last executing test programs:

2m28.540453079s ago: executing program 3 (id=666):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1)
mkdir(&(0x7f0000000000)='./bus\x00', 0x84)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000280)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x1400)
unlink(&(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000080004400000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85})
r5 = syz_io_uring_setup(0x7385, &(0x7f00000000c0)={0x0, 0xd101, 0x4, 0x2, 0x23a}, &(0x7f0000000040), &(0x7f0000000200))
r6 = getpid()
syz_pidfd_open(r6, 0x0)
fcntl$lock(r5, 0x24, &(0x7f0000000240)={0x0, 0x3, 0x7, 0x7, r6})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x480c2)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x11)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000180)=0xd0)
ioctl$VT_ACTIVATE(r7, 0x5606, 0x6)

2m28.309085401s ago: executing program 3 (id=668):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x254802, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448)

2m28.241248698s ago: executing program 3 (id=669):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x1e)
listen(r0, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000280)={@void, @void, @eth={@remote, @local, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x81}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102}}}}}}, 0x2a)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f00000001c0)={0x1f, @none}, 0x8)
listen(r4, 0xf)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$DRM_IOCTL_VERSION(r6, 0xc0406400, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x2b00, r6, 0xad2592342bd175bc})

2m28.0911847s ago: executing program 3 (id=670):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94, 0x600}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

2m28.090357259s ago: executing program 3 (id=672):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000080)=0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netpci0\x00'})
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x180, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4}, {0xe, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100000d}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0xa8, 0x8, 0x2, 0x7, 0x85ae, 0x3}}, {0xa, 0x2, [0xf400, 0x40, 0x3]}}, {{0x1c, 0x1, {0x94, 0x2, 0x13a, 0x6, 0x2, 0x7f, 0x7, 0x3}}, {0xa, 0x2, [0x5, 0x0, 0x7]}}, {{0x1c, 0x1, {0x42, 0xf2, 0x0, 0x0, 0x1, 0x8, 0x3, 0x5}}, {0xe, 0x2, [0x1d, 0x40, 0x3ff, 0x2, 0x5]}}, {{0x1c, 0x1, {0xc, 0xc, 0x3, 0x3ff, 0x0, 0xb, 0x80000000, 0x3}}, {0xa, 0x2, [0x1f, 0x0, 0x7]}}, {{0x1c, 0x1, {0x7, 0xb, 0x5, 0x4, 0x2, 0x7, 0xffff, 0x8}}, {0x14, 0x2, [0x3, 0x800, 0x10, 0x3, 0xf, 0x3, 0x2, 0x3]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x4891, 0x1, 0x2, 0x1, 0x2}}, {0x8, 0x2, [0x200, 0x8762]}}, {{0x1c, 0x1, {0x6b, 0x0, 0x6, 0x76, 0x1, 0x4, 0xb, 0x4}}, {0xc, 0x2, [0x8, 0x8, 0x78, 0x5]}}, {{0x1c, 0x1, {0x8, 0x9, 0x120, 0xffffff5e, 0x1, 0x10000, 0x8001, 0x2}}, {0x8, 0x2, [0x2, 0xb41]}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

2m27.851092773s ago: executing program 3 (id=675):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[<r1=>0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, 0x1, 0x3, 0x2}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={<r2=>0x0}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={r1, 0x8, 0x341, 0x81, 0x0, [0x0, 0x0, r2, r3], [0x671, 0x1, 0x6, 0x80], [0x9, 0xd, 0x48000, 0x4], [0xffffffff, 0x4, 0x3ff, 0x3]}) (async)
r4 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'tunl0\x00', &(0x7f00000008c0)={'gretap0\x00', <r6=>r5, 0x700, 0x7, 0xbb, 0x4, {{0x21, 0x4, 0x1, 0x25, 0x84, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x1d, 0x1, [{0x5, 0x8, "d2ec381abea4"}, {0x1, 0xf, "806163cabf914088acfbe50d9c"}]}, @generic={0x89, 0xe, "548149f7881a71be9dada8d4"}, @rr={0x7, 0x17, 0x33, [@multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @local, @loopback, @broadcast]}, @rr={0x7, 0xf, 0x6e, [@broadcast, @broadcast, @remote]}, @cipso={0x86, 0xc, 0x1, [{0x7, 0x6, "e509830e"}]}, @generic={0x94, 0x2}, @lsrr={0x83, 0xf, 0x2a, [@multicast1, @rand_addr=0x64010102, @loopback]}]}}}}})
sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="b74e67d52d52e3be6f14e3474175a14853ced32ea0d25c905353a20726f72c69dc12d421fcc2e4", 0x27}, {&(0x7f0000000300)="e33cdd5899bd68b9310d80868f5766233323a5e2eff8e52528cd53cfe9c6747093143ceac9d096987a33633bea61f97943c8c43313cf41068371ae6174e69df25ddd1479122405d5ecc060a1cad695573fb9deae2067108f8c111a5f53dca5e93a1c331549e578faa92d90c92161e3fd386049034f2fcf808ee3ffc22696cf6cafb3d40a9e753b0fee", 0x89}, {&(0x7f00000003c0)="99828b7e33fa05cc8e4fba2c48e41116850fa152c8db4b2c755564bf5a7a28455fb7a0b720bcd2d898cb772167ee6b8bedc72146f6a559052302a9669787027c817dbbc629ff978105aa9114a3614e6e4655b65e5e2305afc83c4de80ab34a24867cc05378cedf471b58a8e41a7d7665ea6bf3c3655fc4948c13782438a9f85b36ab44e228d635651f651ee8f07d44c2ba40e5b5bd75a2fa02", 0x99}, {&(0x7f0000000480)="514fd9e7e362763e617abf4118a5c43ba6821c4ee40d8fb9944610a03f6f42be368b29883717626898709ce21fc2cfcc41c1dd21e862aa4d1c59a7cf22e8328fcb6ed18ee15aa8d1c8865438c02051988969e0fd98ad2c136caa7a8f27c7a313edfb2430290bf729ea", 0x69}, {&(0x7f0000000500)="d734a096630a3b1eaccbb874d5ab5d0822feec", 0x13}, {&(0x7f0000000540)="b081665b58e824ef0f136e82dcfdf9920cbe792271a3622edecab9086339b84f65c50fb15d2659b6e4a7d83ccc9f", 0x2e}, {&(0x7f0000000580)="1f8ff82653530b930d82a2a1ce08b0c35d52e481b5376a5915005cb5c36b0bcb3bf6e6f153c6b37acaea8517b9e88ca9c3cc76aab010e71cf911977a3d5085c7d36c6053a87a43b0853b8b5970e314cad80318c360996956c022b9c8a43e7fa1bda653765985a2ef618a6b73976a475479df386032c1bb3e3c091b8217df334e0eafc0a145a475c8359f887c01dac2476d784f86dd71c23b96c7070d5a5d1f3dbb5555cb3be504711d0957b9cccceda4ca5e922770dc30de8d5e69ce27849b5d9816c7fe5407ffc0a737dc098c57c4ab06f54122f82eb4597e", 0xd9}, {&(0x7f0000000680)="796a228d045d0b449304570559f9e77c862a895c2e205d20aa04ac312ef98989f11db7128b5cde1e0dd92ec1831d134cbaf6c32072a11a77594d59d8215c3dcfe9b21ac6486df3364a908297cf6a651c103d93512af2979d120f998c129662a77fa75317978aeebda0556aed3ffcbbfe12c55201485128277da712c4b62fcc9ffcd23283102dba7721849e181e", 0x8d}, {&(0x7f0000000740)="d35889a4283a67a7ee2764ea0bba334f8e15e1ac3fe5d3fcc591864fcb508140bac1d88e85b9f4a3c91cd9dbe89bbe716c7f1f8402ae5d04445214bc3d1005705fa93707211dcb932db5a54689c2cd925f4ee83b89d7ee4cbbb6ecd01efda12805b2ae2395b0792f96c4a4e1df6907a94b4d35e594689f8f3e51d6837b66a2c359e73cb16e5e05dc0d19598fc57a4a7f05ef0b86f5dc4d718c557e3b59f59d9c76ed", 0xa2}], 0x9, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x80}, 0x41004) (async)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a80)={0x7, 0x2, 0x4, 0x2, 0x6, 0xffff92f3, 0xa})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000bc0)=@buf={0xd1, &(0x7f0000000ac0)="c9d4615d7c8528ba4dc373defdc82bfa003023ac1e7e97c370a12f4eb733ad3eca062fb4c5373851948c32552f67732fd9779aee7c1d61dc85e442d1fd230d8a432fd2838fe313f10187045a25429293423cc6c7d1509aac023983742f141c834c7dbab1c10444c579de53e346eebefeb295c7c0795c7b3a79e0c78675c7f81cdbade7757540d95288a2929850bce733d015bdcb7d4ff3d4a657804715d15657f76759143966af9265342e1daed4d5bf743a8d52083aebc977cf35df8a78332c6db4e9f380811d0d97365a05a1769e9fa5"})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000c00)={<r7=>0x0}, &(0x7f0000000c40)=0xc)
syz_open_procfs$namespace(r7, &(0x7f0000000c80)='ns/cgroup\x00') (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d40)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', <r8=>r6, 0x40, 0x1, 0xfffffe00, 0xa, {{0x8, 0x4, 0x3, 0x2e, 0x20, 0x68, 0x0, 0x2, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x99, [@rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xe8, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000f00)={0x2, @vbi={0x1, 0x9, 0x4867, 0x47314356, [0x81, 0x7bf162c8], [0x3, 0x7], 0x13a}})
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x65da}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r10 = open$dir(&(0x7f0000001140)='./file0\x00', 0x1a1a01, 0x0)
r11 = openat$incfs(r10, &(0x7f0000001180)='.pending_reads\x00', 0x800, 0x50)
mkdirat(r11, &(0x7f00000011c0)='./file1\x00', 0x88) (async)
ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, &(0x7f0000001240)={0x1, 0x18, [0x6, 0x4, 0x1, 0x5], &(0x7f0000001200)=[0x0, 0x0, 0x0]})
setxattr$trusted_overlay_origin(&(0x7f0000001280)='./file1\x00', &(0x7f00000012c0), &(0x7f0000001300), 0x2, 0x3) (async)
r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000013c0)=@o_path={&(0x7f0000001340)='./file0\x00', r12, 0x4000, r11}, 0x18) (async)
r13 = syz_open_dev$ndb(&(0x7f0000001400), 0x0, 0x10000)
ioctl$BLKRAGET(r13, 0x1263, &(0x7f0000001440)) (async)
openat$cgroup_ro(r0, &(0x7f0000001480)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f00000014c0), 0x80) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001500))
ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000001540)={r13, 0x0, 0x3, 0xf32})

