, 0x1}}, {0x6, 0x2, [0x8b23]}}, {{0x1c, 0x1, {0xc, 0x3, 0xff2c, 0x595, 0x0, 0x8bb, 0x2, 0x3}}, {0xa, 0x2, [0xb, 0x4, 0xa26]}}, {{0x1c, 0x1, {0x5, 0x0, 0x1, 0x7, 0x0, 0x3, 0x8, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x8a, 0x6, 0xfffa, 0x0, 0x2, 0x3, 0xa0, 0x3}}, {0xa, 0x2, [0x2, 0x170e, 0xffff]}}, {{0x1c, 0x1, {0x8, 0xac, 0x7, 0x51a, 0x2, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x8001, 0x0, 0x10]}}, {{0x1c, 0x1, {0xd2, 0xd7, 0xc400, 0x3, 0x2, 0x100b, 0xffffff92, 0x5}}, {0xe, 0x2, [0x0, 0x7, 0x5, 0x100, 0x0]}}, {{0x1c, 0x1, {0x3, 0x8, 0x1c, 0x2, 0x1, 0x9, 0x2, 0x3}}, {0xa, 0x2, [0xa, 0x9, 0x5]}}, {{0x1c, 0x1, {0x0, 0x2, 0x8, 0x3a4, 0x2, 0xff, 0xfffffffc, 0x6}}, {0x10, 0x2, [0xe311, 0x6, 0x8a, 0x3, 0xb, 0x101]}}]}]}, 0x180}}, 0x4000000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

1m27.975498889s ago: executing program 3 (id=1051):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
poll(&(0x7f0000004200)=[{}], 0x1, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)

1m27.97270026s ago: executing program 3 (id=1053):
r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2'])
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x80a0a1240160183d)
getdents64(r1, &(0x7f0000000240)=""/65, 0x41)
mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
ptrace(0x10, r3)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'ext3\x00'}, {0x20, '#/.\x06'}, {0x20, 'v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9'}], 0xa, "14cf708a6c3b09b575e9844ca35a9e55280aaa30d0145204760c30ceca8399e5a0d8ea"}, 0x9f)
ptrace$cont(0x20, r3, 0x0, 0x0)
ptrace$cont(0x18, r3, 0x7fffffffffffffff, 0x0)

1m27.866500882s ago: executing program 3 (id=1054):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000200), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b67"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
mount$nfs4(&(0x7f0000000080)='GPL\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00,#:@,smac\x00'])
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r5, r6, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4040, &(0x7f0000000580)={'trans=unix,', {[{@access_client}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@posixacl}], [{@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@permit_directio}]}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

1m27.756730875s ago: executing program 3 (id=1055):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, @in6=@mcast1, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x1a0, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}}, 0x50}, 0x1, 0x0, 0x0, 0x24040810}, 0x20004040) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000001c0)) (async)
fchdir(r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
io_setup(0xffff7fff, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) (async)
close(0x3) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)

1m27.682744267s ago: executing program 35 (id=1055):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, @in6=@mcast1, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x1a0, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}}, 0x50}, 0x1, 0x0, 0x0, 0x24040810}, 0x20004040) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000001c0)) (async)
fchdir(r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
io_setup(0xffff7fff, &(0x7f0000000000))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) (async)
close(0x3) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)

20.372248351s ago: executing program 6 (id=1936):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$unix(0x1, 0x5, 0x0)
close(r1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r4}, 0x10)
r5 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = open(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208082, 0x8e)
mkdirat(r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x40, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x6, 0xf2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)

20.317259805s ago: executing program 6 (id=1938):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x2)
fanotify_mark(r1, 0x201, 0x40000021, r0, 0x0)
r2 = fanotify_init(0x40, 0x101000)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', <r9=>0x0, 0x7808, 0x8, 0x8, 0xcb0, {{0xf, 0x4, 0x0, 0x8, 0x3c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0xda}, 0xd}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@multicast2, 0x2}]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', <r10=>0x0, 0x29, 0xa, 0x8, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x0, 0x8, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r11=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={<r12=>0x0, @private, @private}, &(0x7f0000000300)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r13=>0x0, 0x0, 0x8000, 0xe5, 0x5, {{0x2b, 0x4, 0x2, 0x5, 0xac, 0x65, 0x0, 0x8, 0x2d, 0x0, @multicast2, @local, {[@noop, @end, @timestamp={0x44, 0x28, 0x3a, 0x0, 0x0, [0x9, 0x6b, 0x6, 0x4, 0x2934e117, 0x0, 0x6, 0x1856, 0xfff]}, @ssrr={0x89, 0xf, 0x2e, [@empty, @remote, @loopback]}, @ssrr={0x89, 0x1b, 0x50, [@multicast1, @broadcast, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}]}, @rr={0x7, 0x27, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @local, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x3f, [@private=0xa010102, @private=0xa010102]}, @lsrr={0x83, 0xf, 0xa5, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}})
r14 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', <r16=>0x0})
sendto$packet(r14, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r16, 0x1, 0x6, 0x6, @remote}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gre0\x00', <r17=>0x0, 0x700, 0x20, 0x400, 0x8, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x67, 0x0, 0x4, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xb7, [@remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0x4b, 0x0, 0x6, [0x9, 0x80000001, 0x4, 0x77, 0xc6, 0x7ff, 0x783, 0x3, 0x2]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x35c, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7ff, 0x3, 0x3}, {0x8, 0x5, 0x8, 0xc}, {0xb, 0x9, 0x32, 0xe}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r16}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
fanotify_mark(r2, 0x441, 0x8000001, r0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)

20.240311032s ago: executing program 6 (id=1941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84)

20.165743502s ago: executing program 6 (id=1942):
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
write(r0, &(0x7f00000000c0), 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0xb3, 0x7, 0x100100, 0x40a640b, [0x4b6fb5c, 0x8], [0x3], 0x13a}})
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x5)
bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac13ffff}, 0x80)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000cc0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @empty, 0x4}}, 0x24)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x54)
setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./tracing\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U-', 0x8}, 0x16, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x380, 0x8000000000000001)
write(r3, &(0x7f0000000600)='stacktrace', 0xa)

20.100424886s ago: executing program 6 (id=1944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x80, 0x3}, {0xd, 0x5}, {0x9, 0x1}, {0x8, 0x1}, {0x5, 0x6}], "ba41d0adbd0e2256"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x53, 0x2}, {0x8, 0x3}, {0x7f, 0x2}, {0x9, 0x2}, {0x9b, 0x1}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x2}, {0x8c}, {0xc8, 0x7}], "59fd22956e9bfd80"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7b, 0x2}, {0x1, 0x7}, {0x7f, 0x5}, {0x8, 0x4}, {0xf}, {0x8, 0x1}, {0x8d, 0x5}, {0x3, 0x4}, {0x5e, 0x3}, {0xcb, 0x7}, {0x1, 0x6}, {0xa0, 0x7}, {0x6}, {0x9, 0x7}, {0xb3, 0x1}, {0x74, 0x2}], "b732da9473489506"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008020}, 0x1)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0xffffffff, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x5, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x7, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x9, 0xfffffffe, 0xfffff76f, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x5, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x80200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

19.869739228s ago: executing program 6 (id=1948):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000400)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '@&$(:&&]}', 0x3a, 'syz_tun\x00', 0x3a, './sys', 0x3a, [0x43, 0x4f, 0x43, 0x50, 0x50, 0x50, 0x46, 0xa0, 0x46, 0x4f]}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r7, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f00000002c0)=ANY=[], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000002c0), &(0x7f0000000340)=r5}, 0x20)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='4\x0094', 0x4)

19.793727728s ago: executing program 36 (id=1948):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000400)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '@&$(:&&]}', 0x3a, 'syz_tun\x00', 0x3a, './sys', 0x3a, [0x43, 0x4f, 0x43, 0x50, 0x50, 0x50, 0x46, 0xa0, 0x46, 0x4f]}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r7, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f00000002c0)=ANY=[], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000002c0), &(0x7f0000000340)=r5}, 0x20)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='4\x0094', 0x4)

5.645775997s ago: executing program 1 (id=2122):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x8000, 0x3, 0x4001bf}, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x0, 0x1e3)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/95, 0x5f)

5.570046125s ago: executing program 1 (id=2124):
socket(0xa, 0xa, 0x28) (async)
r0 = socket(0xa, 0xa, 0x28)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x10, @private=0xf30a4003}})

5.422012289s ago: executing program 1 (id=2127):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x9, 0x22000)
ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29)

5.13229693s ago: executing program 1 (id=2129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b90800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030c00"/20, @ANYRES32=0x0, @ANYBLOB="0000003e00000000240012800b00010065727370616e000014000c800500160000000000080007000a010101"], 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0)

5.056024252s ago: executing program 1 (id=2132):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x33e, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000540))
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x980900, 0x9})

4.967562749s ago: executing program 1 (id=2133):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getrandom(&(0x7f0000000100)=""/72, 0x48, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1', 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.491948531s ago: executing program 7 (id=2139):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695f91d, 0x0, 0x25dfdbfb, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x28)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x40480923, 0x0)
ioctl(r4, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000")
ioctl(r4, 0x400c0930, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0x541b, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xc}, {0x4, 0x4}, {0xf, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6c2}]}, 0x2c}}, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='3\n\x00', 0x2)
close(r7)

4.274891554s ago: executing program 7 (id=2146):
r0 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2c20662db27462db2043842aff2bcdc1f74bac4d92f916e9cd1d88c1eb8d437a80ac0a64129dc448517a8ad38d0f859dd0f69c472903", 0x36}], 0x1, &(0x7f0000000080)=[{0xc0, 0xff, 0x8, "7c6c05432c5c28b4580ec2ce730c49ca254c3d4c5d1e10ba460381eed2fc9d1aea30e3b8be3653e3970a762a659867569bd52106e46f42b3f56795bb530a539389283b1f87e2156f4e214ee845c1688b0883b5e3630999528fc6d75ce9d323819e0f3b041a5a80f26a140479b4f47ab08b91fdb932a0258381a72a35bbecfc45f71d295c0d5badcdbdc4551734c51e7eaa77329dbaac9b743e3a64872d813d3049e9f36905a1f44d5bcbb4e3184d0a51"}, {0x48, 0x0, 0xb556, "272901f699d8cef63dffd5d1cba514ad1b8c27b2ec3e43a2877c333cce72c524f893bf17de13a79e04430d18324869cf7ae274c5"}, {0x20, 0x10c, 0x8, "2e3b02f13d3a7998ed04f0560adff7"}, {0xa0, 0x109, 0x400, "0efa98b0dbf5caf6eb9d1773f17e508dd76dfeb9edf684e0d2c1184d4f6b566ffcf28c6368640537ced0b79f2eb8570a389a5e9359ff56716667224ca3f1e79c544998910c27eb07548b16e5cdc452a1ca3ae9deb3daf290aea5b190f1c40a58e26d3523b43fd0111c9e20e053a4aa0616bca9c4dd00290c95b9c379ddca504914882242de82d18d927e3aacea15d7c9"}, {0xa0, 0x114, 0x7, "301a977c660eca8a185a2329f4eb6aecac1c7d358185911655256e4e387b9dd6b6dae5e50edc66f48c2000eeb5009fdffe40d5a3660d013f6e8688681b2c85e89bac2a356f54d43501f7658af7dc4505d064cbcefcb2c5ee1e3573692a4633af471e228e48e3302749fa2d90ab4c8481783473575840ba0e256571d34076437d962e5cbf9cd94ec3fa42336ea38f44e5"}], 0x268}, 0x81)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40080c1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0xe, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x4c000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x5e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip_vti0\x00', <r7=>0x0, 0x7800, 0x8, 0x81, 0xec, {{0x13, 0x4, 0x2, 0x9, 0x4c, 0x67, 0x0, 0xc, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x11, 0x2, [{0x0, 0xb, "313c4423f2ddc3db4b"}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x7, [{@private=0xa010101, 0x18d}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@multicast1, 0x29b0}, {@loopback, 0xfffffffc}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000900)={'gre0\x00', <r9=>0x0, 0x700, 0x0, 0x5, 0xd, {{0x25, 0x4, 0x1, 0x30, 0x94, 0x64, 0x0, 0xbd, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x1b, 0xe6, [@remote, @private=0xa010102, @broadcast, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0xc}]}, @noop, @rr={0x7, 0xb, 0xe, [@local, @remote]}, @timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0xe5a}, {@broadcast, 0xe6}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x800}, {@private=0xa010100, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0xff, 0x1, 0x8, [{@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfffffff7}, {@local, 0x100}, {@empty, 0x3}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xd4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffd, 0x5c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40860}, 0x4048005)
r10 = openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x202000, 0x50)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x140a, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x48000)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x88, r5, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x257c5aee90ed3e12, 0x0, 0x6, 0x0, {0x800, 0xe, 0x0, 0x5, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x4, 0xbd}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf37f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe14}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f00000010c0)={<r13=>0x0, 0xf, 0x5, 0x3, 0x4, 0x1, 0x44, 0xff, {0x0, @in6={{0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}, 0x7d, 0x100, 0x0, 0x10, 0xa}}, &(0x7f0000001180)=0xb0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f00000011c0)={r13, @in={{0x2, 0x4e23, @broadcast}}}, 0x84)
r14 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001280)='/dev/comedi0\x00', 0x101640, 0x0)
ioctl$COMEDI_SETRSUBD(r14, 0x6410)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000012c0)={{0x43}, 'port0\x00', 0x0, 0x11804, 0x2df, 0x9, 0x54e9d197, 0x9, 0x8, 0x0, 0x1, 0x9})

4.193031422s ago: executing program 7 (id=2148):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0xffeffffa, 0x4) (async)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
r1 = syz_ublk_setup_io_uring(0x5213, &(0x7f0000000340)={0x0, 0xff88, 0x8, 0x1, 0x1a3}, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0)) (async)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x88000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r2], 0x6) (async)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0x7df5, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x6, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x3, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfc, 0x7, '\x00', 0xc6}, {0xd, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x2, 0x71, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x21, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0x7, 0x2, 0xa}]}}) (async)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fff}, {0x4000000e}, {}, {0x40000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000019, 0x0, 0x0, 0x4000}, {}, {}]})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) (async)
recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r2, &(0x7f0000000780)="69e7f2f90b5a63823d125ae3614ac350e271bb7ec37173e7955b6f09dd29aebfe88db7db443147e8eaaa1d18b343c2aa67e4bd96be5e7dd3790362562b25076f4cc0d410792255177c1bc7b11447d36c99edb661e2cbc6635db2815779face4bb83f30845f29114e598efce9d25b4c50407b77a4bc9dc9f99ec0ea5d5a6b45a727064b2aa372506163ce62cab4dbd73406aab37514cfedd95aca8b4f48343dbe5ac6cba025ee8f8c08841aafe6cff34fa2e62ab42920eaa2693d7d0c13a787183dd28166bc88abc14d58fa4dbc3118027a11b4aad624076fd9b6f0c87132c4940bdca4155ebe10843ef7e73d53b4549d3d3cece1eca74d2a37661e43c48c14", 0xff, 0x400c004, &(0x7f0000000880)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x55c}, 0x1c) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090325bd7000ffdbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="08000600ce"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) (async)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x2, &(0x7f0000001c40)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000901, 0x0, &(0x7f0000000000))