2m18.481447144s ago: executing program 1 (id=771):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x8dff, 0x0, r1, &(0x7f0000000000)='e', 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x66, r1, 0x0, 0x0, 0x8, 0x0, 0x1}])
sendmmsg$alg(r1, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="00c9", 0x2}], 0x1}], 0x1, 0x1)

2m18.321026559s ago: executing program 1 (id=772):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x4, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x100, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x4, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r1, 0x5501)
close(0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r4, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r0}, 0x38)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10201, 0x0, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x8, 0x70bd28, 0x25dfdbfe, {0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000054)

2m18.248037951s ago: executing program 1 (id=774):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r3, 0xd}, &(0x7f0000000040)=0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008d5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r3, 0xd}, &(0x7f0000000040)=0x8) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008d5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) (async)

2m18.191146343s ago: executing program 1 (id=776):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7f, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='zonefs\x00', 0x204001, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x6, &(0x7f0000000200)=""/59, &(0x7f0000000000)=0x3b)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2140c0, 0x38)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0)
landlock_restrict_self(r4, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

2m18.141206854s ago: executing program 1 (id=777):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x207d, 0x6ae0})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x9, @pix_mp={0x9, 0x7, 0x38414261, 0x6, 0x0, [{0xd732, 0x22}, {0x7ff, 0x6}, {0xfff, 0x7ff}, {0x101, 0xc2}, {0xfb2, 0x1}, {0x9, 0x4}, {0x10001, 0x8}, {0x8, 0xfffffff8}], 0xff, 0x3, 0x1, 0x2, 0x3}})
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r2, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))
sendto$inet6(r2, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000240)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x5, '\x00', @p_u32=0x0}})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}, {0x6, 0xc1, 0x6, 0x406}]}, 0x10)

2m12.840463038s ago: executing program 32 (id=675):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[<r1=>0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x1, 0x1, 0x3, 0x2}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={<r2=>0x0}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={r1, 0x8, 0x341, 0x81, 0x0, [0x0, 0x0, r2, r3], [0x671, 0x1, 0x6, 0x80], [0x9, 0xd, 0x48000, 0x4], [0xffffffff, 0x4, 0x3ff, 0x3]}) (async)
r4 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'tunl0\x00', &(0x7f00000008c0)={'gretap0\x00', <r6=>r5, 0x700, 0x7, 0xbb, 0x4, {{0x21, 0x4, 0x1, 0x25, 0x84, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x1d, 0x1, [{0x5, 0x8, "d2ec381abea4"}, {0x1, 0xf, "806163cabf914088acfbe50d9c"}]}, @generic={0x89, 0xe, "548149f7881a71be9dada8d4"}, @rr={0x7, 0x17, 0x33, [@multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @local, @loopback, @broadcast]}, @rr={0x7, 0xf, 0x6e, [@broadcast, @broadcast, @remote]}, @cipso={0x86, 0xc, 0x1, [{0x7, 0x6, "e509830e"}]}, @generic={0x94, 0x2}, @lsrr={0x83, 0xf, 0x2a, [@multicast1, @rand_addr=0x64010102, @loopback]}]}}}}})
sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="b74e67d52d52e3be6f14e3474175a14853ced32ea0d25c905353a20726f72c69dc12d421fcc2e4", 0x27}, {&(0x7f0000000300)="e33cdd5899bd68b9310d80868f5766233323a5e2eff8e52528cd53cfe9c6747093143ceac9d096987a33633bea61f97943c8c43313cf41068371ae6174e69df25ddd1479122405d5ecc060a1cad695573fb9deae2067108f8c111a5f53dca5e93a1c331549e578faa92d90c92161e3fd386049034f2fcf808ee3ffc22696cf6cafb3d40a9e753b0fee", 0x89}, {&(0x7f00000003c0)="99828b7e33fa05cc8e4fba2c48e41116850fa152c8db4b2c755564bf5a7a28455fb7a0b720bcd2d898cb772167ee6b8bedc72146f6a559052302a9669787027c817dbbc629ff978105aa9114a3614e6e4655b65e5e2305afc83c4de80ab34a24867cc05378cedf471b58a8e41a7d7665ea6bf3c3655fc4948c13782438a9f85b36ab44e228d635651f651ee8f07d44c2ba40e5b5bd75a2fa02", 0x99}, {&(0x7f0000000480)="514fd9e7e362763e617abf4118a5c43ba6821c4ee40d8fb9944610a03f6f42be368b29883717626898709ce21fc2cfcc41c1dd21e862aa4d1c59a7cf22e8328fcb6ed18ee15aa8d1c8865438c02051988969e0fd98ad2c136caa7a8f27c7a313edfb2430290bf729ea", 0x69}, {&(0x7f0000000500)="d734a096630a3b1eaccbb874d5ab5d0822feec", 0x13}, {&(0x7f0000000540)="b081665b58e824ef0f136e82dcfdf9920cbe792271a3622edecab9086339b84f65c50fb15d2659b6e4a7d83ccc9f", 0x2e}, {&(0x7f0000000580)="1f8ff82653530b930d82a2a1ce08b0c35d52e481b5376a5915005cb5c36b0bcb3bf6e6f153c6b37acaea8517b9e88ca9c3cc76aab010e71cf911977a3d5085c7d36c6053a87a43b0853b8b5970e314cad80318c360996956c022b9c8a43e7fa1bda653765985a2ef618a6b73976a475479df386032c1bb3e3c091b8217df334e0eafc0a145a475c8359f887c01dac2476d784f86dd71c23b96c7070d5a5d1f3dbb5555cb3be504711d0957b9cccceda4ca5e922770dc30de8d5e69ce27849b5d9816c7fe5407ffc0a737dc098c57c4ab06f54122f82eb4597e", 0xd9}, {&(0x7f0000000680)="796a228d045d0b449304570559f9e77c862a895c2e205d20aa04ac312ef98989f11db7128b5cde1e0dd92ec1831d134cbaf6c32072a11a77594d59d8215c3dcfe9b21ac6486df3364a908297cf6a651c103d93512af2979d120f998c129662a77fa75317978aeebda0556aed3ffcbbfe12c55201485128277da712c4b62fcc9ffcd23283102dba7721849e181e", 0x8d}, {&(0x7f0000000740)="d35889a4283a67a7ee2764ea0bba334f8e15e1ac3fe5d3fcc591864fcb508140bac1d88e85b9f4a3c91cd9dbe89bbe716c7f1f8402ae5d04445214bc3d1005705fa93707211dcb932db5a54689c2cd925f4ee83b89d7ee4cbbb6ecd01efda12805b2ae2395b0792f96c4a4e1df6907a94b4d35e594689f8f3e51d6837b66a2c359e73cb16e5e05dc0d19598fc57a4a7f05ef0b86f5dc4d718c557e3b59f59d9c76ed", 0xa2}], 0x9, &(0x7f00000009c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x80}, 0x41004) (async)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a80)={0x7, 0x2, 0x4, 0x2, 0x6, 0xffff92f3, 0xa})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000bc0)=@buf={0xd1, &(0x7f0000000ac0)="c9d4615d7c8528ba4dc373defdc82bfa003023ac1e7e97c370a12f4eb733ad3eca062fb4c5373851948c32552f67732fd9779aee7c1d61dc85e442d1fd230d8a432fd2838fe313f10187045a25429293423cc6c7d1509aac023983742f141c834c7dbab1c10444c579de53e346eebefeb295c7c0795c7b3a79e0c78675c7f81cdbade7757540d95288a2929850bce733d015bdcb7d4ff3d4a657804715d15657f76759143966af9265342e1daed4d5bf743a8d52083aebc977cf35df8a78332c6db4e9f380811d0d97365a05a1769e9fa5"})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000c00)={<r7=>0x0}, &(0x7f0000000c40)=0xc)
syz_open_procfs$namespace(r7, &(0x7f0000000c80)='ns/cgroup\x00') (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d40)={'gretap0\x00', &(0x7f0000000d00)={'ip_vti0\x00', <r8=>r6, 0x40, 0x1, 0xfffffe00, 0xa, {{0x8, 0x4, 0x3, 0x2e, 0x20, 0x68, 0x0, 0x2, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0x99, [@rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xe8, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000f00)={0x2, @vbi={0x1, 0x9, 0x4867, 0x47314356, [0x81, 0x7bf162c8], [0x3, 0x7], 0x13a}})
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x65da}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r10 = open$dir(&(0x7f0000001140)='./file0\x00', 0x1a1a01, 0x0)
r11 = openat$incfs(r10, &(0x7f0000001180)='.pending_reads\x00', 0x800, 0x50)
mkdirat(r11, &(0x7f00000011c0)='./file1\x00', 0x88) (async)
ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, &(0x7f0000001240)={0x1, 0x18, [0x6, 0x4, 0x1, 0x5], &(0x7f0000001200)=[0x0, 0x0, 0x0]})
setxattr$trusted_overlay_origin(&(0x7f0000001280)='./file1\x00', &(0x7f00000012c0), &(0x7f0000001300), 0x2, 0x3) (async)
r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000013c0)=@o_path={&(0x7f0000001340)='./file0\x00', r12, 0x4000, r11}, 0x18) (async)
r13 = syz_open_dev$ndb(&(0x7f0000001400), 0x0, 0x10000)
ioctl$BLKRAGET(r13, 0x1263, &(0x7f0000001440)) (async)
openat$cgroup_ro(r0, &(0x7f0000001480)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f00000014c0), 0x80) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001500))
ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000001540)={r13, 0x0, 0x3, 0xf32})

2m9.730662395s ago: executing program 1 (id=881):
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000440)={0x0, [{0x2, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x10001, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xd0, 0x0}, {0x3, 0x0, 0xfb, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x612f, 0x0}, {0x6, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x686, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xbadb, 0x0}, {0x1, 0x0, 0x40002, 0x0}]})
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000003880)={0x0, [{0x7, 0x0, 0xff, 0x0}, {0x3, 0x0, 0x2000006, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x401, 0x0}, {0x2, 0x8, 0x8, &(0x7f0000002000)='\t'}, {0x3, 0x0, 0x100, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xffff500d, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x479, 0x0}, {0xd89bd44c42f5b3ca, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(r0, r0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0))
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1})
r5 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f0000000040)=@md0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)='aio\x00', 0x0, &(0x7f0000000380)='\xfe\xba\xa4')
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