4.128926565s ago: executing program 7 (id=2150):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0) (async)
ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000480)=""/114)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000080)) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a87f29, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x2)

4.127469265s ago: executing program 7 (id=2151):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x400100, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000740)={<r1=>0x0, 0x9, 0x20, 0x1, 0x1}, &(0x7f00000010c0)=0x18)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001100)={<r2=>r1, 0x7}, &(0x7f0000001140)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x4f, &(0x7f0000001180)=[@in6={0xa, 0x4e20, 0x6, @local, 0x2}, @in6={0xa, 0x4e23, 0xd8, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8}]}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001580)=ANY=[@ANYBLOB="00800000000000000a004e22000033a8ff010000000000000000000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000080000000a004e21000000090000000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000000fc01000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000300000000000000000000ffffac1e010101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000020010000000000000000000000000000b30e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe80000000000000000000000000002f07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000b09fc00000000000000000000000000000001000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000500000000000000000000ffffac1414aaff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002ff0100000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3b0aa3aada5d01d"], 0x490)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000fc0)={0x16, 0x98, 0xfa00, {0x0, 0x5, 0xffffffffffffffff, 0x30, 0x8c2ef9f38faebbd2, @in6={0xa, 0x4e24, 0xde3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0xa0)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x4b, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000000700)={r7})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x406800, 0x84)
r10 = syz_clone(0x24400, &(0x7f0000000400)="cbd9324348db43bfda954bfbd1495e5d3b98e31104ccf582e6477a7e02c92b19c591ecab04afcc6d3a49e89744ed0727d511680c887897d800ee7e540527e3f83322945d9ec2ce6eefc2", 0x4a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="1bfd8752478988e6db6d96954348d040367989b829fdf2db3afa840d4dd41adbc9db7eae4128831dfb9ae972a531477f320c7e15")
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000000580)={{0x8, 0x4, 0x6, 0x8, 'syz1\x00', 0x7f}, 0x2, 0x3, 0x7, r10, 0x3, 0xffff0000, 'syz1\x00', &(0x7f0000000540)=['\x00', 'syzkaller\x00', '\x00'], 0xc})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

3.381444147s ago: executing program 7 (id=2152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x2) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)

1.857609865s ago: executing program 2 (id=2169):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6a00000000481100fe8000000000000000000000000000aafe8000010000000000000000000000aa4e"], 0x0)

1.776529137s ago: executing program 2 (id=2170):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x482, &(0x7f0000000100)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff", 0x2c)
setsockopt(r0, 0x0, 0x487, &(0x7f0000000200)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff7f0000014e210000000000000100"/68, 0x44) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000300)="12345678", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x123102, 0x0)
write(r2, &(0x7f00000001c0)='4', 0x1) (async)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0, r0, 0xffffffffffffffff, r0, r1, r0, r0, r1, r1], 0x9)

1.776370484s ago: executing program 8 (id=2171):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

1.776158731s ago: executing program 2 (id=2172):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async)
listen(r2, 0x5) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r4 = accept4$unix(r2, 0x0, 0x0, 0x80800)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff95}], 0x1}, 0x10010)
r5 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x8c, r8, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:printer_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x8c}}, 0x20080091)

1.616978358s ago: executing program 2 (id=2173):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0xde)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='commo', 0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x20, 0x4, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.413588205s ago: executing program 8 (id=2174):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x8000)
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}})

1.037152097s ago: executing program 8 (id=2175):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./file1\x00', 0x40)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2)
connect$inet(r0, &(0x7f00000007c0)={0x2, 0x4e24, @remote}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000800)="358a809b7991e74eaa021edb833cd267c8f76024dd7e86e1deb8d56e4a51300f126c69681ea2e050bb30da543dc8f71293a6debdd567a0b1de9df16ff0066400ab89371c5380040189b9e5217aa050801c39562aa84cc7b4c5af8e68cd01cd60e08bbc8cdc5ca4f5c834d1f6fa8628fed876dfa56b33d386d9b8ca2630af80fbd2283f0c17a995ee1f35f1ff1525655a165c", 0xfffffffffffffd96, 0x4000004, 0x0, 0x0) (async, rerun: 64)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) (rerun: 64)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@userxattr}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file2'}}]}) (rerun: 32)
recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000a00)=""/76, 0x4c}], 0x2}, 0x10001}], 0x2, 0x60, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c9078f4f40000000000007b4b143b7c61fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c70900feeb03000000000000649a3bfb0700000000000000b9cdb042d2643fcbb2c5a57df47d074af6e8dafe091a27bde5e38102b094a886b6a3e1fdb807b07cdf4803830db1"], 0x0) (async, rerun: 32)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c3f18000000070000000900000000000f000202000000005f5f309d6e007bf8715aba7da590998db32ffd88d6bf809f092d206a235d9507b492696d82cda73e6631dfaac84177ea69c05ae6b359d125bad82f53fb8e9518eaa856a3a3f94c366f9a9a4bca8a57b5af1adc0d927bfc297593e0a2a21def2ecd3ccc7736ee686e60b40acf65a9addaf404b1ed389242afa16cbecefd3c2b2206dbe43f8ed0c6433f3ab4"], &(0x7f0000000900)=""/210, 0x2b, 0xd2, 0x0, 0x7fff, 0x10000}, 0x28) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYRES8=r3, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="f87ce98f9cf902e940b30f5f7562c52c6fcb48c9ad1ef74eddd5410308a94696b75f494b408b7970c48c1a714c0c166d3954b63c95799120703146ddee428db024fd033ee3264ab9a833ee6a9e1df4879ee5d440e9963b59d9d05f66bda086b39f1a386d97d1f2993eb8c1a98628fdcf9e618207e85ad63843120edac22556a7"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, r3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x99, 0x0, &(0x7f0000000a80)="00000000000000000000d61139f19775e2b242096be5e5598ca7d8a2761ba938600f8d4832cbec23d5bab290908f0f8842e819f807d42415fca996f2b190d3ebaf978ae9d76114ba960a58ae52d426c8b7419dc0b88cbd0000000018ce59d085fc6c4b9a52db6148c84f12cee029f83d1275813ee87edf11e7b4134357a27260dacc6e79cc3022d5834b1592a2d9ce789fb3cf3483c99a469d", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) (async, rerun: 64)
chdir(&(0x7f0000000c00)='./file3\x00') (async, rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x60}}, 0x0) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f000015d000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000518000/0x3000)=nil, &(0x7f000013f000/0x3000)=nil, &(0x7f000013b000/0x3000)=nil, &(0x7f0000082000/0x3000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f00000a7000/0x8000)=nil, &(0x7f0000244000/0x3000)=nil, &(0x7f00007c2000/0x3000)=nil, &(0x7f0000091000/0x800000)=nil, &(0x7f0000000680)="fc16fb3e096bfbefb9", 0x9, r3}, 0x68) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r6, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7, 0x1000, 0x3eef, 0x200, 0x8f6}) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14104504d4da9e8b24760000"], 0x14}}, 0x4008000)

720.181303ms ago: executing program 2 (id=2176):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x10, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x3, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c64, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x3, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fd, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x90000000, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x1, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100008, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x6, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x800, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e000000100"/30, @ANYBLOB="000000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000050000000000000000000000000000000000000000000000000000000000000004"], 0x1a4}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = socket(0x23, 0x80805, 0x0)
listen(r11, 0x0)

719.630552ms ago: executing program 8 (id=2177):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0)
sendfile(r0, r1, 0x0, 0x201f00)
dup2(r0, r1)

463.474898ms ago: executing program 8 (id=2178):
munlock(&(0x7f0000c27000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000080)="2e660f383db3009066b9800000c00f326635000100000f3066f08305e8baf80c66b8cc43e28666efbafc0cedc4c27dddef0f01ca260f01c93e2e660fd523baf80c66b8b016df8b66efbafc0ced2e0f30", 0xffffffffffffffe7}], 0x1, 0x74, 0x0, 0x0)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

227.246481ms ago: executing program 8 (id=2179):
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x1, 0x3, 0x6})
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8)
ioctl$KDENABIO(r0, 0x4b36)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r1=>0x0, @initdev, @remote}, &(0x7f0000000240)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/72, 0x48, <r2=>0x0, &(0x7f0000000340)=""/161, 0xa1}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1a, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x6, 0x8, 0x8, 0x30, 0x8}, @alu={0x0, 0x1, 0x2, 0x5, 0x1, 0xffffffffffffffc0, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @alu={0x7, 0x1, 0x3, 0xa, 0x4, 0x80, 0x1}, @generic={0x7, 0x5, 0x5, 0x17, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x16, '\x00', r1, @fallback=0xa, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x63, 0xfffffffe}, 0x10, r2, r0, 0x1, 0x0, &(0x7f0000000480)=[{0x5, 0x4, 0x7, 0x2}], 0x10, 0x1000}, 0x94)
lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
statx(r0, &(0x7f00000006c0)='./file0\x00', 0x2000, 0x4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
getresgid(&(0x7f0000000800)=<r8=>0x0, &(0x7f0000000840), &(0x7f0000000880)=<r9=>0x0)
getresgid(&(0x7f00000008c0), &(0x7f0000000900)=<r10=>0x0, &(0x7f0000000940))
fstat(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getgid()
lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x1}, [{0x2, 0x3, r4}], {0x4, 0x6}, [{0x8, 0x1, r7}, {0x8, 0x3, r9}, {0x8, 0x9, r10}, {0x8, 0x5, 0xee00}, {0x8, 0x6, r11}, {0x8, 0x3, r12}], {0x10, 0x3}, {0x20, 0x4}}, 0x5c, 0x0)
mount$fuseblk(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x2000000, &(0x7f0000000b40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x34, 0x36, 0x39, 0x66, 0x61, 0x37], 0x2d, [0x66, 0x66, 0x36], 0x2d, [0x34, 0x33, 0x35, 0x65], 0x2d, [0x35, 0x38, 0x61, 0x34], 0x2d, [0xc, 0x30, 0x62, 0x38, 0x32, 0x36, 0x35, 0x62]}}}, {@obj_user}, {@uid_lt={'uid<', r6}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}})
rmdir(&(0x7f0000000c80)='\x00')
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000cc0)=""/229)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r13 = accept$phonet_pipe(r0, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10)
ioctl(r13, 0x4, &(0x7f0000000e40)="58c651937a5b7de60c60ae1df284f86e93d4eb1162c1ea9638d720843f9e24ef3c6ca79ad3286227127782f0c46e78b1dafea30ad37775eb904849908865b10004e71ef5692ff02f8a627c7e88df01342d9d62423e6fba4c9f2169b6fe7858dd5595140160147e9b6216ea9ae02aed24e107eefc7b75581a5ae860786c301a814eb64cb8658d03dcaf55d79477dc9435dd8420bfbeb6098ef9559bd0b2c3a21a0a")
r14 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r14, 0x110, 0x2, &(0x7f0000000f00)='-*J)&[\x00', 0x7)
ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0)
read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, <r15=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000002f80)={0xb0, 0x0, r15, [{{0x5, 0x0, 0xe, 0x5, 0x7, 0x4, {0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x4, 0x6, 0xfffffffffffff38c, 0x4, 0xffffff01, 0x4, 0x6000, 0x7, r6, r8, 0xffffffff, 0xffffffff}}, {0x4, 0x3d, 0x4, 0x8, 'root'}}]}, 0xb0)
symlink(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)='./file0\x00')
connect$phonet_pipe(r0, &(0x7f00000030c0)={0x23, 0x9, 0x8, 0x40}, 0x10)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000003100)={0x1, 'bond_slave_0\x00'})
ioctl$XFS_IOC_FSGROWFSDATA(r13, 0x4010586e, &(0x7f0000003140)={0xda7, 0xfffffff8})
waitid$P_PIDFD(0x3, r0, &(0x7f0000003180), 0x2, &(0x7f0000003200))

0s ago: executing program 2 (id=2180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48c81, 0x0)
write(r2, &(0x7f0000000340)="abdcbf42", 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000e88a80000810000020820450000240000400000119078ac1ed5b2a0d8e530b24f17c100109078220400010000009dc6fc8f28eb49fb1066e6f0b9443d6d00"], 0x3a)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xb53a, 0xc000, 0x8, 0x2bb})
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
setuid(0xee00)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x202d)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc9c5, 0x2000, 0x8, 0xe1})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
io_uring_enter(r4, 0x12a, 0x14, 0x17, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x1, 0x101000)
fanotify_mark(r6, 0x40, 0x4800003e, r5, 0x0)
faccessat(r5, &(0x7f0000000040)='./bus\x00', 0x121)
capset(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000feffffff"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

kernel console output (not intermixed with test programs):