2m9.61504829s ago: executing program 33 (id=881):
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000440)={0x0, [{0x2, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x10001, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xd0, 0x0}, {0x3, 0x0, 0xfb, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x612f, 0x0}, {0x6, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x686, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xbadb, 0x0}, {0x1, 0x0, 0x40002, 0x0}]})
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000003880)={0x0, [{0x7, 0x0, 0xff, 0x0}, {0x3, 0x0, 0x2000006, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x401, 0x0}, {0x2, 0x8, 0x8, &(0x7f0000002000)='\t'}, {0x3, 0x0, 0x100, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xffff500d, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x479, 0x0}, {0xd89bd44c42f5b3ca, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(r0, r0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0))
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x1, 0x1})
r5 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f0000000040)=@md0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)='aio\x00', 0x0, &(0x7f0000000380)='\xfe\xba\xa4')
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

1m10.510990204s ago: executing program 5 (id=1894):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0xfffff, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28)

1m10.510495244s ago: executing program 5 (id=1895):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5f5c}, {0x6, 0x16, 0xd08}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000)
setrlimit(0x6, &(0x7f0000000200)={0x6, 0x1000})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@deltclass={0x2c, 0x29, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x5}, {0xa, 0x8}, {0x0, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x5, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x8c, 0x8, "6838ff12d452932a80bb1640f77fe5040de2bd9fc3ec5ca26bf2b9cb007b7c17cc4d8a167cc86eb12b69e996f116a14dfaf0d51bb74552196a6995c40f086934a125258d5120bedfaed67f9d9a08a77afa469c944bf88fd040e3716cd5563d249a38f92f4750826c658d40fa97ba1f18e0b882b18767807e2715466e2586c42b4ff963491ad256ff"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6b29bb9286301a7a}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5743e76f}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELOBJ={0x88, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "f60a024817d7205f68ec027ef293fdd01dbb3b5bbe1134912f5b457fcb44c3d02c38155aaea75ddbbcd35c2d8523ded91f60fd7a2d47548a4d4daad09f1a05d381a636c3c94e5635387da033ed6bd61867b3d668d46d78"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x2d0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$unix(r0, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000800)={0xe, 0x0, 0x1, {0x101, 0x800, 0x4, 0x1}})
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000840)=r0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r5=>r3, {0x2, 0x4}}, './file0\x00'})
r6 = dup3(r3, r4, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000900)=<r7=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000940)=r7)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000980))
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048040}, 0x200040b0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000b80)={0x6, 0x7, 0x0, 'queue0\x00', 0xeda})
read$FUSE(r6, &(0x7f0000000c40)={0x2020, 0x0, <r11=>0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002c80)=<r13=>0x0)
r14 = getgid()
write$FUSE_CREATE_OPEN(r5, &(0x7f0000002cc0)={0xa0, 0x0, r11, {{0x1, 0x2, 0x80000000, 0x4, 0x82b9, 0xe90, {0x0, 0xc1, 0x7, 0x7, 0x5, 0x80000001, 0x5, 0xfffffff8, 0x8001, 0x2000, 0x9, r13, r14, 0x6, 0x3}}, {0x0, 0x11}}}, 0xa0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000002d80)={0x3, 'dummy0\x00', {0xfffffffc}, 0xfffb})
ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000002dc0)={0x1, 0x7, 0x7, 0x80000})
syz_open_procfs(r12, &(0x7f0000002e00)='net/rpc\x00')
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x4421000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1ff}, @NL80211_ATTR_PBSS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000)

1m9.610786054s ago: executing program 5 (id=1908):
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000010c0))
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x10a, 0x18f480)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x204001, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r4, 0x1, 0x10004}, 0xc) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x7, 0x400, 0x7}}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/notes', 0xc2883, 0x8a) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) (async)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) (async)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380))

1m9.608445803s ago: executing program 5 (id=1910):
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/0:0:0:0\x00', 0x420800, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/0:0:0:0\x00', 0x420800, 0x0)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4) (async)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x2002)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m8.63073847s ago: executing program 5 (id=1914):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@secondary)
syz_emit_ethernet(0x52, &(0x7f0000001880)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0xffff, 0x4)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
chdir(&(0x7f0000000180)='./file0\x00')
r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0xb77, 0x2015, 0x0, 0x3, 0x2, 0x2, 0xa4de36948e08189d}})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r6, 0xb01, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94)

1m8.526257949s ago: executing program 5 (id=1915):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='wlan0\x00')
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f0000000140)=[{0xc, '\x00', @buffer={"0657955b8c0a4601065d91fae89973973b52c8beb6dde1a886d5ed7b002166b5", 0x20}, 0xbd}]})
io_setup(0x2, &(0x7f0000000200))

1m4.358577147s ago: executing program 0 (id=1962):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}], {0x95, 0x0, 0xc00, 0x90}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1m4.358117004s ago: executing program 0 (id=1963):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4044080)
r4 = accept4$rose(r2, &(0x7f0000000100)=@full={0xb, @remote, @netrom, 0x0, [@bcast, @bcast, @remote, @null]}, &(0x7f0000000140)=0x40, 0x80000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a300000000005000400000000001400078008001340001f0000080006400000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
mremap(&(0x7f0000d6f000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil)

1m4.290442177s ago: executing program 0 (id=1964):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x894)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file1\x00'})
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000140))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x100000, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=0x0])
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32)

1m2.236321886s ago: executing program 0 (id=1983):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x6, 0x15542}}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000400), &(0x7f00000006c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x85)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xcbc814c0fac97d81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x37}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xcbef, 0x12}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bd}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)

1m2.235916334s ago: executing program 0 (id=1984):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000016000000000018000180140002006e657464657673696dd7a70c70fa9fe1564d911067d1300000000208"], 0x4c}}, 0x4008000)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x14, r1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random="010000201000"})
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={<r7=>r0, &(0x7f0000000140)='sit0\x00', 0x28002, &(0x7f0000000240)={@align=0x4000, {0xc, 0x1, 0x401, 0x400000000000004}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xc2})
write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000340)=ANY=[], 0xfffffffffffffe9b)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, r1}, 0x14)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xfffffff9}, 0x8)
r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x20080)
ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f00000000c0)=0x8000)
sendto$inet6(r8, &(0x7f0000000000)="ea", 0x1, 0x14, &(0x7f00000001c0)={0xa, 0x4e21, 0xe0, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10)

1m1.330291087s ago: executing program 0 (id=1987):
rt_sigprocmask(0x0, &(0x7f0000000040)={[0x456]}, &(0x7f0000000080), 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xe9f5}}, './file0\x00'}) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) (async)
r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0xa, 0x40) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x20, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @jmp={0x5, 0x0, 0x8, 0x0, 0x2, 0xffffffffffffffe8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x478, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0xb, 0xf25, 0x246}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x2)
ppoll(&(0x7f0000001480)=[{r0}, {r1}, {r2, 0x1002}, {r3, 0xd494}, {r4}, {r5, 0x48}], 0x6, &(0x7f00000014c0)={0x0, 0x989680}, &(0x7f0000001500)={[0x1042]}, 0x8)
gettid() (async)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000200)={{@local, 0x10000}, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

53.5369639s ago: executing program 34 (id=1915):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='wlan0\x00')
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f0000000140)=[{0xc, '\x00', @buffer={"0657955b8c0a4601065d91fae89973973b52c8beb6dde1a886d5ed7b002166b5", 0x20}, 0xbd}]})
io_setup(0x2, &(0x7f0000000200))

46.345507454s ago: executing program 35 (id=1987):
rt_sigprocmask(0x0, &(0x7f0000000040)={[0x456]}, &(0x7f0000000080), 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xe9f5}}, './file0\x00'}) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) (async)
r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0xa, 0x40) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x20, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @jmp={0x5, 0x0, 0x8, 0x0, 0x2, 0xffffffffffffffe8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x478, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0xb, 0xf25, 0x246}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x2)
ppoll(&(0x7f0000001480)=[{r0}, {r1}, {r2, 0x1002}, {r3, 0xd494}, {r4}, {r5, 0x48}], 0x6, &(0x7f00000014c0)={0x0, 0x989680}, &(0x7f0000001500)={[0x1042]}, 0x8)
gettid() (async)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000200)={{@local, 0x10000}, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

10.288732674s ago: executing program 6 (id=2713):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB, @ANYBLOB="bd75b482f252f5649194f545379dea0276ba822834fa00b2a4d5683d0076f497e454db6f029077793c3ee51aecb703e2"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'dummy0\x00', <r2=>0x0})
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x2, @void}, 0x10)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc9)
ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000e00))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r3, r5, 0x4, r0}, 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)

10.240319152s ago: executing program 6 (id=2714):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/210, 0xd2}], 0x1, 0x10000, 0x9)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c)
listen(r4, 0x6)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x10, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @loopback}]}, 0x30}}, 0x0)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00)

10.239750989s ago: executing program 6 (id=2715):
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setresuid(0xee01, 0x0, 0x0) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async)
execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) (async)
r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
listen(r1, 0x9)

10.160356748s ago: executing program 6 (id=2716):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c000100400000000600000082370c4ad9d73df1ff6ad058724338000c000100ff0400003f8c0000d8fd010006000000", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x80) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

10.079625572s ago: executing program 6 (id=2719):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) (async, rerun: 64)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) (rerun: 64)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 64)
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (rerun: 64)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async)
write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0x2) (async)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4) (async)
setpgid(0x0, r4)
fchdir(r3) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) (async)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) (async)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00"], 0x1c) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x16)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x86000, 0x0)
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048800}, 0x40000) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000500)=[{&(0x7f0000002000)=""/4101, 0x1005}], 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) (async)
socket(0x10, 0x3, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))

9.990210543s ago: executing program 6 (id=2720):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
read$eventfd(r1, &(0x7f0000000080), 0x8)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1a)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e25, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "62b9d705aa3b572cab9e4565145b574ad6d3761751672ccc", "db8ca1cbebfda570f2cfeada7bbd8bd6f8864257d91a249bc2dfb32bfb8b524b"}}}}}}, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async)
read$eventfd(r1, &(0x7f0000000080), 0x8) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1a) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e25, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "62b9d705aa3b572cab9e4565145b574ad6d3761751672ccc", "db8ca1cbebfda570f2cfeada7bbd8bd6f8864257d91a249bc2dfb32bfb8b524b"}}}}}}, 0x0) (async)

2.398470252s ago: executing program 2 (id=2795):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000000000000000010", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

2.310078435s ago: executing program 2 (id=2797):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a0000000000007910b8000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x10a, 0x18f480)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xf1b}, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32a6326ce6374fee0dc50997d3bef4cd4a5d83cdd3dfe7800b2d000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}})
ioctl$CDROM_DISC_STATUS(r2, 0x5327)

2.239829976s ago: executing program 2 (id=2799):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{0xaba, 0x0, 0x4}, {0xc001082d, 0x0, 0x1}, {0x22b, 0x0, 0x65c}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{0xaba, 0x0, 0x4}, {0xc001082d, 0x0, 0x1}, {0x22b, 0x0, 0x65c}]}) (async)

2.238764707s ago: executing program 2 (id=2800):
r0 = creat(&(0x7f0000000240)='./file0\x00', 0xecf86c37d53049c2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x1, [{0xf, 0x5, 0xdb}, {0x0, 0x3, 0x6}, {0x1, 0x5, 0xc3bc}]}, @const={0x0, 0x0, 0x0, 0xa, 0x5}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x2}]}}, &(0x7f0000000100)=""/141, 0x66, 0x8d, 0x1, 0x7}, 0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0x1}, 0x48)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x800, &(0x7f0000000380)={[{@favordynmods}]})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2200049, 0x0)

2.059468374s ago: executing program 2 (id=2803):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0)
ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ftruncate(r2, 0xc17a)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000002780)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0xa666, 0xc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}})
read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x4)

2.058623596s ago: executing program 2 (id=2804):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, &(0x7f0000006800)="10", 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_disconnect(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80)

1.838103066s ago: executing program 7 (id=2807):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x5, 0x66, {0x66, 0x23, "9cea31e4b5088b0cb4d1f59bb721c03f00810a72779b9caaad1ac7b5b0be4d568c1d81c3324162758d5a3bf21a3033bdffe661450ca61168d7d850012c13d563d94d4d85edf8b2c031f712b2deb4d35dbceb14ad91e1e66c6cc2b53ae32147f331829b1f"}}, &(0x7f0000000100)={0x0, 0x3, 0x3, @string={0x3, 0x3, "ef"}}, &(0x7f0000000140)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x40, 0x0, 0x7, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x7ff8000, 0xf00, 0x2, [0x0, 0x3f0f, 0xff11]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7, 0x81, 0x101, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x8, 0xa8, 0x6, "03671b57", "580870d0"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x6, 0xbe, 0xf4, 0xfffc, 0xfff}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x6f5fa4669a2fab77, 0x16, 0x21, "4cfdb3cf46dd268b62bbfcdc759173c9ff5d15409bd8e8d1758ed599ca4b95b705"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9a83}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "cac5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "2e19"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x5, 0x66, {0x66, 0x23, "9cea31e4b5088b0cb4d1f59bb721c03f00810a72779b9caaad1ac7b5b0be4d568c1d81c3324162758d5a3bf21a3033bdffe661450ca61168d7d850012c13d563d94d4d85edf8b2c031f712b2deb4d35dbceb14ad91e1e66c6cc2b53ae32147f331829b1f"}}, &(0x7f0000000100)={0x0, 0x3, 0x3, @string={0x3, 0x3, "ef"}}, &(0x7f0000000140)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x40, 0x0, 0x7, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x7ff8000, 0xf00, 0x2, [0x0, 0x3f0f, 0xff11]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7, 0x81, 0x101, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x8, 0xa8, 0x6, "03671b57", "580870d0"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x6, 0xbe, 0xf4, 0xfffc, 0xfff}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x6f5fa4669a2fab77, 0x16, 0x21, "4cfdb3cf46dd268b62bbfcdc759173c9ff5d15409bd8e8d1758ed599ca4b95b705"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9a83}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "cac5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "2e19"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}})
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000050a80000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28)
syz_open_dev$hiddev(&(0x7f0000000000), 0x497, 0x800) (async)
syz_open_dev$hiddev(&(0x7f0000000000), 0x497, 0x800)
syz_open_dev$hidraw(&(0x7f0000002300), 0x4, 0x14a042)

1.538781355s ago: executing program 4 (id=2808):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x2, &(0x7f0000000080)=[{0x2, 0x0, 0x6}, {0x6, 0x0, 0x1ff}]}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x800, 0x101, 0xcb1, 0x0, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={<r8=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={<r9=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)={<r10=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000380)={<r12=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r1, 0xc0186449, &(0x7f00000004c0)={r2, 0x0, {0x28, 0x3, &(0x7f0000000440)=[{0x8, 0xaf445370, 0xc9be3d58a0d91fc0, 0x1, 0x0, {0x10, 0x1, &(0x7f0000000100)=[{0xff, r4, 0x2}]}}, {0xfff, 0xc6311010, 0x616406913ba7fa00, 0xff, 0x0, {0x10, 0x2, &(0x7f0000000180)=[{0xff, r5, 0x89b8}, {0xff, 0x0, 0x1}]}}, {0x9, 0x185749a8, 0xed980b5bf1990880, 0x0, 0x0, {0x10, 0x7, &(0x7f00000003c0)=[{0x0, r6, 0x6}, {0x80000000, r7, 0x8001}, {0x0, r8, 0x2e6}, {0xff, r9, 0x451}, {0xff, r10, 0x9}, {0x1, r11, 0x800}, {0x1, r12, 0x2}]}}]}}) (async)
ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r1, 0xc0186449, &(0x7f00000004c0)={r2, 0x0, {0x28, 0x3, &(0x7f0000000440)=[{0x8, 0xaf445370, 0xc9be3d58a0d91fc0, 0x1, 0x0, {0x10, 0x1, &(0x7f0000000100)=[{0xff, r4, 0x2}]}}, {0xfff, 0xc6311010, 0x616406913ba7fa00, 0xff, 0x0, {0x10, 0x2, &(0x7f0000000180)=[{0xff, r5, 0x89b8}, {0xff, 0x0, 0x1}]}}, {0x9, 0x185749a8, 0xed980b5bf1990880, 0x0, 0x0, {0x10, 0x7, &(0x7f00000003c0)=[{0x0, r6, 0x6}, {0x80000000, r7, 0x8001}, {0x0, r8, 0x2e6}, {0xff, r9, 0x451}, {0xff, r10, 0x9}, {0x1, r11, 0x800}, {0x1, r12, 0x2}]}}]}})
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x5, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}]}, 0x154}}, 0x0)
r14 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
poll(&(0x7f0000000040)=[{r14, 0x1a5}], 0x1, 0xc8c4) (async)
poll(&(0x7f0000000040)=[{r14, 0x1a5}], 0x1, 0xc8c4)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000))

1.538199379s ago: executing program 4 (id=2809):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'gre0\x00'}}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x3eb080, 0x0) (async)
r5 = socket(0x28, 0x5, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (async)
listen(r8, 0x8001) (async)
write$tun(r6, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x4, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3, 0x65, 0x200, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @broadcast, {[@noop]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x5, 0x0, 0x1}, {"108927ee972103827d9d1fa076ede0e0d1eda847bb9655b53c292791cbabaee7c63954ae0087d41cc48d067d5c848a5d269dbdbef5025c1d16"}}}}, 0x73)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x2)
r9 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x1, 0x0)
fchdir(r8) (async)
sendmsg$NL80211_CMD_DEL_MPATH(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ce70000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async)
prlimit64(0x0, 0x2, 0x0, &(0x7f0000000400))
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x4)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000000)) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000)

1.360347029s ago: executing program 4 (id=2810):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x1}, &(0x7f0000000240)={0xfcfd, 0x0, 0x0, 0x6, 0x66, r1, 0x0, 0x0, 0x8, 0x0, 0x1}])
sendmmsg$alg(r1, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="00c9", 0x2}], 0x1}], 0x1, 0x1)

1.189386061s ago: executing program 4 (id=2811):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x86141, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x200000000000000, 0x80202)
r2 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000))
io_uring_enter(r2, 0x0, 0xe38e, 0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000080)={0x6, 0x154f, 0x1, 0x407, 0x80000001, 0x0, 0x6, 0x5})
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x3c, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x4, @mcast1, 0x39}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x4}}}, 0x108)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000000040))
writev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)='\f', 0x1}], 0x30)

299.993097ms ago: executing program 4 (id=2812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a300000000005000400000000001400078008001340001f0000080006400000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f00000005c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x64, 0x11, 0x2a1c41788e5700c2, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "0b1b357d754f78f131f66e5508401126d3f653b6b3073a988a2f6e8da07f0517", "14b3398f88adbb61b8a939fb59ccb661", {"57000000001300", "04dd8f4a1ba86a7d4d3a0447ac8ca407"}}}}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x11c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd64c}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x8000060000000001})
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10)

298.976485ms ago: executing program 7 (id=2813):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x104}}, 0x4001)
r1 = dup(r0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001240), 0x4000, 0x0)
getdents(r2, &(0x7f0000001280)=""/151, 0x97)
read$FUSE(0xffffffffffffffff, &(0x7f0000001380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000033c0)={0x50, 0x0, r3, {0x7, 0x2d, 0x6, 0x10000000, 0xe, 0xfff8, 0x5, 0x9, 0x0, 0x0, 0x40, 0x7ff}}, 0x50)
write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001340), 0x400000)

227.80243ms ago: executing program 7 (id=2814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x108, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket(0x10, 0x80000, 0x8)
write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

89.800742ms ago: executing program 4 (id=2815):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8000)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000240)=[0x5, 0x47f])
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x4}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x10a, 0x18f480)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000063110c00000000008510000002ca60314912e6a9cd052fef67ba24dc06000000850000000500ea0095000000000000009500a505000000002290b9e667fbe429458069860375da3e2f13"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r6 = dup(r5)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async)
setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400)

89.243466ms ago: executing program 7 (id=2816):
get_mempolicy(0x0, 0x0, 0x400000000000cca, &(0x7f0000ff9000/0x4000)=nil, 0x2)
get_mempolicy(0x0, 0x0, 0x400000000000cca, &(0x7f0000ff9000/0x4000)=nil, 0x2) (async)

139.517µs ago: executing program 7 (id=2817):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000040)=""/58)
setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000240)=0x6, 0x4)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x14, r3, 0x401, 0x70bd22, 0x10400, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 7 (id=2818):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42, 0x0, 0x1, 0x2e}, 0x28)

kernel console output (not intermixed with test programs):