ed
[  223.829833][   T42] audit: type=1400 audit(1787531252.245:7687): avc:  denied  { accept } for  pid=11110 comm="syz.2.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  224.048319][ T6131] wiimote 0005:057E:0306.0008: detected device: Nintendo Wii Remote (Gen 1)
[  224.071963][ T6131] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input22
[  224.093172][T11120] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead
[  224.098245][ T6131] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input23
[  224.109345][T11120] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead
[  224.116052][T11120] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead
[  224.122810][ T6131] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input21
[  224.129076][T11120] jffs2: notice: (11120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  224.132398][T11123] fuse: Bad value for 'fd'
[  224.189771][T11129] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  224.191838][   T24] usb 12-1: USB disconnect, device number 4
[  224.204875][T11097] wiimote 0005:057E:0306.0008: Device removed
[  224.315491][T11151] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1
[  224.320844][T11152] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1341'.
[  224.321421][T11151] Unsupported pkey algo: 106
[  224.329687][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'.
[  224.455463][T11155] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.483426][   T42] audit: type=1400 audit(1787531252.853:7688): avc:  denied  { ioctl } for  pid=11154 comm="syz.6.1346" path="socket:[46436]" dev="sockfs" ino=46436 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  224.496353][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.501607][T11155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.535529][T11155] veth1_macvtap: left allmulticast mode
[  224.537774][   T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  224.558962][ T5584] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.561459][ T5584] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.563844][ T5584] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.568799][ T5584] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.575473][ T5584] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.580368][ T5584] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.582874][ T5584] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.586159][ T5584] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.604099][   T42] audit: type=1400 audit(1787531252.975:7689): avc:  denied  { mounton } for  pid=11157 comm="syz.6.1347" path="/syzcgroup/cpu/syz6/test/cgroup.procs" dev="cgroup" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  224.604632][T11160] 9pnet_fd: p9_fd_create_tcp (11160): problem connecting socket to 127.0.0.1
[  224.640727][T11163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.653487][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1348'.
[  224.698873][   T29] usb 6-1: Using ep0 maxpacket: 16
[  224.702531][   T29] usb 6-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40
[  224.707434][   T29] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  224.712958][   T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1439, setting to 64
[  224.717429][   T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 72, setting to 64
[  224.722914][   T29] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  224.727149][   T29] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  224.732440][   T29] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  224.739267][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.742871][   T29] usb 6-1: Product: 걿俣ꣂ걥㈒䀮饰䭎௤욝ధ觏忉薨ರꡯ䟤茛﫣闙틕炬৒룍餯쓘逤賰揚ಫ쒟冸썻쨵쥋渃椌㶀Ꜵἕ儩賺ꦬ욒㡼உ柢䎉⟸騷열澑᷊㗓ኃ꛽៖ዽ䑃鳵ﮩ㧚ቇ鎵໖횥傎헪굢
[  224.752689][   T29] usb 6-1: Manufacturer: ﷍
[  224.754694][   T29] usb 6-1: SerialNumber: 牿뻷椱향᠖ꩻ塌뵳һ䞟⢥抵㵄鷔ᴑ筼媟⭺뤈Ꚉ矏홪顯첑ۀ鿾崵Ꞥ폪櫊쾃琶础ꫩﱈ䓺ꄱ牃똈嶻쁁ꇃ饋⣟තọ缑殣竗齀馗僺웬묻奊牅谛⟇천ళ᐀̅갯슄ﹽ
[  224.774964][T11147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  224.994853][T11147] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  224.998026][T11147] overlayfs: missing 'lowerdir'
[  225.012790][   T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  225.045233][   T29] usb 6-1: USB disconnect, device number 11
[  225.071578][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.185154][T11166] xt_bpf: check failed: parse error
[  233.009967][   T42] audit: type=1400 audit(1787531260.835:7690): avc:  denied  { name_bind } for  pid=11179 comm="syz.7.1354" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  233.044901][T11180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  233.116731][T11192] 9pnet_virtio: no channels available for device syz
[  233.144528][ T5584] netdevsim netdevsim14 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  233.150057][ T5584] netdevsim netdevsim14 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  233.315264][T11199] 9pnet_virtio: no channels available for device syz
[  233.429442][   T42] audit: type=1400 audit(1787531261.238:7691): avc:  denied  { append } for  pid=11215 comm="syz.7.1362" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  233.622163][T11237] binder: 11235:11237 ioctl c008ae91 2000000001c0 returned -22
[  233.674125][   T29] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  233.688196][T11244] md: md0 stopped.
[  233.867187][   T29] usb 11-1: Using ep0 maxpacket: 8
[  233.873986][   T29] usb 11-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=d3.42
[  233.879127][   T29] usb 11-1: config 8 has an invalid interface number: 146 but max is 3
[  233.881968][   T29] usb 11-1: config 8 has an invalid interface number: 9 but max is 3
[  233.887542][   T29] usb 11-1: config 8 has an invalid interface number: 82 but max is 3
[  233.893013][   T29] usb 11-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[  233.900833][   T29] usb 11-1: config 8 has an invalid interface number: 154 but max is 3
[  233.905909][   T29] usb 11-1: config 8 has no interface number 0
[  233.914492][   T29] usb 11-1: config 8 has no interface number 1
[  233.917582][   T29] usb 11-1: config 8 has no interface number 2
[  233.919568][   T29] usb 11-1: config 8 has no interface number 3
[  233.924487][   T29] usb 11-1: config 8 interface 146 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  233.928427][   T29] usb 11-1: config 8 interface 146 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  233.933262][   T29] usb 11-1: config 8 interface 146 altsetting 0 endpoint 0xB has invalid maxpacket 479, setting to 64
[  233.937047][   T29] usb 11-1: config 8 interface 146 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  233.941690][   T29] usb 11-1: config 8 interface 9 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  233.945379][   T29] usb 11-1: config 8 interface 9 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  233.949487][   T29] usb 11-1: config 8 interface 9 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64
[  233.954145][   T29] usb 11-1: config 8 interface 9 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  233.957575][   T29] usb 11-1: config 8 interface 9 altsetting 8 endpoint 0x6 has an invalid bInterval 129, changing to 11
[  233.963523][   T29] usb 11-1: config 8 interface 9 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  233.968610][   T29] usb 11-1: config 8 interface 9 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  233.973051][   T29] usb 11-1: config 8 interface 82 altsetting 10 has a duplicate endpoint with address 0x7, skipping
[  233.978635][   T29] usb 11-1: config 8 interface 82 altsetting 10 has a duplicate endpoint with address 0x4, skipping
[  233.983314][   T29] usb 11-1: config 8 interface 82 altsetting 10 has a duplicate endpoint with address 0x6, skipping
[  233.991494][   T29] usb 11-1: config 8 interface 82 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  233.997580][   T29] usb 11-1: config 8 interface 82 altsetting 10 has an endpoint descriptor with address 0x19, changing to 0x9
[  234.003122][   T29] usb 11-1: config 8 interface 82 altsetting 10 has a duplicate endpoint with address 0x9, skipping
[  234.007496][   T29] usb 11-1: config 8 interface 82 altsetting 10 has 6 endpoint descriptors, different from the interface descriptor's value: 5
[  234.011492][   T29] usb 11-1: config 8 interface 154 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  234.014789][   T29] usb 11-1: config 8 interface 154 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  234.019736][   T29] usb 11-1: config 8 interface 9 has no altsetting 0
[  234.022526][   T29] usb 11-1: config 8 interface 82 has no altsetting 0
[  234.025274][   T29] usb 11-1: config 8 interface 154 has no altsetting 0
[  234.030782][   T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.034180][   T29] usb 11-1: Product: Х
[  234.035975][   T29] usb 11-1: Manufacturer: ᮍŝ뺿禡爔걜疉暔㭰쯿臞準䳢䍐濠留Μ쥠ᖛ操厤㟻ᨐ遄⎎澫渚杴ň蔆ⴏ笩唓市ꞏ㟀㉚㥫멮鹱⬭쬧僊ꯚ斗蜰彳ꎜ鿦⫇ⳏ汗ꦯ㡺ꋢꅙ傱KDZ꾢頻⭳΅ฯ쁆龰飢ᡷ样茭릺ᒧ࠴켧烦ꩺ⿘酆撢웷杗̣⏍࿀賰ښ鋯ȶ埾ｚ莩蹙﬍䔸稫ᰌ啠镜鮽⽴㛣᳴㾗쐕瓳䲅㞾劑榹⎁ೄ魃頷까Ԉ
[  234.051389][   T29] usb 11-1: SerialNumber: 꾠惔踹䃛┈굀탕诎髇눸☕忛㗇ָꨮ⯷鴛譃ⅅ骞驅翂鲟㔆透溥辥嗤⺬펴樶籣繉蒔⺆⥟㯠볍옛倖괙⟕摄䐟첾㟁㤦᭲㝭㎬限곹夔蘷딥椯䢘䄬᠒捜䗖圬ힵ䷘濦⸎᤹ᶡ팽⥹⣦૳뙖蘣ꕞͷ嬆뷵Ÿ὆Ր켩圮组凬䄓賺
[  234.094414][T11276] 9pnet_virtio: no channels available for device syz
[  234.129172][T11272] kvm: kvm [11271]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  234.212651][   T42] audit: type=1400 audit(1787531261.968:7692): avc:  denied  { write } for  pid=11271 comm="syz.2.1381" path="socket:[45715]" dev="sockfs" ino=45715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  234.298654][   T29] xr_serial 11-1:8.146: skipping garbage
[  234.301625][   T29] xr_serial 11-1:8.146: skipping garbage
[  234.343940][   T29] usb 11-1: USB disconnect, device number 8
[  234.364327][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  234.369873][   T42] audit: type=1400 audit(1787531262.117:7693): avc:  denied  { read } for  pid=11289 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  234.370469][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'.
[  234.504524][T11214] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818)
[  234.538762][T11310] 9pnet_virtio: no channels available for device syz
[  234.546316][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1394'.
[  234.644289][T11316] Dead loop on virtual device ip6_vti0 (net 32), fix it urgently!
[  234.691547][T11320] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1398'.
[  234.694671][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'.
[  234.932594][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1404'.
[  235.114686][T11367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.341193][ T8426] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  235.341257][   T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  235.522805][   T29] usb 6-1: Using ep0 maxpacket: 32
[  235.522941][ T8426] usb 7-1: Using ep0 maxpacket: 32
[  235.522941][ T5820] usb 11-1: new low-speed USB device number 9 using dummy_hcd
[  235.524941][   T29] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  235.526608][ T8426] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  235.529345][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.532091][ T8426] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  235.535907][   T29] usb 6-1: config 0 descriptor??
[  235.540261][ T8426] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  235.543687][ T8426] usb 7-1: Product: syz
[  235.545406][ T8426] usb 7-1: Manufacturer: syz
[  235.545955][   T29] as10x_usb: device has been detected
[  235.547010][ T8426] usb 7-1: SerialNumber: syz
[  235.548991][   T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  235.551509][ T8426] usb 7-1: config 0 descriptor??
[  235.554462][T11355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.557667][ T8426] hub 7-1:0.0: bad descriptor, ignoring hub
[  235.559754][ T8426] hub 7-1:0.0: probe with driver hub failed with error -5
[  235.560285][   T29] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  235.594773][   T42] audit: type=1400 audit(1787531263.259:7694): avc:  denied  { firmware_load } for  pid=29 comm="kworker/1:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  235.595278][   T29] as10x_usb: error during firmware upload part1
[  235.607370][   T29] Registered device nBox DVB-T Dongle
[  235.683406][ T5820] usb 11-1: Invalid ep0 maxpacket: 64
[  235.760812][ T8426] usb 6-1: USB disconnect, device number 12
[  235.773879][T11355] as102_open: can't find device for minor 0
[  235.784543][ T8426] Unregistered device nBox DVB-T Dongle
[  235.785640][ T8426] as10x_usb: device has been disconnected
[  235.843629][ T5820] usb 11-1: new low-speed USB device number 10 using dummy_hcd
[  235.897087][   T24] usb 7-1: USB disconnect, device number 21
[  236.004101][ T5820] usb 11-1: Invalid ep0 maxpacket: 64
[  236.006785][ T5820] usb usb11-port1: attempt power cycle
[  236.112176][T11393] IPv6: NLM_F_CREATE should be specified when creating new route
[  236.202643][ T5741] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  236.388759][ T5820] usb 11-1: new low-speed USB device number 11 using dummy_hcd
[  236.410346][ T5820] usb 11-1: Invalid ep0 maxpacket: 64
[  236.563423][   T42] audit: type=1400 audit(1787531264.167:7695): avc:  denied  { ioctl } for  pid=11406 comm="syz.2.1424" path="/dev/usbmon2" dev="devtmpfs" ino=742 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  236.573132][ T5820] usb 11-1: new low-speed USB device number 12 using dummy_hcd
[  236.575630][T11407] program syz.2.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.590185][T11404] CUSE: unknown device info ""
[  236.593329][T11404] CUSE: unknown device info ""
[  236.593707][ T5820] usb 11-1: Invalid ep0 maxpacket: 64
[  236.595206][T11404] CUSE: unknown device info ""
[  236.598688][T11404] CUSE: unknown device info ""
[  236.600211][T11404] CUSE: zero length info key specified
[  236.601816][ T5820] usb usb11-port1: unable to enumerate USB device
[  236.603567][T11404] syz.1.1422: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  236.742699][   T42] audit: type=1400 audit(1787531264.335:7696): avc:  denied  { shutdown } for  pid=11414 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  236.807285][   T24] kernel read not supported for file /video9 (pid: 24 comm: kworker/2:0)
[  236.871640][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'.
[  236.888477][T11427] gfs2: error -5 reading superblock
[  236.892429][T11427] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1430'.
[  236.901201][T11427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11427 comm=syz.1.1430
[  236.905659][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'.
[  236.909319][T11429] netlink: 'syz.2.1432': attribute type 30 has an invalid length.
[  236.963839][T11430] netlink: 'syz.2.1432': attribute type 30 has an invalid length.
[  237.089804][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'.
[  237.104552][   T29] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  237.126818][T11439] webusb: landingPage URL too long
[  237.249755][   T42] audit: type=1400 audit(1787531264.803:7697): avc:  denied  { mount } for  pid=11447 comm="syz.1.1440" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  237.254796][T11449] netlink: 'syz.1.1440': attribute type 14 has an invalid length.
[  237.261198][T11450] ieee802154 phy1 wpan1: encryption failed: -22
[  237.266041][   T29] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  237.272283][   T29] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.278189][   T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.278274][T11449] ima: policy update failed
[  237.283656][   T42] audit: type=1802 audit(1787531264.831:7698): pid=11449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.1440" res=0 errno=0
[  237.289071][   T29] as10x_usb: device has been detected
[  237.289707][   T42] audit: type=1400 audit(1787531264.831:7699): avc:  denied  { unmount } for  pid=5749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  237.291672][   T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  237.316113][   T29] usb 12-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  237.338805][   T29] as10x_usb: error during firmware upload part1
[  237.345450][   T29] Registered device Abilis Systems DVB-Titan
[  237.633121][T11480] overlayfs: workdir and upperdir must be separate subtrees
[  237.970033][   T34] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  238.140963][   T34] usb 7-1: Using ep0 maxpacket: 8
[  238.143091][   T34] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  238.146969][   T34] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  238.150336][   T34] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7
[  238.155506][   T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.158046][   T34] usb 7-1: Product: syz
[  238.159347][   T34] usb 7-1: Manufacturer: syz
[  238.160803][   T34] usb 7-1: SerialNumber: syz
[  238.387548][   T34] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  238.603462][   T34] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  238.607388][T11510] syzkaller1: entered allmulticast mode
[  238.623452][   T34] usb 7-1: USB disconnect, device number 22
[  238.651603][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  238.974698][ T2317] usb 11-1: new full-speed USB device number 13 using dummy_hcd
[  239.015327][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1429'.
[  239.027057][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.030315][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.135740][ T2317] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  239.140917][ T2317] usb 11-1: config 0 has an invalid interface number: 8 but max is 0
[  239.144364][ T2317] usb 11-1: config 0 has no interface number 0
[  239.147452][ T2317] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  239.152098][ T2317] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  239.156791][ T2317] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  239.162609][ T2317] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  239.165862][ T2317] usb 11-1: Product: syz
[  239.168009][ T2317] usb 11-1: SerialNumber: syz
[  239.189764][ T2317] usb 11-1: config 0 descriptor??
[  239.200044][ T2317] cm109 11-1:0.8: invalid payload size 0, expected 4
[  239.211406][ T2317] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input24
[  239.239737][ T5517] usb 12-1: USB disconnect, device number 5
[  239.251048][ T5517] Unregistered device Abilis Systems DVB-Titan
[  239.252121][ T5517] as10x_usb: device has been disconnected
[  239.472444][    C3] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71
[  239.472777][   T29] usb 11-1: USB disconnect, device number 13