44298 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  188.015774][   T40] audit: type=1400 audit(1772329978.492:778): avc:  denied  { name_bind } for  pid=12372 comm="syz.4.1900" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  188.045163][T12373] loop6: detected capacity change from 0 to 524287999
[  188.104857][T12378] bond2: option xmit_hash_policy: invalid value (6)
[  188.108686][T12378] bond2 (unregistering): Released all slaves
[  188.147285][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'.
[  188.151380][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1902'.
[  188.523544][   T39] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  188.694821][   T39] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  188.697593][   T39] usb 9-1: config 0 has no interface number 0
[  188.700149][   T39] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  188.704581][   T39] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  188.708406][   T39] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  188.711987][   T39] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  188.715858][   T39] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  188.720227][   T39] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  188.724673][   T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.733992][   T39] usb 9-1: config 0 descriptor??
[  188.736674][T12388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  188.744613][   T39] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  188.863660][ T1024] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  188.941000][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'.
[  188.944615][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'.
[  188.948033][T12388] netlink: 'syz.4.1905': attribute type 12 has an invalid length.
[  188.953833][   T34] usb 9-1: USB disconnect, device number 12
[  188.960215][   T34] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  189.033503][ T1024] usb 5-1: Using ep0 maxpacket: 32
[  189.036610][ T1024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.040182][ T1024] usb 5-1: config 0 has no interfaces?
[  189.043715][ T1024] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  189.046745][ T1024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.049424][ T1024] usb 5-1: Product: syz
[  189.050928][ T1024] usb 5-1: Manufacturer: syz
[  189.052491][ T1024] usb 5-1: SerialNumber: syz
[  189.056709][ T1024] usb 5-1: config 0 descriptor??
[  189.213596][ T5927] Bluetooth: hci3: command 0x1003 tx timeout
[  189.213651][ T5940] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  189.262939][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.266233][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.409338][T12419] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  189.622097][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.628169][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.763639][ T5940] Bluetooth: hci1: command tx timeout
[  189.814126][T12431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1919'.
[  189.822330][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1919'.
[  189.945365][T12429] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  190.015855][T12443] netlink: 'syz.4.1922': attribute type 39 has an invalid length.
[  190.329817][T12456] __vm_enough_memory: pid: 12456, comm: syz.2.1928, bytes: 4503599627366400 not enough memory for the allocation
[  190.386653][T12460] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  190.391065][T12460] 9p: Unknown access argument 00000000000000000000��]���ކ: -22
[  190.453224][T12465] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1931'.
[  190.458609][T12465] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  190.554266][T12474] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  190.582549][T12471] ip6gre1: entered allmulticast mode
[  190.641666][T12482] x_tables: duplicate underflow at hook 2
[  191.080967][T12497] XFS (nbd4): SB validate failed with error -5.
[  191.105325][T12505] ipvlan1: entered allmulticast mode
[  191.107636][T12505] veth0_vlan: entered allmulticast mode
[  191.134017][T12505] : Can't lookup blockdev
[  191.547579][T12530] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  191.551397][T12530] team0 (unregistering): Port device team_slave_0 removed
[  191.555963][T12530] team0 (unregistering): Failed to send options change via netlink (err -105)
[  191.559547][T12530] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  191.563268][T12530] team0 (unregistering): Port device team_slave_1 removed
[  191.630925][ T9092] usb 5-1: USB disconnect, device number 22
[  191.754431][   T50] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  191.790505][T12544] netlink: 'syz.2.1952': attribute type 1 has an invalid length.
[  191.844181][ T5940] Bluetooth: hci1: command tx timeout
[  191.882998][T12549] can0: slcan on ttyS3.
[  191.913493][   T50] usb 9-1: Using ep0 maxpacket: 8
[  191.916593][   T50] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  191.920716][   T50] usb 9-1: config 179 has no interface number 0
[  191.922941][   T50] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  191.926893][   T50] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  191.931138][   T50] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  191.936577][   T50] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  191.940803][   T50] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  191.945488][   T50] usb 9-1: config 179 interface 65 has no altsetting 0
[  191.947871][   T50] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  191.951373][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.956527][T12527] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  191.966032][   T50] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input28
[  192.015333][ T5319] input input28: unable to receive magic message: -110
[  192.022413][ T5319] input input28: unable to receive magic message: -32
[  192.036753][ T5319] input input28: unable to receive magic message: -32
[  192.041151][ T5319] input input28: unable to receive magic message: -32
[  192.044713][T12549] can0 (unregistered): slcan off ttyS3.
[  192.049815][ T5319] input input28: unable to receive magic message: -32
[  192.056364][ T5319] input input28: unable to receive magic message: -32
[  192.082135][T12555] can0: slcan on ttyS3.
[  192.162238][T12527] input input28: unable to receive magic message: -32
[  192.203510][   T34] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  192.224188][T12548] can0 (unregistered): slcan off ttyS3.
[  192.371012][   T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.380513][   T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.384553][   T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  192.384582][   T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  192.384594][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.386932][   T34] usb 7-1: config 0 descriptor??
[  192.825572][   T34] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  193.020174][T12551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.026918][T12551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.711218][T12598] __nla_validate_parse: 3 callbacks suppressed
[  193.711231][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'.
[  193.757791][T12601] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  193.764431][ T6677] Bluetooth: hci3: Frame reassembly failed (-84)
[  193.933602][ T5927] Bluetooth: hci1: command tx timeout
[  194.444352][   T50] usb 9-1: USB disconnect, device number 13
[  194.446837][    C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  195.138311][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'.
[  195.152872][ T6677] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.154059][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'.
[  195.156852][ T6677] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.163341][ T6677] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.167776][ T6684] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.171371][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'.
[  195.179444][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'.
[  195.206527][   T34] usb 7-1: USB disconnect, device number 20
[  195.263048][T12633] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  195.266048][T12633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  195.270051][T12633] vhci_hcd vhci_hcd.0: Device attached
[  195.503537][ T9092] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  195.543469][ T1024] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  195.695064][ T1024] usb 9-1: config 0 has no interfaces?
[  195.697547][ T1024] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  195.700783][ T1024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.710226][ T1024] usb 9-1: config 0 descriptor??
[  195.763577][ T5940] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  195.764036][ T5927] Bluetooth: hci3: command 0x1003 tx timeout
[  195.833350][T12657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1984'.
[  195.916028][T12634] usb 45-1: recv xbuf, 0
[  195.918402][ T6674] vhci_hcd vhci_hcd.4: stop threads
[  195.920302][ T6674] vhci_hcd vhci_hcd.4: release socket
[  195.924333][ T6674] vhci_hcd vhci_hcd.4: disconnect device
[  195.968347][  T838] usb 9-1: USB disconnect, device number 14
[  195.994486][ T9092] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  196.183545][ T6011] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  196.350317][ T6011] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  196.354679][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  196.358636][ T6011] usb 7-1: Product: syz
[  196.360543][ T6011] usb 7-1: Manufacturer: syz
[  196.362779][ T6011] usb 7-1: SerialNumber: syz
[  196.368480][ T6011] usb 7-1: config 0 descriptor??
[  196.374715][ T6011] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  196.378298][ T6011] dvb-usb: bulk message failed: -22 (2/0)
[  196.383934][ T6011] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  196.389124][ T6011] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  196.392817][ T6011] usb 7-1: media controller created
[  196.407006][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  196.575926][T12664] cxusb: i2c wr: len=78 is too big!
[  196.575926][T12664] 
[  196.580822][ T6011] cxusb: set interface failed
[  196.582800][ T6011] dvb-usb: bulk message failed: -22 (1/0)
[  196.603004][ T6011] DVB: Unable to find symbol mt352_attach()
[  196.606042][ T6011] dvb-usb: bulk message failed: -22 (5/0)
[  196.608688][ T6011] zl10353_read_register: readreg error (reg=127, ret==-121)
[  196.611980][ T6011] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  196.653516][ T6011] rc_core: IR keymap rc-dvico-mce not found
[  196.655831][ T6011] Registered IR keymap rc-empty
[  196.658178][ T6011] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  196.662335][ T6011] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input29
[  196.670444][ T6011] dvb-usb: schedule remote query interval to 100 msecs.
[  196.674001][ T6011] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  196.679400][ T6011] usb 7-1: USB disconnect, device number 21
[  196.707365][ T6011] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  196.723699][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  197.294469][T12685] tipc: Started in network mode
[  197.296817][T12685] tipc: Node identity ac14140f, cluster identity 4711
[  197.300456][T12685] tipc: New replicast peer: 255.255.255.255
[  197.305845][T12685] tipc: Enabled bearer <udp:syz2>, priority 10
[  197.309507][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'.
[  197.313635][T12685] tipc: Disabling bearer <udp:syz2>
[  197.344639][T12685] xt_TCPMSS: Only works on TCP SYN packets
[  197.494176][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  197.494187][   T40] audit: type=1400 audit(1772329987.972:787): avc:  denied  { create } for  pid=12686 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  197.504205][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'.
[  197.509589][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'.
[  197.513683][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'.
[  198.143156][T12690] overlayfs: regular lower layers cannot follow data lower layers
[  198.359077][T12697] program syz.2.1996 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.429592][T12703] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  198.481253][T12710] bridge0: port 3(syz_tun) entered blocking state
[  198.483622][T12710] bridge0: port 3(syz_tun) entered disabled state
[  198.485833][T12710] syz_tun: entered allmulticast mode
[  198.488356][T12710] syz_tun: entered promiscuous mode
[  198.490411][T12710] bridge0: port 3(syz_tun) entered blocking state
[  198.492811][T12710] bridge0: port 3(syz_tun) entered forwarding state
[  198.843571][ T1024] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  198.886039][T12725] fuse: Unknown parameter '000000000000000000000x0000000000000006'
[  198.892016][   T40] audit: type=1400 audit(1772329989.362:788): avc:  denied  { write } for  pid=12724 comm="syz.4.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  198.993512][ T1024] usb 7-1: Using ep0 maxpacket: 16
[  199.006607][ T1024] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.009929][ T1024] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  199.023509][ T1024] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  199.026469][ T1024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.029126][ T1024] usb 7-1: Product: syz
[  199.030505][ T1024] usb 7-1: Manufacturer: syz
[  199.032035][ T1024] usb 7-1: SerialNumber: syz
[  199.044122][ T1024] usb 7-1: config 0 descriptor??