[  239.474613][    C3] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  239.498322][   T29] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  239.955120][T11551] __nla_validate_parse: 3 callbacks suppressed
[  239.955133][T11551] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1467'.
[  240.089594][   T42] kauditd_printk_skb: 1 callbacks suppressed
[  240.089605][   T42] audit: type=1400 audit(1787531267.461:7701): avc:  denied  { connect } for  pid=11563 comm="syz.6.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  240.159635][T11571] lo: Caught tx_queue_len zero misconfig
[  240.164828][T11571] binder: 11570:11571 ioctl c0306201 200000000080 returned -14
[  240.168122][T11571] binder: 11570:11571 ioctl c0306201 2000000003c0 returned -14
[  240.252674][T11584] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1475'.
[  240.475139][   T42] audit: type=1400 audit(1787531267.826:7702): avc:  denied  { write } for  pid=11606 comm="syz.7.1483" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  240.631480][T11616] netlink: 'syz.2.1485': attribute type 2 has an invalid length.
[  240.634273][T11616] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1485'.
[  240.638283][T11616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11616 comm=syz.2.1485
[  240.649706][T11616] netlink: 11396 bytes leftover after parsing attributes in process `syz.2.1485'.
[  240.830865][T11624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.131571][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1490'.
[  241.154079][T11633] macvlan0: entered allmulticast mode
[  241.164547][T11633] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  241.191054][T11635] sctp: [Deprecated]: syz.2.1491 (pid 11635) Use of int in maxseg socket option.
[  241.191054][T11635] Use struct sctp_assoc_value instead
[  241.198168][T11635] x_tables: duplicate underflow at hook 2
[  241.253267][T11639] xt_socket: unknown flags 0x48
[  241.319366][   T42] audit: type=1400 audit(1787531268.612:7703): avc:  denied  { write } for  pid=11641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.363295][   T42] audit: type=1400 audit(1787531268.659:7704): avc:  denied  { write } for  pid=11648 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  241.412559][   T42] audit: type=1400 audit(1787531268.705:7705): avc:  granted  { setsecparam } for  pid=11651 comm="syz.7.1495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  241.414145][ T6131] hid (null): global environment stack underflow
[  241.445641][ T6131] hid-generic 000F:F0B0:0008.0009: unknown main item tag 0x4
[  241.448001][ T6131] hid-generic 000F:F0B0:0008.0009: global environment stack underflow
[  241.450513][ T6131] hid-generic 000F:F0B0:0008.0009: item 0 4 1 11 parsing failed
[  241.453198][ T6131] hid-generic 000F:F0B0:0008.0009: probe with driver hid-generic failed with error -22
[  241.520107][   T42] audit: type=1400 audit(1787531268.808:7706): avc:  denied  { mounton } for  pid=11658 comm="syz.7.1498" path="/123/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  241.524920][T11659] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  241.524920][T11659] 
[  241.742119][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  241.913108][   T10] usb 6-1: Using ep0 maxpacket: 32
[  241.915375][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  241.919220][   T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  241.921731][   T10] usb 6-1: config 0 has no interface number 0
[  241.925385][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.927966][   T10] usb 6-1: Product: syz
[  241.929319][   T10] usb 6-1: Manufacturer: syz
[  241.930834][   T10] usb 6-1: SerialNumber: syz
[  241.934068][   T10] usb 6-1: config 0 descriptor??
[  241.941466][   T10] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  241.944276][   T10] usb 6-1: selecting invalid altsetting 1
[  241.946166][   T10] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  241.950455][   T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  241.954808][   T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  241.958321][   T10] usb 6-1: media controller created
[  241.966742][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  242.275401][   T42] audit: type=1400 audit(1787531269.501:7707): avc:  denied  { read } for  pid=11665 comm="syz.7.1500" lport=27749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  242.284103][   T42] audit: type=1400 audit(1787531269.519:7708): avc:  denied  { write } for  pid=11663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  242.305122][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1499'.
[  242.340382][   T42] audit: type=1400 audit(1787531269.566:7709): avc:  denied  { write } for  pid=11672 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  242.343389][T11674] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  242.349473][T11674] /dev/nullb0: Can't open blockdev
[  242.534523][   T42] audit: type=1400 audit(1787531269.753:7710): avc:  denied  { write } for  pid=11683 comm="syz.7.1504" name="functions" dev="configfs" ino=12764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  243.101933][   T10] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  243.105216][   T10] zl10353_read_register: readreg error (reg=127, ret==-110)
[  243.127326][T11655] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  243.135749][   T10] usb 6-1: USB disconnect, device number 13
[  243.232158][T11678] ceph: No mds server is up or the cluster is laggy
[  243.232313][T11685] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  243.237999][T11685] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  243.250803][T11685] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  243.253480][T11685] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  243.269202][T11685] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  243.323275][T11710] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  243.350615][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1510'.
[  243.353782][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1510'.
[  243.357864][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1510'.
[  243.360760][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1510'.
[  243.392457][T11712] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  243.395523][T11712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.444918][T11714] 9p: Bad value for 'port'
[  243.527829][T11719] NILFS (loop2): device size too small
[  243.536927][T11720] NILFS (loop2): device size too small
[  243.539436][T11719] netlink: 'syz.2.1514': attribute type 10 has an invalid length.
[  243.541992][T11720] netlink: 'syz.2.1514': attribute type 10 has an invalid length.
[  243.549255][T11719] team0 (unregistering): Port device team_slave_0 removed
[  243.557005][T11719] team0 (unregistering): Port device team_slave_1 removed
[  243.602737][T11725] ip_tables: iptables: counters copy to user failed while replacing table
[  244.117800][T11767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11767 comm=syz.2.1530
[  244.294777][T11797] Can't find ip_set type bitmap:ip
[  244.304690][T11800] tmpfs: Bad value for 'mpol'
[  244.357473][T11804] netlink: 'syz.7.1541': attribute type 1 has an invalid length.
[  244.365856][T11805] netlink: 'syz.7.1541': attribute type 1 has an invalid length.
[  244.457251][T11811] team0: entered promiscuous mode
[  244.459069][T11811] team0: entered allmulticast mode
[  244.464491][T11811] 8021q: adding VLAN 0 to HW filter on device team0
[  244.467255][   T55] usb 11-1: new full-speed USB device number 14 using dummy_hcd
[  244.566795][T11821] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  244.638089][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout
[  244.640678][   T55] usb 11-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  244.644946][   T55] usb 11-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0
[  244.648111][   T55] usb 11-1: config 1 interface 0 has no altsetting 0
[  244.652122][   T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.654744][   T55] usb 11-1: Product: syz
[  244.656159][   T55] usb 11-1: Manufacturer: syz
[  244.657681][   T55] usb 11-1: SerialNumber: syz
[  245.104827][T11848] kAFS: Can only specify source 'none' with -o dyn
[  245.132696][T11854] 9pnet_virtio: no channels available for device syz
[  245.140395][T11854] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  245.185997][T11863] syzkaller0: entered promiscuous mode
[  245.187795][T11863] syzkaller0: entered allmulticast mode
[  245.224569][T11869] loop0: detected capacity change from 0 to 3904
[  245.228728][   T55] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202
[  245.302056][T11869] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  245.306146][T11869] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[  245.308837][T11869] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  245.317628][T11869]  loop0:
[  245.319487][T11872] ufs: You didn't specify the type of your ufs filesystem
[  245.319487][T11872] 
[  245.319487][T11872] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  245.319487][T11872] 
[  245.319487][T11872] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  245.331402][T11872] ufs: failed to set blocksize
[  245.418348][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[  245.418893][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  245.425447][T11879] __nla_validate_parse: 9 callbacks suppressed
[  245.425457][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'.
[  245.431648][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'.
[  245.458730][T11880] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  245.464737][T11880] block device autoloading is deprecated and will be removed.
[  245.501813][T11884] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  245.506672][T11884] SELinux: failed to load policy
[  245.509534][T11885] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  245.512508][T11885] SELinux: failed to load policy
[  245.515806][T11887] netlink: 'syz.1.1564': attribute type 1 has an invalid length.
[  245.527178][T11887] 8021q: adding VLAN 0 to HW filter on device bond7
[  245.556536][T11887] bond7: (slave geneve4): making interface the new active one
[  245.562482][T11887] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  245.671497][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  245.671510][   T42] audit: type=1400 audit(1787531272.682:7733): avc:  denied  { write } for  pid=11900 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.682934][   T42] audit: type=1326 audit(1787531272.682:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.7.1569" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25e199e0d9 code=0x0
[  245.691882][T11906] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  245.721725][T11907] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  245.731825][   T42] audit: type=1400 audit(1787531272.748:7735): avc:  denied  { shutdown } for  pid=11905 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.740917][   T42] audit: type=1400 audit(1787531272.748:7736): avc:  denied  { read } for  pid=11905 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.748619][   T42] audit: type=1400 audit(1787531272.748:7737): avc:  denied  { shutdown } for  pid=11902 comm="syz.7.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  245.852954][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'.
[  245.857107][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'.
[  245.860085][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1575'.
[  245.873225][    C3] Unknown status report in ack skb
[  245.900390][   T42] audit: type=1400 audit(1787531272.907:7738): avc:  denied  { getopt } for  pid=11932 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  245.908485][   T42] audit: type=1400 audit(1787531272.907:7739): avc:  denied  { write } for  pid=11931 comm="syz.1.1577" name="cluster" dev="configfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  245.915776][   T42] audit: type=1400 audit(1787531272.907:7740): avc:  denied  { write } for  pid=11931 comm="syz.1.1577" name="heartbeat" dev="configfs" ino=48872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  245.928826][   T42] audit: type=1400 audit(1787531272.916:7741): avc:  denied  { append } for  pid=11931 comm="syz.1.1577" name="blocks" dev="configfs" ino=48883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  245.936161][   T42] audit: type=1800 audit(1787531272.916:7742): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1577" name="blocks" dev="configfs" ino=48883 res=0 errno=0
[  246.224072][T11965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.224095][T11966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.554104][T11989] device-mapper: ioctl: populate_table: next target spec (offset 0) overlaps 'struct dm_ioctl'
[  246.723451][T12009] 9pnet_virtio: no channels available for device syz
[  246.810474][T12014] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  247.137909][T12022] loop4: detected capacity change from 0 to 2640
[  247.145062][ T5747] buffer_io_error: 11 callbacks suppressed
[  247.145072][ T5747] Buffer I/O error on dev loop4, logical block 0, async page read
[  247.149898][ T5747] Buffer I/O error on dev loop4, logical block 0, async page read
[  247.152573][ T5747] Buffer I/O error on dev loop4, logical block 0, async page read
[  247.161040][T12022] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  247.164682][T12022] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  247.168309][T12022] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  247.171905][T12022] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  247.175456][T12022] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  247.178916][T12022] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  247.182478][T12022] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  247.192956][ T5846] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  247.352359][ T5846] usb 7-1: Using ep0 maxpacket: 8
[  247.355097][ T5846] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  247.360171][ T5846] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  247.366029][ T5846] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  247.370015][ T5846] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.374548][ T5846] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.377689][ T5846] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.381744][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.447892][T12029] xt_l2tp: invalid flags combination: c
[  247.479383][ T6889] usb 11-1: USB disconnect, device number 14
[  247.492587][ T6889] usblp0: removed
[  247.606974][ T5846] usb 7-1: usb_control_msg returned -32
[  247.608800][ T5846] usbtmc 7-1:16.0: can't read capabilities
[  247.640923][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  247.681019][T12046] bond9 (unregistering): Released all slaves
[  247.815761][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'.
[  247.871043][T12053] 9pnet_virtio: no channels available for device syz
[  247.893076][T12053] syzkaller0: entered promiscuous mode
[  247.894825][T12053] syzkaller0: entered allmulticast mode
[  247.990679][T12054] trusted_key: encrypted_key: keylen parameter is missing
[  248.059268][T12057] netlink: 'syz.2.1604': attribute type 1 has an invalid length.
[  248.061639][T12057] netlink: 'syz.2.1604': attribute type 4 has an invalid length.
[  248.063948][T12057] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1604'.
[  248.086613][T12057] usbtmc 7-1:16.0: usb_control_msg returned -32
[  249.345214][   T34] usb 7-1: USB disconnect, device number 23
[  249.355937][T12056] bridge_slave_0: left allmulticast mode
[  249.358117][T12056] bridge_slave_0: left promiscuous mode
[  249.360026][T12056] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.364572][T12056] bridge_slave_1: left allmulticast mode
[  249.366398][T12056] bridge_slave_1: left promiscuous mode
[  249.368261][T12056] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.373969][T12056] bond0: (slave bond_slave_0): Releasing backup interface
[  249.378291][T12056] bond0: (slave bond_slave_1): Releasing backup interface
[  249.385758][T12056] team0: Port device team_slave_0 removed
[  249.388067][T12056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.390378][T12056] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.394032][T12056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.396542][T12056] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.400037][T12056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  249.422333][T12058] team0: Port device xfrm0 added
[  249.428593][T12059] tipc: Started in network mode
[  249.430284][T12059] tipc: Node identity de2f5d770a5c, cluster identity 4711
[  249.432838][T12059] tipc: Enabled bearer <eth:team0>, priority 0
[  249.483598][T12069] syzkaller0: entered promiscuous mode
[  249.485515][T12069] syzkaller0: entered allmulticast mode
[  249.852968][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  249.868058][T12091] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12091 comm=syz.6.1623
[  249.945835][T12100] loop3: detected capacity change from 0 to 7
[  249.951126][T12100] Dev loop3: unable to read RDB block 7
[  249.952920][T12100]  loop3: unable to read partition table
[  249.955058][T12100] loop3: partition table beyond EOD, truncated
[  249.957596][T12100] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  249.977621][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.990130][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.248452][   T55] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  250.466558][   T55] usb 6-1: not running at top speed; connect to a high speed hub
[  250.469242][   T55] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  250.472144][T12123] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1632'.
[  250.472728][   T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  250.479767][   T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.482228][   T55] usb 6-1: Product: syz
[  250.483738][   T55] usb 6-1: Manufacturer: ﵇঵齟嘷ퟐ넖⳶菮栳쬽힁榻楬⼥噈ꤔᇹ榞ઓ鱴ⓛ矑꘍躥濗䋷᫯蔻쏠㎊喷尕칆ꐱ⟎榅ꀷ疁הּ콦쭙㿃論슁䀡闟竾鎲坜甔︚✑䐱姉ˇ簨샖閖읟ﻍ⁾鈒䣴챥嗹⒎Ꮷ뱥㼈鞇巑螏࡮౅倽༘簖㔦闿該ꨡЂ㼑꽁偓㻹ἄ滣鸿힢唭槹袓滰ˊ鉧
[  250.493474][   T55] usb 6-1: SerialNumber: syz
[  250.497582][T12104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  250.622463][ T6131] tipc: Node number set to 3564330359
[  250.633665][T12126] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  250.716589][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.725128][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.735354][   T55] usbhid 6-1:1.0: can't add hid device: -71
[  250.737236][   T55] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  250.742340][   T55] usb 6-1: USB disconnect, device number 14
[  250.863990][T12137] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  250.988455][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1640'.
[  251.027006][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1642'.
[  251.032068][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1642'.
[  251.056248][T12158] CUSE: unknown device info ""
[  251.058292][T12158] CUSE: unknown device info ""
[  251.063618][T12158] CUSE: unknown device info ""
[  251.065679][T12158] CUSE: unknown device info ""
[  251.067738][T12158] CUSE: DEVNAME unspecified
[  251.263632][   T55] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  251.455801][   T55] usb 6-1: Using ep0 maxpacket: 32
[  251.541228][   T10] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  251.606079][T12176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.613069][T12176] input: syz1 as /devices/virtual/input/input25
[  251.618750][   T42] kauditd_printk_skb: 16 callbacks suppressed
[  251.618765][   T42] audit: type=1400 audit(1787531278.260:7759): avc:  denied  { write } for  pid=12174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  251.673653][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.675295][   T42] audit: type=1400 audit(1787531278.307:7760): avc:  denied  { write } for  pid=12179 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  251.676806][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.688593][T12104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.692237][T12104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.696778][   T42] audit: type=1400 audit(1787531278.325:7761): avc:  denied  { getopt } for  pid=12102 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  251.698557][   T55] usb 6-1: unable to get BOS descriptor or descriptor too short
[  251.701590][   T10] usb 12-1: device descriptor read/64, error -71
[  251.707462][   T55] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  251.710913][   T55] usb 6-1: unable to read config index 0 descriptor/start: -71
[  251.713266][   T55] usb 6-1: can't read configurations, error -71
[  251.835606][   T42] audit: type=1400 audit(1787531278.456:7762): avc:  denied  { connect } for  pid=12189 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  251.836367][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'.
[  251.891355][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'.
[  251.968801][   T10] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  252.012669][   T42] audit: type=1400 audit(1787531278.625:7763): avc:  denied  { connect } for  pid=12199 comm="syz.6.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  252.014369][T12200] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  252.118468][   T10] usb 12-1: device descriptor read/64, error -71
[  252.124572][T12206] 9p: Bad value for 'wfdno'
[  252.236452][   T10] usb usb12-port1: attempt power cycle
[  252.286139][T12220] tmpfs: Bad value for 'mpol'
[  252.333674][T12228] FAT-fs (mtdblock0): bogus logical sector size 65508
[  252.336770][T12228] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[  252.400756][T12235] /dev/sg0: Can't lookup blockdev
[  252.412147][   T42] audit: type=1400 audit(1787531278.999:7764): avc:  denied  { getopt } for  pid=12236 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  252.488146][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'.
[  252.491047][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'.
[  252.494622][T12248] geneve0: entered promiscuous mode
[  252.547083][   T42] audit: type=1400 audit(1787531279.111:7765): avc:  denied  { node_bind } for  pid=12254 comm="syz.1.1673" saddr=172.20.20.32 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  252.586756][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'.
[  252.614872][   T10] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  252.631611][   T10] usb 12-1: device descriptor read/8, error -71
[  252.661988][   T42] audit: type=1400 audit(1787531279.224:7766): avc:  denied  { read } for  pid=12274 comm="syz.2.1678" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  252.670275][   T42] audit: type=1400 audit(1787531279.224:7767): avc:  denied  { open } for  pid=12274 comm="syz.2.1678" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  252.888173][   T10] usb 12-1: new high-speed USB device number 9 using dummy_hcd
[  252.920283][   T10] usb 12-1: device descriptor read/8, error -71
[  252.939396][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'.
[  252.943841][   T42] audit: type=1400 audit(1787531279.495:7768): avc:  denied  { write } for  pid=12296 comm="syz.6.1685" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  253.039750][   T10] usb usb12-port1: unable to enumerate USB device
[  253.055198][T12296] Process accounting resumed
[  253.091801][T12308] xt_CT: No such helper "netbios-ns"
[  253.216759][T12316] trusted_key: encrypted_key: master key parameter is missing
[  253.260228][T12316] openvswitch: netlink: IP tunnel dst address not specified
[  253.753280][T12323] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1689'.
[  253.818993][T12325] openvswitch: netlink: IP tunnel dst address not specified
[  253.848282][T12329] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  253.866924][T12329] cramfs: wrong magic
[  253.935854][T12333] fuse: Bad value for 'user_id'
[  253.937530][T12333] fuse: Bad value for 'user_id'
[  253.939309][T12334] fuse: Bad value for 'user_id'
[  253.940852][T12334] fuse: Bad value for 'user_id'
[  253.989342][T12336] overlayfs: conflicting lowerdir path
[  254.007691][T12340] ip6tnl0: Caught tx_queue_len zero misconfig
[  254.081147][T12350] netlink: 'syz.6.1699': attribute type 21 has an invalid length.
[  254.242058][T12370] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  254.351701][T12381] syzkaller1: entered promiscuous mode
[  254.353675][T12381] syzkaller1: entered allmulticast mode
[  254.524180][ T2329] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  254.535422][T12387] netlink: Setting conntrack mark requires 'commit' flag.
[  254.537616][T12387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.619586][T12392] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  254.633556][T12392] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  254.661537][ T2329] usb 7-1: device descriptor read/64, error -71
[  254.939443][ T2329] usb 7-1: new low-speed USB device number 25 using dummy_hcd
[  255.099706][ T2329] usb 7-1: device descriptor read/64, error -71
[  255.153686][T12419] 9pnet_virtio: no channels available for device syz
[  255.217432][ T2329] usb usb7-port1: attempt power cycle
[  255.557583][T12443] e1000e 0000:00:02.0 eth1: removed PHC
[  255.591312][ T2329] usb 7-1: new low-speed USB device number 26 using dummy_hcd
[  255.623742][ T2329] usb 7-1: device descriptor read/8, error -71
[  255.684374][T12443] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  255.736252][T12454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.772463][T12459] kAFS: Can only specify source 'none' with -o dyn
[  255.812197][T12462] libceph: resolve '0' (ret=-3): failed
[  255.828732][T12462] syzkaller0: entered promiscuous mode
[  255.830696][T12462] syzkaller0: entered allmulticast mode
[  255.896592][T12444] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller
[  255.901680][ T2329] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[  255.906084][T12444] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU)
[  255.923580][ T2329] usb 7-1: device descriptor read/8, error -71
[  255.996486][T12475] netdevsim netdevsim3 eth14: entered allmulticast mode
[  256.001574][T12475] netdevsim netdevsim3 eth15: entered allmulticast mode
[  256.006370][T12475] netdevsim netdevsim3 eth16: entered allmulticast mode
[  256.010120][T12475] netdevsim netdevsim3 eth17: entered allmulticast mode
[  256.020593][T12475] lapb7: entered allmulticast mode
[  256.022754][T12475] lapb8: entered allmulticast mode
[  256.026247][T12480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12480 comm=syz.1.1738
[  256.052812][ T2329] usb usb7-port1: unable to enumerate USB device
[  256.219580][T12497] netlink: 'syz.1.1739': attribute type 1 has an invalid length.
[  256.232967][T12497] bond10: option mode: invalid value (8)
[  256.236718][T12497] bond10 (unregistering): Released all slaves
[  256.275162][T12515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12515 comm=syz.1.1739
[  256.281069][T12515] netlink: 'syz.1.1739': attribute type 10 has an invalid length.
[  256.284900][T12515] dummy0: entered promiscuous mode
[  257.092305][T12559] xt_hashlimit: size too large, truncated to 1048576
[  257.174402][T12566] fuse: Bad value for 'group_id'
[  257.176047][T12566] fuse: Bad value for 'group_id'
[  257.297165][T12570] ehci-pci 0000:00:1d.7: remove, state 1
[  257.303699][T12570] usb usb2: USB disconnect, device number 1
[  257.305864][T12570] usb 2-1: USB disconnect, device number 2
[  257.418389][T12570] ehci-pci 0000:00:1d.7: USB bus 2 deregistered
[  257.671159][T12585] __nla_validate_parse: 5 callbacks suppressed
[  257.671171][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'.
[  257.778700][   T42] kauditd_printk_skb: 30 callbacks suppressed
[  257.778711][   T42] audit: type=1400 audit(1787531284.015:7799): avc:  denied  { ioctl } for  pid=12588 comm="syz.7.1760" path="socket:[55116]" dev="sockfs" ino=55116 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  257.813991][ T2329] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  257.995693][ T2329] usb 11-1: Using ep0 maxpacket: 16
[  257.998835][T12599] syzkaller0: entered promiscuous mode
[  258.000631][ T2329] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.003389][T12599] syzkaller0: entered allmulticast mode
[  258.007030][ T2329] usb 11-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16
[  258.010896][ T2329] usb 11-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023
[  258.015081][ T2329] usb 11-1: config 1 interface 0 has no altsetting 0
[  258.020982][ T2329] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.024406][ T2329] usb 11-1: Product: syz
[  258.026203][ T2329] usb 11-1: Manufacturer: syz
[  258.028014][ T2329] usb 11-1: SerialNumber: syz
[  258.032378][T12577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  258.035353][T12577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  258.268068][T12606] netlink: 'syz.7.1765': attribute type 1 has an invalid length.
[  258.359171][ T5741] Bluetooth: hci4: sending frame failed (-49)
[  258.379004][ T5743] Bluetooth: hci4: Entering manufacturer mode failed (-49)
[  258.469199][ T2329] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71
[  258.480611][ T2329] usb 11-1: USB disconnect, device number 15
[  259.810934][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'.
[  259.867601][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'.
[  259.871023][   T42] audit: type=1400 audit(1787531285.971:7800): avc:  denied  { read } for  pid=12635 comm="syz.7.1772" path="socket:[55870]" dev="sockfs" ino=55870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  259.933489][T12650] ceph: Path missing in source
[  259.977308][T12652] netlink: 'syz.2.1776': attribute type 11 has an invalid length.
[  260.069357][T12655] tipc: Resetting bearer <eth:team0>
[  260.194804][T12665] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  260.281395][   T24] lo speed is unknown, defaulting to 1000
[  260.288037][   T24] s
z1: Port: 1 Link DOWN
[  260.291802][   T24] rtrs_client L3172: Handling event: port error (10). HCA name: s
z1, port num: 1
[  260.299101][   T55] lo speed is unknown, defaulting to 1000
[  260.319711][T12665] syzkaller0: entered promiscuous mode
[  260.321651][T12665] syzkaller0: entered allmulticast mode
[  260.330168][T12671] tmpfs: Bad value for 'mpol'
[  260.379994][T12674] CIFS: Unable to determine destination address
[  260.398237][T12675] fuse: Bad value for 'group_id'
[  260.399742][T12675] fuse: Bad value for 'group_id'
[  260.421456][T12675] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  261.052785][T12683] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  261.055695][T12683] SELinux: failed to load policy
[  261.852144][T12674] bridge0: port 1(syz_tun) entered blocking state
[  261.855409][T12674] bridge0: port 1(syz_tun) entered disabled state
[  261.858595][T12674] syz_tun: entered allmulticast mode
[  261.861439][T12674] syz_tun: entered promiscuous mode
[  261.875415][ T5815] netdevsim netdevsim14 eth4: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.878159][ T5815] netdevsim netdevsim14 eth4: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.880787][ T5815] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.883348][ T5815] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.886445][ T5815] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.889383][ T5815] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.894256][ T5815] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.894273][ T5815] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.905266][ T5815] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.912130][ T5815] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.921264][T12690] jffs2: notice: (12690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  261.936841][   T42] audit: type=1400 audit(1787531287.908:7801): avc:  denied  { mounton } for  pid=12688 comm="syz.2.1786" path="/411/mnt" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  262.081322][T12715] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 2, id = 0
[  262.097206][T12718] 9pnet_fd: p9_fd_create_tcp (12718): problem binding to privport
[  262.110548][   T42] audit: type=1400 audit(1787531288.076:7802): avc:  denied  { create } for  pid=12712 comm="syz.7.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  262.121028][T12716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  262.140085][T12713] syzkaller0: left promiscuous mode
[  262.142449][T12713] syzkaller0: left allmulticast mode
[  262.222306][T12728] openvswitch: netlink: Flow key attr not present in new flow.
[  262.253078][T12725] fuse: Unknown parameter '0x0000000000000012�PذI�k�/�q�����2Y#Κ��Bs�.�����3��Ԝ�x7�X&&�;��iNe��36*m@�'�i�a��bOD�v-��r*��V�����u]俇����hB��Sǔ����P�/�:s�/��W��������e��6�e*�|f@V�N@�M�h$������'
[  263.325738][T12749] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4
[  263.419971][   T42] audit: type=1401 audit(1787531289.293:7803): op=setxattr invalid_context="system_u:object_r:etc_aliases_t:s0"
[  265.505403][T12735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.568965][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1808'.
[  265.576612][T12779] hsr_slave_0: left promiscuous mode
[  265.580358][T12779] hsr_slave_1: left promiscuous mode
[  265.624756][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'.
[  265.629756][T12785] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1809'.
[  265.845449][   T42] audit: type=1400 audit(1787531291.567:7804): avc:  denied  { bind } for  pid=12797 comm="syz.2.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  265.981011][T12810] dvmrp6: entered allmulticast mode
[  266.543716][T12816] syzkaller0: entered promiscuous mode
[  266.546537][T12816] syzkaller0: entered allmulticast mode
[  266.601897][T12825] 9pnet_virtio: no channels available for device syz
[  266.608755][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  266.629693][T12828] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=12828 comm=syz.2.1826
[  266.816396][   T42] audit: type=1400 audit(1787531292.475:7805): avc:  denied  { listen } for  pid=12842 comm="syz.6.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  266.836422][   T42] audit: type=1400 audit(1787531292.493:7806): avc:  denied  { accept } for  pid=12842 comm="syz.6.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  266.900151][T12852] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1834'.
[  266.993587][  T152] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  267.001904][T12858] jffs2: notice: (12858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  267.115392][T12872] 8021q: VLANs not supported on syzkaller0
[  267.159158][T12877] netlink: 'syz.7.1841': attribute type 49 has an invalid length.
[  267.167961][  T152] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  267.176466][  T152] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  267.179054][  T152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.182802][  T152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.186140][  T152] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  267.190206][  T152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.195296][  T152] usb 7-1: config 0 descriptor??
[  267.273310][   T42] audit: type=1400 audit(1787531292.905:7807): avc:  denied  { create } for  pid=12882 comm="syz.6.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  267.280932][   T42] audit: type=1400 audit(1787531292.905:7808): avc:  denied  { setopt } for  pid=12882 comm="syz.6.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  267.287767][T12883] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  267.410101][ T5530] usb 12-1: new high-speed USB device number 10 using dummy_hcd
[  267.418820][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.422773][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.425521][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.427996][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.430339][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.433622][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.436313][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.438794][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.441414][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.444162][  T152] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  267.479403][  T152] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  267.488526][  T152] usb 7-1: USB disconnect, device number 28
[  267.515352][T12900] fido_id[12900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory
[  267.571482][ T5530] usb 12-1: Using ep0 maxpacket: 8
[  267.572271][T12911] jffs2: notice: (12911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  267.575164][ T5530] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  267.582832][ T5530] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  267.584678][T12911] overlayfs: workdir and upperdir must reside under the same mount