[  199.286376][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  199.378067][  T838] usb 7-1: USB disconnect, device number 22
[  200.016078][T12735] bridge3: the hash_elasticity option has been deprecated and is always 16
[  200.026099][T12737] __nla_validate_parse: 2 callbacks suppressed
[  200.026111][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'.
[  200.057273][T12742] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  200.060090][T12741] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  200.063031][   T40] audit: type=1400 audit(1772329990.532:789): avc:  denied  { append } for  pid=12740 comm="syz.2.2011" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  200.992789][T12791] kAFS: unable to lookup cell 'syz0'
[  201.106140][T12796] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  201.294439][   T40] audit: type=1400 audit(1772329991.772:790): avc:  denied  { accept } for  pid=12807 comm="syz.4.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  201.403623][ T5940] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  201.441998][T12817] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.2036'.
[  201.473243][T12817] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.477094][T12820] XFS (nbd4): SB validate failed with error -5.
[  201.607756][   T40] audit: type=1400 audit(1772329992.082:791): avc:  denied  { ioctl } for  pid=12830 comm="syz.2.2040" path="socket:[44938]" dev="sockfs" ino=44938 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  201.616203][   T40] audit: type=1400 audit(1772329992.082:792): avc:  denied  { read } for  pid=12830 comm="syz.2.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  201.748254][ T1024] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  201.885245][ T1024] usb 9-1: device descriptor read/64, error -71
[  201.896455][T12842] xt_hashlimit: size too large, truncated to 1048576
[  202.054534][T12847] program syz.2.2045 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.070940][T12847] bond0: entered promiscuous mode
[  202.072696][T12847] bond_slave_0: entered promiscuous mode
[  202.074806][T12847] bond_slave_1: entered promiscuous mode
[  202.077588][T12847] batadv0: entered promiscuous mode
[  202.080387][T12847] 8021q: adding VLAN 0 to HW filter on device hsr1
[  202.086672][T12847] bond0: left promiscuous mode
[  202.088564][T12847] bond_slave_0: left promiscuous mode
[  202.090777][T12847] bond_slave_1: left promiscuous mode
[  202.093923][T12847] batadv0: left promiscuous mode
[  202.123537][ T1024] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  202.253577][ T1024] usb 9-1: device descriptor read/64, error -71
[  202.365993][ T1024] usb usb9-port1: attempt power cycle
[  202.703585][ T1024] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  202.734143][ T1024] usb 9-1: device descriptor read/8, error -71
[  202.973497][ T1024] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  203.004445][ T1024] usb 9-1: device descriptor read/8, error -71
[  203.113785][ T1024] usb usb9-port1: unable to enumerate USB device
[  203.154183][T12852] SELinux:  policydb version 925503743 does not match my version range 15-35
[  203.158084][T12852] SELinux: failed to load policy
[  203.372867][T12862] No such timeout policy "syz1"
[  204.563709][ T9092] libceph: connect (1)[c::]:6789 error -101
[  204.566780][ T9092] libceph: mon0 (1)[c::]:6789 connect error
[  204.578231][   T40] audit: type=1400 audit(1772329995.052:793): avc:  denied  { read write } for  pid=12882 comm="syz.2.2055" name="file0" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  204.609465][ T9092] libceph: connect (1)[b::]:6789 error -101
[  204.612240][ T9092] libceph: mon0 (1)[b::]:6789 connect error
[  204.655495][ T5927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  204.666599][ T5927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  204.670312][ T5927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  204.673131][ T5927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  204.676591][ T5927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  204.754216][T12902] binder: 12901:12902 ioctl c0306201 200000000040 returned -22
[  204.757075][T12902] binder: 12901:12902 ioctl c0306201 200000000640 returned -22
[  204.801428][T12908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2059'.
[  204.825714][ T9092] libceph: connect (1)[c::]:6789 error -101
[  204.828477][ T9092] libceph: mon0 (1)[c::]:6789 connect error
[  204.855094][T12892] chnl_net:caif_netlink_parms(): no params data found
[  204.875507][ T9092] libceph: connect (1)[b::]:6789 error -101
[  204.878292][ T9092] libceph: mon0 (1)[b::]:6789 connect error
[  204.935223][T12892] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.938382][T12892] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.941671][T12892] bridge_slave_0: entered allmulticast mode
[  204.945822][T12892] bridge_slave_0: entered promiscuous mode
[  204.952686][T12892] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.956217][T12892] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.959834][T12892] bridge_slave_1: entered allmulticast mode
[  204.964216][T12892] bridge_slave_1: entered promiscuous mode
[  204.989367][ T6684] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.019834][T12892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.024821][T12892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.057403][ T6684] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.066962][T12892] team0: Port device team_slave_0 added
[  205.073127][T12892] team0: Port device team_slave_1 added
[  205.091125][T12892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.093530][T12892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.101829][T12892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.108536][T12892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.110843][T12892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.119456][T12892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.136186][ T6684] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.166343][T12892] hsr_slave_0: entered promiscuous mode
[  205.169234][T12892] hsr_slave_1: entered promiscuous mode
[  205.171866][T12892] debugfs: 'hsr0' already exists in 'hsr'
[  205.174438][T12892] Cannot create hsr debugfs directory
[  205.265646][ T6684] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.299997][T12892] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  205.306913][T12892] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  205.313103][T12892] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  205.318077][T12892] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  205.337527][T12892] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.340571][T12892] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.344006][T12892] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.346975][T12892] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.347491][ T9092] libceph: connect (1)[c::]:6789 error -101
[  205.352780][ T9092] libceph: mon0 (1)[c::]:6789 connect error
[  205.395055][ T9092] libceph: connect (1)[b::]:6789 error -101
[  205.400537][ T9092] libceph: mon0 (1)[b::]:6789 connect error
[  205.406791][T12892] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.418445][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.421240][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.432444][T12892] 8021q: adding VLAN 0 to HW filter on device team0
[  205.439007][T12877] ceph: No mds server is up or the cluster is laggy
[  205.444080][T12887] ceph: No mds server is up or the cluster is laggy
[  205.547146][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.550444][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.554003][   T40] audit: type=1400 audit(1772329996.022:794): avc:  denied  { module_load } for  pid=12934 comm="syz.2.2064" path="/sys/kernel/notes" dev="sysfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  205.589960][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.592310][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.604110][ T6684] bridge_slave_1: left allmulticast mode
[  205.606630][ T6684] bridge_slave_1: left promiscuous mode
[  205.609229][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.624161][ T6684] bridge_slave_0: left allmulticast mode
[  205.626641][ T6684] bridge_slave_0: left promiscuous mode
[  205.629203][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.747719][ T6684] bond4 (unregistering): (slave geneve2): Releasing active interface
[  205.825191][ T6684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.831092][ T6684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.836322][ T6684] bond0 (unregistering): Released all slaves
[  205.843698][ T6684] bond1 (unregistering): Released all slaves
[  205.856467][ T6684] bond2 (unregistering): Released all slaves
[  205.867246][ T6684] bond3 (unregistering): Released all slaves
[  205.878262][ T6684] bond4 (unregistering): Released all slaves
[  205.968594][ T6684] : left promiscuous mode
[  206.065798][T12892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.079945][ T6684] IPVS: stopping backup sync thread 10143 ...
[  206.233616][T12892] veth0_vlan: entered promiscuous mode
[  206.239154][T12892] veth1_vlan: entered promiscuous mode
[  206.278614][T12892] veth0_macvtap: entered promiscuous mode
[  206.282482][T12892] veth1_macvtap: entered promiscuous mode
[  206.292067][T12892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.301342][T12892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.312400][ T6677] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.318640][ T6677] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.322531][ T6677] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.329667][ T6677] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.336111][ T6684] hsr_slave_0: left promiscuous mode
[  206.338079][ T6684] hsr_slave_1: left promiscuous mode
[  206.341231][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.343675][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.346283][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.348486][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.356880][ T6684] veth1_macvtap: left promiscuous mode
[  206.358611][ T6684] veth0_macvtap: left promiscuous mode
[  206.360298][ T6684] veth1_vlan: left promiscuous mode
[  206.361862][ T6684] veth0_vlan: left promiscuous mode
[  206.400855][T12939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  206.492418][T12977] netlink: 'syz.2.2071': attribute type 1 has an invalid length.
[  206.496848][T12977] netlink: 'syz.2.2071': attribute type 2 has an invalid length.
[  206.651241][   T40] audit: type=1400 audit(1772329997.122:795): avc:  denied  { read } for  pid=12985 comm="syz.4.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  206.671188][ T6675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.674810][ T6675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.722801][ T6674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.725915][ T6674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.727202][ T5927] Bluetooth: hci3: command tx timeout
[  206.754817][T12994] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  206.759985][   T40] audit: type=1400 audit(1772329997.232:796): avc:  denied  { mount } for  pid=12993 comm="syz.2.2074" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  206.761317][T12994] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  206.807565][   T40] audit: type=1400 audit(1772329997.282:797): avc:  denied  { read } for  pid=12993 comm="syz.2.2074" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  206.836629][   T40] audit: type=1400 audit(1772329997.282:798): avc:  denied  { read } for  pid=12993 comm="syz.2.2074" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  206.851691][   T40] audit: type=1400 audit(1772329997.282:799): avc:  denied  { read } for  pid=12993 comm="syz.2.2074" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  206.875067][T13003] netlink: 'syz.2.2074': attribute type 5 has an invalid length.
[  206.879009][   T40] audit: type=1400 audit(1772329997.282:800): avc:  denied  { open } for  pid=12993 comm="syz.2.2074" path="/87/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  206.890981][   T40] audit: type=1400 audit(1772329997.282:801): avc:  denied  { read } for  pid=12993 comm="syz.2.2074" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  206.901198][   T40] audit: type=1400 audit(1772329997.282:802): avc:  denied  { read } for  pid=12993 comm="syz.2.2074" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  206.906069][T12994] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  206.917553][T12994] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  206.922009][T12994] overlayfs: d_ino too big (87, ino=9223372036854776279, xinobits=3)
[  206.929773][T12994] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  206.937026][T12994] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  206.940396][T12994] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  206.946084][T12994] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  206.949091][T12994] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  206.952027][T12994] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[  206.955945][T12994] overlayfs: d_ino too big (instances, ino=4611686018427389058, xinobits=3)
[  207.364382][ T6011] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  207.534709][ T6011] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.539324][ T6011] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  207.542384][ T6011] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.547207][ T6011] usb 9-1: config 0 descriptor??
[  207.729569][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2087'.
[  207.735589][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'.
[  207.761230][ T6011] usbhid 9-1:0.0: can't add hid device: -71