[  267.585913][ T5530] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  267.596537][ T5530] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  267.604398][ T5530] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  267.607153][   T42] audit: type=1400 audit(1787531293.214:7809): avc:  denied  { write } for  pid=12910 comm="syz.6.1852" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.609202][ T5530] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  267.617875][   T42] audit: type=1400 audit(1787531293.214:7810): avc:  denied  { add_name } for  pid=12910 comm="syz.6.1852" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.622740][ T5530] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.631173][   T42] audit: type=1400 audit(1787531293.214:7811): avc:  denied  { read write open } for  pid=12910 comm="syz.6.1852" path="/264/file0/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  267.636112][T12914] input: syz0 as /devices/virtual/input/input26
[  267.682212][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'.
[  267.862042][ T5530] usb 12-1: usb_control_msg returned -32
[  267.865261][ T5530] usbtmc 12-1:16.0: can't read capabilities
[  268.455210][ T5530] usb 12-1: USB disconnect, device number 10
[  268.832624][T12940] binder: 12939:12940 ioctl c0306201 200000000040 returned -22
[  268.836035][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1860'.
[  268.842520][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1860'.
[  268.845367][T12940] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  269.099917][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1864'.
[  269.102908][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1864'.
[  269.105728][T12950] netlink: 'syz.7.1864': attribute type 12 has an invalid length.
[  269.225310][T12971] netlink: 'syz.2.1869': attribute type 1 has an invalid length.
[  269.237700][T12971] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.246238][T12971] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.251490][T12971] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  269.260152][T12971] bond1: (slave gre1): Error -95 calling set_mac_address
[  269.597869][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1874'.
[  269.604896][T12990] netlink: 'syz.2.1874': attribute type 10 has an invalid length.
[  269.647333][   T42] audit: type=1400 audit(1787531295.123:7812): avc:  denied  { shutdown } for  pid=12991 comm="syz.2.1875" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  270.124525][ T5846] usb 11-1: new high-speed USB device number 16 using dummy_hcd
[  270.289876][ T5743] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  270.305997][ T5846] usb 11-1: Using ep0 maxpacket: 16
[  270.311449][ T5846] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  270.317873][ T5846] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.318249][   T42] audit: type=1400 audit(1787531295.759:7813): avc:  denied  { lock } for  pid=13011 comm="syz.7.1882" path="/dev/qrtr-tun" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  270.322339][ T5846] usb 11-1: Product: syz
[  270.329229][ T5846] usb 11-1: Manufacturer: syz
[  270.330771][ T5846] usb 11-1: SerialNumber: syz
[  270.483677][T13022] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  270.504747][T13022] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  270.508107][T13022] overlayfs: failed to look up (tracing) for ino (-66)
[  270.551043][ T5846] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  270.555364][ T5846] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  270.555680][ T5743] Bluetooth: hci2: unexpected event for opcode 0x0c7b
[  270.558707][ T5846] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  270.558733][ T5846] usb 11-1: media controller created
[  270.564769][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  270.751073][T13038] CIFS: Attempting to mount //127.0.0.1/s�:e[�1�2haref�D�r=root
[  270.757700][T13038] CIFS: VFS: Error connecting to socket. Aborting operation.
[  270.760757][T13038] CIFS: VFS: cifs_mount failed w/return code = -22
[  270.801821][ T5846] zl10353_read_register: readreg error (reg=127, ret==-110)
[  270.816777][ T5846] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  270.820885][ T5846] usb 11-1: USB disconnect, device number 16
[  271.135704][T13048] __nla_validate_parse: 2 callbacks suppressed
[  271.135715][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'.
[  271.445353][T13094] 9p: Bad value for 'msize'
[  271.515917][T13088] Process accounting resumed
[  271.519495][T13103] tmpfs: User quota block hardlimit too large.
[  271.574119][T13109] trusted_key: encrypted_key: master key parameter is missing
[  271.580653][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'.
[  271.649402][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1905'.
[  271.652863][T13115] program syz.7.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  271.655980][T13115] ata1.00: non-matching transfer count (0/256)
[  271.776101][T13138] lo speed is unknown, defaulting to 1000
[  271.962271][ T5846] usb 11-1: new high-speed USB device number 17 using dummy_hcd
[  272.082229][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[  272.112009][   T56] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  272.123303][ T5846] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  272.127014][ T5846] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.130258][ T5846] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.136172][ T5846] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.138844][ T5846] usb 11-1: Product: syz
[  272.140175][ T5846] usb 11-1: Manufacturer: syz
[  272.141636][ T5846] usb 11-1: SerialNumber: syz
[  272.285511][   T56] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  272.290557][   T56] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  272.294311][   T56] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  272.297860][   T56] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  272.300687][   T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  272.304684][   T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  272.309977][   T56] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  272.312572][   T56] usb 7-1: Product: syz
[  272.313866][   T56] usb 7-1: Manufacturer: syz
[  272.322719][   T56] cdc_wdm 7-1:1.0: skipping garbage
[  272.324627][   T56] cdc_wdm 7-1:1.0: skipping garbage
[  272.327383][   T56] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device
[  272.329294][   T56] cdc_wdm 7-1:1.0: Unknown control protocol
[  273.014390][T13159] SET target dimension over the limit!
[  273.517407][T13167] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.520715][T13167] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.527599][T13170] netlink: 'syz.1.1922': attribute type 4 has an invalid length.
[  273.621011][T13167] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.625013][T13167] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.703068][T13167] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.706480][T13167] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.726970][   T10] usb 11-1: USB disconnect, device number 17
[  273.728130][ T5530] usb 7-1: USB disconnect, device number 29
[  273.777175][T13167] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.780522][T13167] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.800325][   T56] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  273.878315][T13181] vivid-004: disconnect
[  273.888240][T13181] xt_time: unknown flags 0x78
[  273.890340][T13180] vivid-004: reconnect
[  273.944982][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'.
[  273.975787][   T56] usb 6-1: Using ep0 maxpacket: 8
[  273.978880][   T56] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  273.985540][   T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  273.989786][   T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.994846][   T56] usb 6-1: config 0 descriptor??
[  273.999380][T13185] bond1: entered promiscuous mode
[  274.007157][T13185] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.046349][ T5584] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.053392][ T5584] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.076785][   T42] audit: type=1400 audit(1787531299.269:7814): avc:  denied  { write } for  pid=13195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.079469][ T5584] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.089270][ T5584] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.091987][ T5584] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.094575][ T5584] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.097157][ T5584] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.102033][ T5584] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.103268][T13199] input: syz0 as /devices/virtual/input/input27
[  274.112517][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1932'.
[  274.115659][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1932'.
[  274.122437][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'.
[  274.132956][   T42] audit: type=1400 audit(1787531299.325:7815): avc:  denied  { write } for  pid=13203 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.157299][T13199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13199 comm=syz.2.1931
[  274.157300][T13200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13200 comm=syz.2.1931
[  274.167703][T13207] SELinux: ebitmap: truncated map
[  274.169819][T13207] SELinux:  invalid class
[  274.177416][T13207] SELinux: failed to load policy
[  274.218693][   T56] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  274.220003][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.225587][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.231236][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.236285][T13214] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  274.242827][T13214] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  274.245097][   T42] audit: type=1400 audit(1787531299.428:7816): avc:  denied  { write } for  pid=13213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.248032][T13214] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  274.261064][T13214] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  274.267213][T13214] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  274.295570][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.297257][   T42] audit: type=1400 audit(1787531299.474:7817): avc:  denied  { write } for  pid=13218 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.298639][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.307931][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.311499][T13214] xfrm0 speed is unknown, defaulting to 1000
[  274.319201][   T42] audit: type=1400 audit(1787531299.493:7818): avc:  denied  { write } for  pid=13219 comm="syz.6.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  274.432774][T13233] program syz.2.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  274.462921][ T5530] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  274.469544][T13235] veth1_macvtap: left promiscuous mode
[  274.471267][T13235] macsec0: entered allmulticast mode
[  274.477089][T13235] veth1_macvtap: entered promiscuous mode
[  274.478931][T13235] veth1_macvtap: entered allmulticast mode
[  274.480853][T13235] macsec0: left allmulticast mode
[  274.482418][T13235] veth1_macvtap: left allmulticast mode
[  274.533301][   T42] audit: type=1400 audit(1787531299.699:7819): avc:  denied  { setattr } for  pid=13239 comm="syz.6.1942" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  274.575206][   T42] audit: type=1400 audit(1787531299.736:7820): avc:  denied  { read } for  pid=8509 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  274.581850][   T42] audit: type=1400 audit(1787531299.736:7821): avc:  denied  { open } for  pid=8509 comm="syz-executor" path="/280/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  274.623969][ T5530] usb 12-1: Using ep0 maxpacket: 16
[  274.626750][ T5530] usb 12-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=3f.86
[  274.631869][T13252] ieee802154 phy1 wpan1: encryption failed: -22
[  274.634771][ T5530] usb 12-1: config 3 has an invalid interface number: 190 but max is 0
[  274.639037][ T5530] usb 12-1: config 3 has no interface number 0
[  274.640955][ T5530] usb 12-1: config 3 interface 190 has no altsetting 0
[  274.651719][ T5530] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.654206][ T5530] usb 12-1: Product: syz
[  274.655624][ T5530] usb 12-1: Manufacturer: syz
[  274.658225][ T5530] usb 12-1: SerialNumber: syz
[  274.663897][ T5530] usb 12-1: rejected 1 configuration due to insufficient available bus power
[  274.672499][ T5530] usb 12-1: no configuration chosen from 1 choice
[  274.681602][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'.
[  274.989376][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.993930][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.002702][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.005443][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.014880][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.092890][T13269] nfs4: Unknown parameter '/dev/ublkb#'
[  275.144777][   T42] kauditd_printk_skb: 219 callbacks suppressed
[  275.144788][   T42] audit: type=1400 audit(1787531300.270:8023): avc:  denied  { getopt } for  pid=13275 comm="syz.2.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  275.208265][T13261] lo speed is unknown, defaulting to 1000
[  275.316068][ T5815] bridge_slave_1: left allmulticast mode
[  275.318067][ T5815] bridge_slave_1: left promiscuous mode
[  275.321099][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.404140][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.408076][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.411511][ T5815] bond0 (unregistering): Released all slaves
[  275.419116][ T5815] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  275.422475][ T5815] bond1 (unregistering): Released all slaves
[  275.430355][ T5815] bond2 (unregistering): Released all slaves
[  275.448846][T13261] xfrm0 speed is unknown, defaulting to 1000
[  275.547725][   T42] audit: type=1400 audit(1787531300.644:8024): avc:  denied  { write } for  pid=13291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  275.591488][ T5846] usb 6-1: USB disconnect, device number 17
[  275.636601][   T42] audit: type=1400 audit(1787531300.728:8025): avc:  denied  { write } for  pid=13298 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  275.668580][ T5440] 8021q: adding VLAN 0 to HW filter on device eth1
[  275.683798][T13261] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.686043][T13261] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.688269][T13261] bridge_slave_0: entered allmulticast mode
[  275.690872][T13261] bridge_slave_0: entered promiscuous mode
[  275.694243][T13261] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.696518][T13261] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.698723][T13261] bridge_slave_1: entered allmulticast mode
[  275.701248][T13261] bridge_slave_1: entered promiscuous mode
[  275.717209][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.721403][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.737899][T13261] team0: Port device team_slave_0 added
[  275.741171][T13261] team0: Port device team_slave_1 added
[  275.758086][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.761342][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.771548][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.775785][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.778085][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.785775][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.808768][   T42] audit: type=1400 audit(1787531300.887:8026): avc:  denied  { write } for  pid=13306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  275.828517][T13261] hsr_slave_0: entered promiscuous mode
[  275.830993][T13261] hsr_slave_1: entered promiscuous mode
[  275.862562][   T42] audit: type=1400 audit(1787531300.934:8027): avc:  denied  { write } for  pid=13309 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  275.926494][ T5440] 8021q: adding VLAN 0 to HW filter on device eth18
[  275.945455][ T5815] hsr_slave_0: left promiscuous mode
[  275.947589][ T5815] hsr_slave_1: left promiscuous mode
[  275.953877][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.957668][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.160677][T13312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1956'.
[  276.254394][   T42] audit: type=1400 audit(1787531301.309:8028): avc:  denied  { write } for  pid=13314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  276.259755][T13261] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  276.291581][T13261] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  276.297440][T13261] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  276.316947][   T42] audit: type=1400 audit(1787531301.365:8029): avc:  denied  { write } for  pid=13317 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  276.322975][T13261] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  276.326454][T13261] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  276.343103][T13261] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  276.348768][T13261] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  276.355239][T13261] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  276.404122][ T5440] 8021q: adding VLAN 0 to HW filter on device eth19
[  276.425409][T13261] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.427666][T13261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.430006][T13261] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.432163][T13261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.491850][   T42] audit: type=1400 audit(1787531301.524:8030): avc:  denied  { write } for  pid=13326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  276.515110][T13261] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.527442][T13082] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.531280][T13082] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.552292][   T42] audit: type=1400 audit(1787531301.589:8031): avc:  denied  { write } for  pid=13329 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  276.579748][T13261] 8021q: adding VLAN 0 to HW filter on device team0
[  276.586976][  T118] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.589226][  T118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.609812][ T5440] 8021q: adding VLAN 0 to HW filter on device eth20
[  276.618487][T13082] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.620758][T13082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.878142][   T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  276.901970][T13261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.049023][   T24] usb 6-1: Using ep0 maxpacket: 32
[  277.052377][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  277.052846][T13261] veth0_vlan: entered promiscuous mode
[  277.054868][   T24] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  277.060780][T13261] veth1_vlan: entered promiscuous mode
[  277.071036][   T24] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  277.073568][   T24] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  277.076104][   T24] usb 6-1: config 14 has no interface number 0
[  277.078016][   T24] usb 6-1: config 14 has no interface number 1
[  277.079936][   T24] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  277.083330][T13261] veth0_macvtap: entered promiscuous mode
[  277.087715][T13261] veth1_macvtap: entered promiscuous mode
[  277.091777][   T24] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  277.095884][T13261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.097545][   T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  277.104195][T13261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.113009][   T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  277.116563][   T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  277.119975][   T24] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  277.134501][   T24] usb 6-1: config 14 interface 57 has no altsetting 0
[  277.136637][   T24] usb 6-1: config 14 interface 228 has no altsetting 0
[  277.148173][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.150768][   T24] usb 6-1: Product: syz
[  277.152062][   T24] usb 6-1: Manufacturer: syz
[  277.154151][   T24] usb 6-1: SerialNumber: syz
[  277.203117][  T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.209022][  T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.210430][ T5743] Bluetooth: hci0: command tx timeout
[  277.225850][T13083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.228314][T13083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.242448][ T5816] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.248772][ T5816] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.256708][ T5816] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.262272][ T5816] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.445130][ T5820] usb 12-1: USB disconnect, device number 11
[  277.492758][T13366] macvlan2: entered promiscuous mode
[  277.504797][T13366] macvlan3: entered promiscuous mode
[  277.536353][T13366] macvlan4: entered promiscuous mode
[  277.545621][T13366] macvlan5: entered promiscuous mode
[  277.552490][T13366] macvlan6: entered promiscuous mode
[  277.566761][T13366] macvlan7: entered promiscuous mode
[  277.583457][T13366] macvlan8: entered promiscuous mode
[  277.592030][T13366] macvlan9: entered promiscuous mode
[  277.598727][T13366] macvlan10: entered promiscuous mode
[  277.602604][   T42] audit: type=1400 audit(1787531302.563:8032): avc:  denied  { getopt } for  pid=13374 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  277.603431][   T24] legousbtower 6-1:14.57: interrupt endpoints not found
[  277.619065][T13366] macvlan11: entered promiscuous mode
[  277.634223][T13366] macvlan12: entered promiscuous mode
[  277.661044][T13366] macvlan13: entered promiscuous mode
[  277.670197][T13366] macvlan14: entered promiscuous mode
[  277.677454][T13375] netlink: 'syz.2.1965': attribute type 2 has an invalid length.
[  277.688665][T13366] macvlan15: entered promiscuous mode
[  277.700342][T13366] macvlan16: entered promiscuous mode
[  277.724203][T13366] macvlan17: entered promiscuous mode
[  277.724632][T13375] netlink: 'syz.2.1965': attribute type 6 has an invalid length.
[  277.734660][T13366] macvlan18: entered promiscuous mode
[  277.755554][T13375] 8021q: adding VLAN 0 to HW filter on device macsec1
[  277.766348][T13366] macvlan19: entered promiscuous mode
[  277.770179][   T10] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  277.785493][T13366] macvlan20: entered promiscuous mode
[  277.803344][T13366] macvlan21: entered promiscuous mode
[  277.815939][T13366] macvlan22: entered promiscuous mode
[  277.830891][T13366] macvlan23: entered promiscuous mode
[  277.837173][T13366] macvlan24: entered promiscuous mode
[  277.846516][T13366] macvlan25: entered promiscuous mode
[  277.856301][T13366] macvlan26: entered promiscuous mode
[  277.863526][T13366] macvlan27: entered promiscuous mode
[  277.868327][T13366] macvlan28: entered promiscuous mode
[  277.873241][T13366] macvlan29: entered promiscuous mode
[  277.878088][T13366] macvlan30: entered promiscuous mode
[  277.887591][T13366] macvlan31: entered promiscuous mode
[  277.892314][T13366] macvlan32: entered promiscuous mode
[  277.898748][T13366] macvlan33: entered promiscuous mode
[  277.905328][T13366] macvlan34: entered promiscuous mode
[  278.034559][   T24] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  278.040863][   T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  278.343145][T13431] vlan2: entered allmulticast mode
[  278.344854][T13431] bridge_slave_0: entered allmulticast mode
[  278.507789][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1972'.
[  278.716026][  T152] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  278.847400][    C1] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-1)
[  278.850307][   T56] usb 6-1: USB disconnect, device number 18
[  278.860118][   T56] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected
[  278.898601][  T152] usb 13-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  278.904287][  T152] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  278.909362][  T152] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  278.914743][  T152] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.927014][  T152] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  278.929914][  T152] usb 13-1: Product: syz
[  278.931278][  T152] usb 13-1: Manufacturer: syz
[  278.942060][T13440] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  278.945175][  T152] garmin_gps 13-1:1.0: Garmin GPS usb/tty converter detected
[  278.960043][  T152] usb 13-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  279.273118][   T41] usb 13-1: USB disconnect, device number 2
[  279.279453][   T41] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  279.283126][   T41] garmin_gps 13-1:1.0: device disconnected
[  279.431985][ T5743] Bluetooth: hci0: command tx timeout
[  279.500384][T13451] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1
[  279.503134][T13451] Unsupported pkey algo: 106
[  279.631383][T13454] overlayfs: unescaped trailing colons in lowerdir mount option.
[  279.714753][T13456] futex_wake_op: syz.7.1977 tries to shift op by 32; fix this program
[  280.636398][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  280.636413][   T42] audit: type=1326 audit(1787531305.407:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.7.1978" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e199e0d9 code=0x7fc00000
[  280.677029][T13467] netlink: 'syz.7.1980': attribute type 29 has an invalid length.
[  280.687803][T13467] netlink: 'syz.7.1980': attribute type 29 has an invalid length.
[  280.690990][T13467] netlink: 'syz.7.1980': attribute type 29 has an invalid length.
[  280.853351][   T42] audit: type=1400 audit(1787531305.604:8036): avc:  denied  { name_connect } for  pid=13469 comm="syz.7.1981" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  281.292498][   T42] audit: type=1326 audit(1787531306.025:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.2.1986" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae29f9e0d9 code=0x0
[  281.546441][T13506] ip6erspan0: entered allmulticast mode
[  281.595961][T13508] binder: 13507:13508 ioctl c0306201 200000000100 returned -14
[  281.606622][T13508] Bluetooth: MGMT ver 1.23
[  281.654703][ T5741] Bluetooth: hci0: command tx timeout
[  281.723175][T13515] qnx4: unable to read the superblock
[  281.803296][T13520] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  281.878002][T13533] 8021q: VLANs not supported on team0
[  281.948109][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0ced
[  282.080956][T13559] 9p: Unknown Cache mode or invalid value f
[  282.131865][T13567] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2010'.
[  282.262168][T13586] tipc: New replicast peer: 172.30.0.2
[  282.264546][T13586] tipc: Enabled bearer <udp:syz2>, priority 10
[  282.323565][T13592] lo speed is unknown, defaulting to 1000
[  282.332742][T13596] 9pnet_virtio: no channels available for device syz
[  282.441626][T13606] gadgetfs: bound to dummy_udc driver
[  282.462726][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2021'.
[  282.484436][T13606] 8021q: adding VLAN 0 to HW filter on device bond1
[  282.488997][T13592] xfrm0 speed is unknown, defaulting to 1000
[  282.577503][T13615] openvswitch: netlink: Key 22 has unexpected len 76 expected 4
[  282.629003][T13623] ipt_REJECT: ECHOREPLY no longer supported.
[  282.634965][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.647177][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.653947][T13619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.665795][T13619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.694462][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.697024][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.700140][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.700269][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.743132][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.743756][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.746365][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2025'.
[  282.831605][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0c57
[  282.990554][   T42] audit: type=1400 audit(1787531307.616:8038): avc:  denied  { write } for  pid=13643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.064054][   T42] audit: type=1400 audit(1787531307.672:8039): avc:  denied  { write } for  pid=13646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.164119][T13655] netlink: 'syz.8.2034': attribute type 11 has an invalid length.
[  283.181962][   T42] audit: type=1400 audit(1787531307.784:8040): avc:  denied  { write } for  pid=13653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.203133][T13655] netlink: 'syz.8.2034': attribute type 4 has an invalid length.
[  283.213445][T13655] netlink: 'syz.8.2034': attribute type 4 has an invalid length.
[  283.240989][   T42] audit: type=1400 audit(1787531307.850:8041): avc:  denied  { write } for  pid=13658 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.252678][ T5820] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  283.418622][ T5820] usb 6-1: device descriptor read/64, error -71
[  283.650093][   T42] audit: type=1400 audit(1787531308.224:8042): avc:  denied  { write } for  pid=13660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.675573][ T5820] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  283.695800][   T42] audit: type=1400 audit(1787531308.271:8043): avc:  denied  { write } for  pid=13663 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.803177][ T5743] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  283.812003][   T42] audit: type=1400 audit(1787531308.374:8044): avc:  denied  { write } for  pid=13666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.827420][ T5820] usb 6-1: device descriptor read/64, error -71
[  283.902425][T13685] Mass Storage Function, version: 2009/09/11
[  283.908725][T13685] LUN: removable file: (no medium)
[  283.941535][ T5820] usb usb6-port1: attempt power cycle
[  283.974932][T13687] mass_storage.usb0/lun.0: unable to open backing file: n
[  284.010997][T13697] netlink: 'syz.7.2041': attribute type 18 has an invalid length.
[  284.016095][T13697] __nla_validate_parse: 4 callbacks suppressed
[  284.016104][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2041'.
[  284.021802][T13697] netlink: 'syz.7.2041': attribute type 18 has an invalid length.
[  284.024281][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2041'.
[  284.186880][T13703] smpboot: CPU 1 is now offline
[  284.315531][ T5820] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  284.337226][ T5820] usb 6-1: device descriptor read/8, error -71
[  284.358188][ T2329] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  284.477139][T13716] netlink: 'syz.7.2045': attribute type 21 has an invalid length.
[  284.479717][T13716] netlink: 'syz.7.2045': attribute type 22 has an invalid length.
[  284.482183][T13716] netlink: 'syz.7.2045': attribute type 23 has an invalid length.
[  284.484608][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2045'.
[  284.520044][ T2329] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  284.525111][ T2329] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.529469][ T2329] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.533527][ T2329] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  284.547280][ T2329] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.558607][ T2329] usb 13-1: config 0 descriptor??
[  284.593354][ T5820] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  284.628458][ T5820] usb 6-1: device descriptor read/8, error -71
[  284.743020][ T5820] usb usb6-port1: unable to enumerate USB device
[  284.815868][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2052'.
[  284.819070][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2052'.
[  284.821013][T13735] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  284.888267][T13737] kvm: kvm [13736]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  284.891653][T13737] kvm: kvm [13736]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  285.006670][ T2329] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  285.087999][T13743] loop4: detected capacity change from 0 to 2640
[  285.090334][T13743] buffer_io_error: 323 callbacks suppressed
[  285.090342][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.094624][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.097644][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.100246][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.102740][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.105163][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.107963][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.110552][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.113163][T13743] ldm_validate_partition_table(): Disk read failed.
[  285.115342][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.119115][T13743] Buffer I/O error on dev loop4, logical block 0, async page read
[  285.122301][T13743] Dev loop4: unable to read RDB block 0
[  285.124804][T13743]  loop4: unable to read partition table
[  285.127269][T13743] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  285.338697][T13441] usb 13-1: USB disconnect, device number 3
[  285.591526][T13773] device-mapper: ioctl: name not supplied when creating device
[  285.740248][T13779] usbcore.quirks: string doesn't fit in 127 chars.
[  285.785944][T13783] syz.7.2065 (13783): /proc/13774/oom_adj is deprecated, please use /proc/13774/oom_score_adj instead.
[  285.868089][T13785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2068'.
[  285.911202][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'.
[  285.950160][T13789] loop2: detected capacity change from 0 to 7
[  285.959347][T13789] Dev loop2: unable to read RDB block 7
[  285.961498][T13789]  loop2: AHDI p1 p2 p3
[  285.965803][T13789] loop2: partition table partially beyond EOD, truncated
[  285.968890][T13789] loop2: p1 start 1601398130 is beyond EOD, truncated
[  285.970966][T13789] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.001626][   T42] kauditd_printk_skb: 13 callbacks suppressed
[  286.001641][   T42] audit: type=1400 audit(1787531310.423:8057): avc:  denied  { append } for  pid=13790 comm="syz.2.2071" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  286.014043][ T5743] Bluetooth: hci2: unexpected event for opcode 0x203e
[  286.043238][ T5138] Dev loop2: unable to read RDB block 7
[  286.045099][ T5138]  loop2: AHDI p1 p2 p3
[  286.048453][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.052860][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.055694][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.196482][   T42] audit: type=1400 audit(1787531310.601:8058): avc:  denied  { write } for  pid=13804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.216701][ T5138] Dev loop2: unable to read RDB block 7
[  286.219119][ T5138]  loop2: AHDI p1 p2 p3
[  286.220727][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.223464][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.225900][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.239847][   T42] audit: type=1400 audit(1787531310.657:8059): avc:  denied  { write } for  pid=13807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.282128][ T5138] Dev loop2: unable to read RDB block 7
[  286.283932][ T5138]  loop2: AHDI p1 p2 p3
[  286.285420][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.287733][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.289788][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.313412][T13815] validate_nla: 4 callbacks suppressed
[  286.313423][T13815] netlink: 'syz.2.2075': attribute type 1 has an invalid length.
[  286.318504][T13815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2075'.
[  286.338291][ T5138] Dev loop2: unable to read RDB block 7
[  286.340339][ T5138]  loop2: AHDI p1 p2 p3
[  286.342260][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.344893][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.347160][T13817] 9pnet_virtio: no channels available for device syz
[  286.347941][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.406364][ T5138] Dev loop2: unable to read RDB block 7
[  286.408794][ T5138]  loop2: AHDI p1 p2 p3
[  286.412819][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.416103][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.419055][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.480145][ T5138] Dev loop2: unable to read RDB block 7
[  286.486210][ T5138]  loop2: AHDI p1 p2 p3
[  286.488824][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.491255][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.493400][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.551639][ T5743] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  286.583804][ T5138] Dev loop2: unable to read RDB block 7
[  286.585579][ T5138]  loop2: AHDI p1 p2 p3