[  207.763264][ T6011] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  207.776296][ T6011] usb 9-1: USB disconnect, device number 19
[  207.778514][T13059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2089'.
[  208.006457][T13093] futex_wake_op: syz.6.2098 tries to shift op by 32; fix this program
[  208.038414][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.065579][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.085529][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.106065][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.124439][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.143034][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.161712][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  208.203780][ T6010] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  208.249134][T13103] netlink: 'syz.6.2102': attribute type 1 has an invalid length.
[  208.305750][T13103] vlan2: entered allmulticast mode
[  208.353803][ T6010] usb 9-1: Using ep0 maxpacket: 32
[  208.357429][ T6010] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.361347][ T6010] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  208.365635][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.367136][ T6010] usb 9-1: config 0 descriptor??
[  208.378682][ T6010] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  208.386623][ T6010] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  208.650887][ T6011] usb 9-1: USB disconnect, device number 20
[  208.667435][ T6011] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  208.803527][ T5927] Bluetooth: hci3: command tx timeout
[  208.855435][T13116] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  208.858266][T13116] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  208.861696][T13116] vhci_hcd vhci_hcd.0: Device attached
[  208.868419][T13117] vhci_hcd: connection closed
[  208.869604][ T6678] vhci_hcd vhci_hcd.4: stop threads
[  208.872881][ T6678] vhci_hcd vhci_hcd.4: release socket
[  208.875241][ T6678] vhci_hcd vhci_hcd.4: disconnect device
[  209.401920][T13167] netlink: 'syz.4.2118': attribute type 21 has an invalid length.
[  209.549797][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.554068][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.271811][T13187] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=13187 comm=syz.6.2122
[  210.344804][T13192] x_tables: duplicate underflow at hook 1
[  210.735111][T13215] overlayfs: failed to resolve './file0': -2
[  210.884142][ T5927] Bluetooth: hci3: command tx timeout
[  210.922823][T13235] netlink: 'syz.4.2137': attribute type 3 has an invalid length.
[  210.999177][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  210.999193][   T40] audit: type=1400 audit(1772330001.472:815): avc:  denied  { connect } for  pid=13246 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  211.093245][T13262] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  211.460801][T13282] netlink: 'syz.6.2153': attribute type 1 has an invalid length.
[  211.485753][T13282] 8021q: adding VLAN 0 to HW filter on device bond1
[  211.494855][T13283] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  211.503289][T13283] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  211.844554][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  211.849315][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  211.853235][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  211.860009][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  211.865587][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.029278][T13296] chnl_net:caif_netlink_parms(): no params data found
[  212.114785][T13296] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.117497][T13296] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.120568][T13296] bridge_slave_0: entered allmulticast mode
[  212.123862][T13296] bridge_slave_0: entered promiscuous mode
[  212.135896][T13296] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.138919][T13296] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.145112][T13296] bridge_slave_1: entered allmulticast mode
[  212.150768][T13296] bridge_slave_1: entered promiscuous mode
[  212.222040][ T6674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.227446][ T6674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.252405][T13296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.272088][T13296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.302195][T13296] team0: Port device team_slave_0 added
[  212.327827][ T6674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.331250][ T6674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.341333][T13296] team0: Port device team_slave_1 added
[  212.372004][T13296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.375183][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.386394][T13296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.394668][   T54] usb 9-1: new low-speed USB device number 21 using dummy_hcd
[  212.416004][ T6674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.419527][ T6674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.438511][T13296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.441577][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.462185][T13296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.491115][T13296] hsr_slave_0: entered promiscuous mode
[  212.497684][T13296] hsr_slave_1: entered promiscuous mode
[  212.538749][ T6674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.543380][ T6674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.698388][T13296] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  212.723850][T13296] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  212.740308][T13296] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  212.748433][T13296] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  212.794384][ T6674] bridge_slave_1: left allmulticast mode
[  212.797019][ T6674] bridge_slave_1: left promiscuous mode
[  212.799700][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.965430][ T5940] Bluetooth: hci3: command tx timeout
[  213.247778][ T6674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.252607][ T6674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.257886][ T6674] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  213.261275][ T6674] bond0 (unregistering): Released all slaves
[  213.266886][ T6674] bond1 (unregistering): Released all slaves
[  213.276187][ T6674] bond2 (unregistering): (slave vxcan3): Releasing backup interface
[  213.279851][ T6674] bond2 (unregistering): Released all slaves
[  213.297562][ T6674] bond3 (unregistering): Released all slaves
[  213.310947][T13347] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  213.323077][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.326738][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.329639][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.332395][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.336698][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.339887][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.342912][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.345706][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.348529][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.351216][T13349] netlink: 'syz.6.2166': attribute type 3 has an invalid length.
[  213.427244][ T6674] tipc: Left network mode
[  213.460590][   T40] audit: type=1400 audit(1772330003.932:816): avc:  denied  { ioctl } for  pid=13358 comm="syz.6.2168" path="/39/file0/file0" dev="9p" ino=72614149 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  213.477312][   T40] audit: type=1400 audit(1772330003.932:817): avc:  denied  { map } for  pid=13358 comm="syz.6.2168" path="/39/file0/file0" dev="9p" ino=72614149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  213.511275][T13296] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.533299][T13296] 8021q: adding VLAN 0 to HW filter on device team0
[  213.548541][T13362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.554191][T13362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.555331][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.559260][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.568572][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.570965][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.665203][ T6674] hsr_slave_0: left promiscuous mode
[  213.672339][ T6674] hsr_slave_1: left promiscuous mode
[  213.675466][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.679139][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.708870][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.712141][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.729900][ T6674] veth0_macvtap: left promiscuous mode
[  213.732476][ T6674] veth1_vlan: left promiscuous mode
[  213.735781][ T6674] veth0_vlan: left promiscuous mode
[  213.797319][ T6674] pimreg3 (unregistering): left allmulticast mode
[  213.935738][ T5940] Bluetooth: hci0: command tx timeout
[  214.062610][T13394] binder: 13393:13394 ioctl c00c620f 200000000400 returned -22
[  214.081065][T13296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.184769][T13402] __nla_validate_parse: 32 callbacks suppressed
[  214.184781][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2175'.
[  214.206453][T13402] ip6gre1: entered allmulticast mode
[  214.227841][T13417] 9pnet_virtio: no channels available for device syz
[  214.319764][T13296] veth0_vlan: entered promiscuous mode
[  214.326848][T13296] veth1_vlan: entered promiscuous mode
[  214.350186][T13296] veth0_macvtap: entered promiscuous mode
[  214.358918][T13296] veth1_macvtap: entered promiscuous mode
[  214.372393][T13296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.382040][T13296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.388071][ T6678] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.390959][ T6678] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.394966][ T6678] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.397803][ T6678] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.476900][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'.
[  214.503162][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.508223][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.528895][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.531543][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.668019][   T40] audit: type=1400 audit(1772330005.142:818): avc:  denied  { getopt } for  pid=13444 comm="syz.2.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  214.906093][T13464] macvlan2: entered promiscuous mode
[  214.925025][T13466] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2190'.
[  214.942874][T13469] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  214.974079][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'.
[  214.980810][T13471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13471 comm=syz.6.2193
[  214.990193][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'.
[  214.997000][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'.
[  215.014645][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'.
[  215.017655][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'.
[  215.208017][   T40] audit: type=1400 audit(1772330005.682:819): avc:  denied  { unmount } for  pid=12264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  215.217663][T13499] tmpfs: User quota block hardlimit too large.
[  215.259927][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'.
[  215.310866][T13504] 9p: Bad value for 'port'
[  215.603505][  T838] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  215.760826][  T838] usb 12-1: Using ep0 maxpacket: 32
[  215.767610][  T838] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.771847][  T838] usb 12-1: config 0 has no interfaces?
[  215.777224][  T838] usb 12-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  215.781175][  T838] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.784688][  T838] usb 12-1: Product: syz
[  215.786530][  T838] usb 12-1: Manufacturer: syz
[  215.788583][  T838] usb 12-1: SerialNumber: syz
[  215.793858][  T838] usb 12-1: config 0 descriptor??
[  215.999875][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.002719][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.003615][ T5940] Bluetooth: hci0: command tx timeout
[  216.074374][   T40] audit: type=1400 audit(1772330006.552:820): avc:  denied  { ioctl } for  pid=13546 comm="syz.6.2215" path="/47/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  216.183961][ T6011] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  216.277184][T13562] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  216.281899][T13562] team0 (unregistering): Port device team_slave_0 removed
[  216.287516][T13562] team0 (unregistering): Failed to send options change via netlink (err -105)
[  216.291565][T13562] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  216.296499][T13562] team0 (unregistering): Port device team_slave_1 removed
[  216.358000][T13564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.360984][T13564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.369426][T13564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.372382][T13564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.568435][T13584] xt_hashlimit: size too large, truncated to 1048576
[  216.675345][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2222'.
[  216.684960][T13584] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.692132][T13584] bridge_slave_0 (unregistering): left allmulticast mode
[  216.695885][T13584] bridge_slave_0 (unregistering): left promiscuous mode