[  286.586897][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.589148][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.591296][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.695537][ T5138] Dev loop2: unable to read RDB block 7
[  286.697403][ T5138]  loop2: AHDI p1 p2 p3
[  286.704757][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.711326][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.716391][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.740290][T13846] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  286.774974][ T5138] Dev loop2: unable to read RDB block 7
[  286.779381][ T5138]  loop2: AHDI p1 p2 p3
[  286.780687][ T5138] loop2: partition table partially beyond EOD, truncated
[  286.786540][ T5138] loop2: p1 start 1601398130 is beyond EOD, truncated
[  286.791045][ T5138] loop2: p2 start 1702059890 is beyond EOD, truncated
[  286.861646][T13084] Bluetooth: hci4: Frame reassembly failed (-84)
[  287.041499][T13860] ipvlan2: entered allmulticast mode
[  287.043463][T13860] batadv_slave_1: entered allmulticast mode
[  287.049775][T13860] batman_adv: batadv0: Adding interface: ipvlan2
[  287.052537][T13860] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.060390][T13860] batman_adv: batadv0: Interface activated: ipvlan2
[  287.194046][T13865] netlink: 'syz.8.2091': attribute type 1 has an invalid length.
[  287.309826][   T42] audit: type=1400 audit(1787531311.659:8060): avc:  denied  { mounton } for  pid=13866 comm="syz.8.2092" path="/proc/75/task" dev="proc" ino=67403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  287.523981][T13875] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13875 comm=syz.8.2095
[  287.662072][T13885] xt_cluster: node mask cannot exceed total number of nodes
[  287.733843][T13881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  287.775849][T13893] openvswitch: netlink: Unknown key attributes 1
[  287.779095][T13895] openvswitch: netlink: Unknown key attributes 1
[  287.961218][   T42] audit: type=1400 audit(1787531312.267:8061): avc:  denied  { write } for  pid=13902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.025761][   T42] audit: type=1400 audit(1787531312.323:8062): avc:  denied  { write } for  pid=13907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.150650][T13915] 9pnet_virtio: no channels available for device syz
[  288.155795][   T42] audit: type=1400 audit(1787531312.445:8063): avc:  denied  { write } for  pid=13912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.210839][   T42] audit: type=1400 audit(1787531312.491:8064): avc:  denied  { write } for  pid=13918 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.277902][T13922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2108'.
[  288.359024][T13928] 9pnet_virtio: no channels available for device syz
[  288.395870][   T42] audit: type=1400 audit(1787531312.669:8065): avc:  denied  { write } for  pid=13930 comm="syz.1.2111" name="functions" dev="configfs" ino=12764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.408442][T13931] file system registered
[  288.412717][T13931] nilfs2: Unknown parameter 'barriersb_gadget/g1'
[  288.430393][   T42] audit: type=1400 audit(1787531312.707:8066): avc:  denied  { mount } for  pid=13930 comm="syz.1.2111" name="/" dev="functionfs" ino=67959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[  288.461603][ T5749] ffs_data_put(): freeing
[  288.826203][T13944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  288.888681][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2116'.
[  288.896011][T13950] gadgetfs: bound to dummy_udc driver
[  288.912605][T13950] sch_tbf: peakrate 2048 is lower than or equals to rate 6643574396658758839 !
[  288.925940][T13956] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  288.932665][T13956] cramfs: wrong magic
[  289.006724][ T5741] Bluetooth: hci4: command 0x1003 tx timeout
[  289.007105][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  289.023591][T13969] netlink: 'syz.1.2122': attribute type 29 has an invalid length.
[  289.131572][T13972] netlink: 'syz.8.2123': attribute type 3 has an invalid length.
[  289.307803][T13993] kvm: kvm [13992]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  289.319936][T13993] kvm: kvm [13992]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  289.485488][T13983] syz.2.2125 (13983): drop_caches: 2
[  289.635652][T14010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2131'.
[  290.044532][T14028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2135'.
[  290.080835][T14031] xt_bpf: check failed: parse error
[  290.251787][T14043] 9pnet_virtio: no channels available for device syz
[  290.294890][T14041] md: array md0 already has disks!
[  290.356059][T14041] md: invalid raid superblock magic on ram1
[  290.369211][T14041] md: ram1 does not have a valid v0.0 superblock, not importing!
[  290.371981][T14041] md: md_import_device returned -22
[  290.684304][ T5846] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  290.876858][ T5846] usb 7-1: Using ep0 maxpacket: 8
[  290.879022][ T5846] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  290.885653][ T5846] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5
[  290.891553][ T5846] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  290.897310][ T5846] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  290.903039][ T5846] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800
[  290.908519][ T5846] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.915143][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.139567][ T5846] usb 7-1: GET_CAPABILITIES returned 0
[  291.141274][ T5846] usbtmc 7-1:16.0: can't read capabilities
[  291.414530][T14059] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  291.454144][T11662] usb 7-1: USB disconnect, device number 30
[  291.485386][  T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.492170][  T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.636551][ T5741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  291.643851][ T5741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  291.653186][ T5741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  291.656016][ T5741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  291.660823][ T5741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  291.766380][T10209] syz_tun (unregistering): left allmulticast mode
[  291.769642][T10209] syz_tun (unregistering): left promiscuous mode
[  291.771687][T10209] bridge0: port 1(syz_tun) entered disabled state
[  291.941877][T14087] lo speed is unknown, defaulting to 1000
[  292.070223][T14087] xfrm0 speed is unknown, defaulting to 1000
[  292.118501][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  292.155397][T14111] bond2: Invalid ad_actor_system MAC address.
[  292.159313][T14111] bond2: option ad_actor_system: invalid value (65541)
[  292.163485][T14111] bond2 (unregistering): Released all slaves
[  292.269658][   T42] kauditd_printk_skb: 21 callbacks suppressed
[  292.269669][   T42] audit: type=1326 audit(1787531316.291:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.287121][   T42] audit: type=1326 audit(1787531316.291:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.287146][   T42] audit: type=1326 audit(1787531316.291:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.287169][   T42] audit: type=1326 audit(1787531316.291:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.332290][   T42] audit: type=1326 audit(1787531316.291:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.347145][   T42] audit: type=1326 audit(1787531316.291:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.361923][   T42] audit: type=1326 audit(1787531316.291:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.383444][   T42] audit: type=1326 audit(1787531316.291:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.390504][T14087] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.394385][   T42] audit: type=1326 audit(1787531316.291:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.395698][T14087] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.403846][T14087] bridge_slave_0: entered allmulticast mode
[  292.407271][T14087] bridge_slave_0: entered promiscuous mode
[  292.410962][T14087] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.413196][T14087] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.415826][   T42] audit: type=1326 audit(1787531316.291:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.8.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189039e0d9 code=0x7ffc0000
[  292.423381][T14087] bridge_slave_1: entered allmulticast mode
[  292.425931][T14087] bridge_slave_1: entered promiscuous mode
[  292.435165][T14122] syzkaller0: entered promiscuous mode
[  292.439452][T14122] syzkaller0: entered allmulticast mode
[  292.464727][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.504772][T14136] SELinux:  Context system_u:object_r: is not valid (left unmapped).
[  292.505384][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.552479][T14087] team0: Port device team_slave_0 added
[  292.592838][T14087] team0: Port device team_slave_1 added
[  292.636760][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.636771][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.636785][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.637743][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.637751][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.637765][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.692479][T14087] hsr_slave_0: entered promiscuous mode
[  292.696160][T14087] hsr_slave_1: entered promiscuous mode
[  292.696529][T14087] debugfs: 'hsr0' already exists in 'hsr'
[  292.696540][T14087] Cannot create hsr debugfs directory
[  292.698421][T14144] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  292.698421][T14144] 
[  292.798560][ T5440] 8021q: adding VLAN 0 to HW filter on device eth21
[  293.115089][ T5815] dvmrp0: left allmulticast mode
[  293.122147][ T5815] pimreg: left allmulticast mode
[  293.312213][ T5815] bond7 (unregistering): (slave geneve4): Releasing active interface
[  293.320619][ T5815] bond5 (unregistering): (slave geneve3): Releasing active interface
[  293.380039][ T5815] bond0 (unregistering): Released all slaves
[  293.386133][ T5815] bond1 (unregistering): Released all slaves
[  293.405487][ T5815] bond2 (unregistering): Released all slaves
[  293.433661][ T5815] bond3 (unregistering): Released all slaves
[  293.445284][ T5815] bond4 (unregistering): Released all slaves
[  293.461367][ T5815] bond5 (unregistering): Released all slaves
[  293.469652][ T5815] bond6 (unregistering): Released all slaves
[  293.482381][ T5815] bond7 (unregistering): Released all slaves
[  293.494343][ T5815] bond8 (unregistering): Released all slaves
[  293.507041][ T5815] bond9 (unregistering): Released all slaves
[  293.581713][ T5440] 8021q: adding VLAN 0 to HW filter on device eth22
[  293.810283][ T5815] tipc: Disabling bearer <udp:syz0>
[  293.830280][ T5815] tipc: Disabling bearer <eth:team0>
[  293.832508][ T5815] tipc: Disabling bearer <udp:syz2>
[  293.834736][ T5815] tipc: Left network mode
[  293.890275][ T5743] Bluetooth: hci4: command tx timeout
[  294.000064][ T5815] IPVS: stopping backup sync thread 12715 ...
[  294.384230][ T5440] 8021q: adding VLAN 0 to HW filter on device eth25
[  294.412648][T14087] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  294.428303][T14087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  294.443238][T14087] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  294.455488][T14087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  294.466330][T14087] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  294.504900][T14087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  294.515033][T14087] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  294.522183][T14087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  294.680604][T14087] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.690002][T14087] 8021q: adding VLAN 0 to HW filter on device team0
[  294.719208][T13076] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.721593][T13076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.747423][T13076] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.749855][T13076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.203614][T13082] smc: removing ib device s
z1
[  295.233124][T13082] smbdirect: ib_dev[s
z1] removed
[  295.244716][T13082] ------------[ cut here ]------------
[  295.247130][T13082] cq->cqe_used
[  295.247142][T13082] WARNING: drivers/infiniband/core/cq.c:370 at ib_cq_pool_cleanup+0x248/0x370, CPU#0: kworker/u33:37/13082
[  295.253700][T13082] Modules linked in:
[  295.257710][T13082] CPU: 0 UID: 0 PID: 13082 Comm: kworker/u33:37 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.262360][T13082] Tainted: [L]=SOFTLOCKUP
[  295.264123][T13082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  295.268189][T13082] Workqueue: ib-unreg-wq ib_unregister_work
[  295.271396][T13082] RIP: 0010:ib_cq_pool_cleanup+0x248/0x370
[  295.273815][T13082] Code: 47 f9 41 83 fe 03 0f 85 01 fe ff ff e8 31 2e 47 f9 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 19 2e 47 f9 90 <0f> 0b 90 eb 84 e8 ce 01 ba f9 e9 67 ff ff ff 48 8b 34 24 48 c7 c7
[  295.281524][T13082] RSP: 0018:ffffc90003d7fac8 EFLAGS: 00010293
[  295.283820][T13082] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  295.286802][T13082] RDX: ffff88803609cb00 RSI: ffffffff88c3d3b7 RDI: ffff88803609cb00
[  295.289270][T13082] RBP: ffff88802e491000 R08: 0000000000000005 R09: 0000000000000000
[  295.292041][T13082] R10: 0000000000000804 R11: 0000000000000001 R12: ffff88802e491840
[  295.294467][T13082] R13: ffff8880138dce90 R14: 0000000000000804 R15: ffff88802e491800
[  295.296957][T13082] FS:  0000000000000000(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000
[  295.300326][T13082] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.304832][T13082] CR2: 00007f09326af260 CR3: 0000000060b2a000 CR4: 0000000000352ef0
[  295.307756][T13082] Call Trace:
[  295.308996][T13082]  <TASK>
[  295.310052][T13082]  ? remove_client_context+0x108/0x120
[  295.312018][T13082]  disable_device+0x161/0x280
[  295.313590][T13082]  ? __pfx_disable_device+0x10/0x10
[  295.315261][T13082]  ? reacquire_held_locks+0xce/0x1e0
[  295.317043][T13082]  __ib_unregister_device+0x2b4/0x480
[  295.318761][T13082]  ? process_one_work+0x906/0x1b10
[  295.320392][T13082]  ? process_one_work+0x906/0x1b10
[  295.322093][T13082]  ib_unregister_work+0x19/0x30
[  295.323757][T13082]  process_one_work+0xac7/0x1b10
[  295.325638][T13082]  ? __pfx_process_one_work+0x10/0x10
[  295.327361][T13082]  ? __pfx_ib_unregister_work+0x10/0x10
[  295.329242][T13082]  worker_thread+0x5ef/0xe50
[  295.330710][T13082]  ? kthread+0x13a/0x450
[  295.332041][T13082]  ? __pfx_worker_thread+0x10/0x10
[  295.334390][T13082]  kthread+0x373/0x450
[  295.335687][T13082]  ? __pfx_kthread+0x10/0x10
[  295.337116][T13082]  ret_from_fork+0x730/0xd60
[  295.338563][T13082]  ? __pfx_ret_from_fork+0x10/0x10
[  295.340141][T13082]  ? __switch_to+0x800/0x10f0
[  295.341506][T13082]  ? __pfx_kthread+0x10/0x10
[  295.342914][T13082]  ret_from_fork_asm+0x1a/0x30
[  295.344478][T13082]  </TASK>
[  295.345453][T13082] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  295.347728][T13082] CPU: 0 UID: 0 PID: 13082 Comm: kworker/u33:37 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.351116][T13082] Tainted: [L]=SOFTLOCKUP
[  295.352445][T13082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  295.355532][T13082] Workqueue: ib-unreg-wq ib_unregister_work
[  295.357343][T13082] Call Trace:
[  295.358386][T13082]  <TASK>
[  295.359294][T13082]  dump_stack_lvl+0x100/0x190
[  295.360745][T13082]  vpanic+0x553/0x970
[  295.361980][T13082]  ? __pfx_vpanic+0x10/0x10
[  295.363383][T13082]  panic+0xd1/0xe0
[  295.364546][T13082]  ? __pfx_panic+0x10/0x10
[  295.365952][T13082]  check_panic_on_warn.cold+0x19/0x34
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  295.367620][T13082]  ? ib_cq_pool_cleanup+0x248/0x370
[  295.369346][T13082]  __warn.cold+0x191/0x318
[  295.370736][T13082]  __report_bug+0x30f/0x440
[  295.372145][T13082]  ? ib_cq_pool_cleanup+0x248/0x370
[  295.373734][T13082]  ? __pfx___report_bug+0x10/0x10
[  295.375284][T13082]  ? mark_held_locks+0x40/0x70
[  295.376762][T13082]  ? ib_cq_pool_cleanup+0x248/0x370
[  295.378369][T13082]  report_bug+0xb3/0x220
[  295.379695][T13082]  ? ib_cq_pool_cleanup+0x248/0x370
[  295.381284][T13082]  handle_bug+0x16a/0x2a0
[  295.382629][T13082]  exc_invalid_op+0x17/0x50
[  295.384054][T13082]  asm_exc_invalid_op+0x1a/0x20
[  295.385574][T13082] RIP: 0010:ib_cq_pool_cleanup+0x248/0x370
[  295.387375][T13082] Code: 47 f9 41 83 fe 03 0f 85 01 fe ff ff e8 31 2e 47 f9 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 19 2e 47 f9 90 <0f> 0b 90 eb 84 e8 ce 01 ba f9 e9 67 ff ff ff 48 8b 34 24 48 c7 c7
[  295.393179][T13082] RSP: 0018:ffffc90003d7fac8 EFLAGS: 00010293
[  295.395049][T13082] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  295.397481][T13082] RDX: ffff88803609cb00 RSI: ffffffff88c3d3b7 RDI: ffff88803609cb00
[  295.400034][T13082] RBP: ffff88802e491000 R08: 0000000000000005 R09: 0000000000000000
[  295.402454][T13082] R10: 0000000000000804 R11: 0000000000000001 R12: ffff88802e491840
[  295.404870][T13082] R13: ffff8880138dce90 R14: 0000000000000804 R15: ffff88802e491800
[  295.407294][T13082]  ? ib_cq_pool_cleanup+0x247/0x370
[  295.408929][T13082]  ? ib_cq_pool_cleanup+0x247/0x370
[  295.410568][T13082]  ? remove_client_context+0x108/0x120
[  295.412250][T13082]  disable_device+0x161/0x280
[  295.413707][T13082]  ? __pfx_disable_device+0x10/0x10
[  295.415334][T13082]  ? reacquire_held_locks+0xce/0x1e0
[  295.416990][T13082]  __ib_unregister_device+0x2b4/0x480
[  295.418668][T13082]  ? process_one_work+0x906/0x1b10
[  295.420245][T13082]  ? process_one_work+0x906/0x1b10
[  295.421785][T13082]  ib_unregister_work+0x19/0x30
[  295.423272][T13082]  process_one_work+0xac7/0x1b10
[  295.424811][T13082]  ? __pfx_process_one_work+0x10/0x10
[  295.426553][T13082]  ? __pfx_ib_unregister_work+0x10/0x10
[  295.428381][T13082]  worker_thread+0x5ef/0xe50
[  295.429813][T13082]  ? kthread+0x13a/0x450
[  295.431120][T13082]  ? __pfx_worker_thread+0x10/0x10
[  295.432728][T13082]  kthread+0x373/0x450
[  295.434030][T13082]  ? __pfx_kthread+0x10/0x10
[  295.435630][T13082]  ret_from_fork+0x730/0xd60
[  295.437217][T13082]  ? __pfx_ret_from_fork+0x10/0x10
[  295.439125][T13082]  ? __switch_to+0x800/0x10f0
[  295.440707][T13082]  ? __pfx_kthread+0x10/0x10
[  295.442413][T13082]  ret_from_fork_asm+0x1a/0x30
[  295.444103][T13082]  </TASK>
[  295.445793][T13082] Kernel Offset: disabled
[  295.447352][T13082] Rebooting in 86400 seconds..