[  216.698432][T13584] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.230793][   T40] audit: type=1400 audit(1772330007.702:821): avc:  denied  { append } for  pid=13600 comm="syz.4.2228" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  217.239456][   T40] audit: type=1400 audit(1772330007.712:822): avc:  denied  { ioctl } for  pid=13600 comm="syz.4.2228" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  217.271609][T13604] program syz.6.2229 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.281028][T13606] netlink: zone id is out of range
[  217.285117][T13606] netlink: get zone limit has 4 unknown bytes
[  217.296242][T13606] bpf: Bad value for 'gid'
[  217.313844][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  217.316343][ T1113] ata1.00: irq_stat 0x40000000
[  217.318005][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT
[  217.320039][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 23
[  217.320039][ T1113]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  217.325694][ T1113] ata1.00: status: { DRDY ERR }
[  217.327369][ T1113] ata1.00: error: { ABRT }
[  217.328890][ T1113] ata1.00: device reported invalid CHS sector 0
[  217.571276][T13617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13617 comm=syz.6.2234
[  217.573670][   T54] usb 9-1: device descriptor read/64, error -110
[  217.694148][ T9092] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  217.813485][   T54] usb 9-1: new low-speed USB device number 22 using dummy_hcd
[  217.844004][ T9092] usb 7-1: Using ep0 maxpacket: 16
[  217.847611][ T9092] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  217.851385][ T9092] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  217.855792][ T9092] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  217.859745][ T9092] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  217.863624][ T9092] usb 7-1: config 0 interface 0 has no altsetting 0
[  217.867930][ T9092] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  217.871594][ T9092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.877644][ T9092] usb 7-1: Product: syz
[  217.879139][ T9092] usb 7-1: Manufacturer: syz
[  217.881075][ T9092] usb 7-1: SerialNumber: syz
[  217.884505][ T9092] usb 7-1: config 0 descriptor??
[  217.889222][T13614] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22
[  217.943594][   T54] usb 9-1: device descriptor read/64, error -32
[  218.054085][   T54] usb usb9-port1: attempt power cycle
[  218.083747][ T5940] Bluetooth: hci0: command tx timeout
[  218.095316][T13614] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22
[  218.102081][ T9092] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input30
[  218.261498][T13644] Bluetooth: MGMT ver 1.23
[  218.381452][ T6010] usb 12-1: USB disconnect, device number 2
[  218.413630][   T54] usb 9-1: new low-speed USB device number 23 using dummy_hcd
[  218.428182][T13649] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  218.432879][T13649] team0 (unregistering): Port device team_slave_0 removed
[  218.436322][   T54] usb 9-1: device descriptor read/8, error -32
[  218.440776][T13649] team0 (unregistering): Failed to send options change via netlink (err -105)
[  218.445229][T13649] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  218.449281][T13649] team0 (unregistering): Port device team_slave_1 removed
[  218.526094][  T838] usb 7-1: USB disconnect, device number 23
[  218.543542][   T54] raw-gadget.0 gadget.4: failed to queue suspend event
[  218.546341][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  218.614235][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  218.673676][   T54] usb 9-1: new low-speed USB device number 24 using dummy_hcd
[  218.707933][    C3] raw-gadget.0 gadget.4: ignoring, device is not running
[  218.711015][   T54] usb 9-1: device descriptor read/8, error -32
[  218.837168][   T54] raw-gadget.0 gadget.4: failed to queue suspend event
[  218.843639][   T54] usb usb9-port1: unable to enumerate USB device
[  218.858771][T13680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.862794][T13680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.926452][T13680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.930417][T13680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.936613][T13680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.955640][T13680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.960662][T13680] binder: BINDER_SET_CONTEXT_MGR already set
[  218.963221][T13680] binder: 13679:13680 ioctl 4018620d 200000004a80 returned -16
[  219.163448][T13705] tc_dump_action: action bad kind
[  219.204884][   T40] audit: type=1400 audit(1772330009.682:823): avc:  denied  { accept } for  pid=13708 comm="syz.6.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  219.258439][T13713] validate_nla: 45 callbacks suppressed
[  219.258456][T13713] netlink: 'syz.6.2257': attribute type 10 has an invalid length.
[  219.264978][T13713] __nla_validate_parse: 3 callbacks suppressed
[  219.264992][T13713] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2257'.
[  219.297130][T13715] tmpfs: Unknown parameter '
'
[  219.344243][T13719] IPVS: set_ctl: invalid protocol: 135 172.20.20.58:20000
[  219.347676][T13719] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001
[  219.589408][T13738] loop4: detected capacity change from 0 to 7
[  219.596317][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.600314][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.609237][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.617127][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.621659][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.626059][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.630046][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.633381][T13738] ldm_validate_partition_table(): Disk read failed.
[  219.636535][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.640283][ T5940] Bluetooth: hci0: hcon ffff888037c38000 sent 1 < count 5
[  219.640979][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.651321][   T40] audit: type=1326 audit(1772330010.112:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.7.2265" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d02d9c799 code=0x0
[  219.652784][T13738] Buffer I/O error on dev loop4, logical block 0, async page read
[  219.665443][T13738] Dev loop4: unable to read RDB block 0
[  219.667704][T13738]  loop4: unable to read partition table
[  219.670534][T13738] loop4: partition table beyond EOD, truncated
[  219.674674][T13738] loop_reread_partitions: partition scan of loop4 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[  219.739858][T13749] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2266'.
[  220.163601][ T5940] Bluetooth: hci0: command tx timeout
[  220.594301][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2267'.
[  220.870099][T13785] usb usb8: usbfs: process 13785 (syz.6.2276) did not claim interface 0 before use
[  220.959134][T13798] syzkaller1: tun_chr_ioctl cmd 1074025677
[  220.961758][T13798] syzkaller1: linktype set to 1
[  220.975233][T13798] netlink: 788 bytes leftover after parsing attributes in process `syz.6.2278'.
[  220.978968][T13798] bond0: entered allmulticast mode
[  220.980968][T13798] bond_slave_0: entered allmulticast mode
[  220.983358][T13798] bond_slave_1: entered allmulticast mode
[  220.988166][   T40] audit: type=1400 audit(1772330011.462:825): avc:  denied  { ioctl } for  pid=13797 comm="syz.6.2278" path="socket:[51059]" dev="sockfs" ino=51059 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  221.017874][   T40] audit: type=1804 audit(1772330011.492:826): pid=13800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2279" name="/newroot/138/file1" dev="tmpfs" ino=746 res=1 errno=0
[  221.038681][T13800] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  221.102501][   T40] audit: type=1400 audit(1772330011.572:827): avc:  denied  { listen } for  pid=13809 comm="syz.7.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  221.102570][T13810] x_tables: duplicate underflow at hook 1
[  221.211552][T13818] overlayfs: failed to resolve '�q�Y�3aK': -2
[  221.279405][T13829] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2288'.
[  221.312666][   T40] audit: type=1400 audit(1772330011.782:828): avc:  denied  { create } for  pid=13834 comm="syz.6.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  221.323894][   T40] audit: type=1400 audit(1772330011.792:829): avc:  denied  { write } for  pid=13834 comm="syz.6.2290" path="socket:[54500]" dev="sockfs" ino=54500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  221.403141][T13842] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  221.455422][T13847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13847 comm=syz.6.2293
[  221.678330][   T40] audit: type=1400 audit(1772330012.152:830): avc:  denied  { write } for  pid=13859 comm="syz.6.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  221.711420][T13867] netlink: 'syz.7.2298': attribute type 2 has an invalid length.
[  221.716717][   T40] audit: type=1400 audit(1772330012.192:831): avc:  denied  { getopt } for  pid=13864 comm="syz.7.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  221.721800][T13867] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2298'.
[  221.729637][T13867] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  221.956503][T13903] netlink: 'syz.6.2308': attribute type 3 has an invalid length.
[  221.960177][T13903] netlink: 'syz.6.2308': attribute type 1 has an invalid length.
[  221.963917][T13903] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2308'.
[  221.967962][T13903] NCSI netlink: No device for ifindex 0
[  222.035727][T13911] netlink: 'syz.4.2310': attribute type 1 has an invalid length.
[  222.063564][T13911] 8021q: adding VLAN 0 to HW filter on device bond2
[  222.078084][T13911] vlan0: entered promiscuous mode
[  222.080600][T13911] bond2: entered promiscuous mode
[  222.083187][T13911] vlan0: entered allmulticast mode
[  222.085616][T13911] bond2: entered allmulticast mode
[  222.091220][T13911] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2310'.
[  222.182140][T13920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  222.188917][T13920] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  222.192531][T13923] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2313'.
[  222.192566][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2313'.
[  222.335285][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  222.338396][ T1113] ata1: failed to read log page 10h (errno=-5)
[  222.341241][ T1113] ata1.00: exception Emask 0x1 SAct 0x1000000 SErr 0x0 action 0x0
[  222.344578][ T1113] ata1.00: irq_stat 0x40000000
[  222.346811][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED
[  222.349536][ T1113] ata1.00: cmd 61/18:c0:7e:0b:10/00:00:00:00:00/40 tag 24 ncq dma 12288 out
[  222.349536][ T1113]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  222.357234][ T1113] ata1.00: status: { DRDY }
[  222.364483][ T1113] ata1.00: configured for UDMA/100
[  222.367209][ T1113] ata1: EH complete
[  222.773350][T13939] batadv_slave_1: entered promiscuous mode
[  222.777763][T13937] batadv_slave_1: left promiscuous mode
[  222.884989][T13947] random: crng reseeded on system resumption
[  222.892866][T13949] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  222.906728][T13947] netem: change failed
[  222.909710][T13947] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=327692 (655384 ns) > initial count (224 ns). Using initial count to start timer.
[  222.916290][T13947] kvm: Disabled LAPIC found during irq injection
[  222.977669][   T40] audit: type=1400 audit(1772330013.452:832): avc:  denied  { setopt } for  pid=13953 comm="syz.2.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  223.004594][ T9092] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  223.088728][T13967] xt_l2tp: v2 doesn't support IP mode
[  223.106577][T13963] geneve2: entered promiscuous mode
[  223.108312][T13963] geneve2: entered allmulticast mode
[  223.153540][ T9092] usb 12-1: Using ep0 maxpacket: 32
[  223.157793][ T9092] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  223.162174][ T9092] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  223.167670][ T9092] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  223.172947][ T9092] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  223.190880][ T9092] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  223.199126][ T9092] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.202590][ T9092] usb 12-1: Product: syz
[  223.209246][ T9092] usb 12-1: Manufacturer: syz
[  223.211309][ T9092] usb 12-1: SerialNumber: syz
[  223.232550][    C1] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  223.233818][T13982] EXT4-fs: Conflicting test_dummy_encryption options
[  223.244625][ T9092] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input31
[  223.352839][T13996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13996 comm=syz.2.2338
[  223.401525][T14001] bridge1: entered promiscuous mode
[  223.403309][T14001] bridge1: entered allmulticast mode
[  223.405975][   T40] audit: type=1400 audit(1772330013.882:833): avc:  denied  { ioctl } for  pid=13990 comm="syz.4.2336" path="/360/file0/file0" dev="fuse" ino=0 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  223.417329][   T40] audit: type=1326 audit(1772330013.892:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.2339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f414e19c799 code=0x0
[  223.443649][ T9092] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  223.446760][ T9092]  (id 0x00)
[  223.503620][ T9092] rc_core: IR keymap rc-imon-pad not found
[  223.506220][ T9092] Registered IR keymap rc-empty
[  223.508344][ T9092] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  223.513316][ T9092] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  223.552048][T14004] FAT-fs (loop2): unable to read boot sector
[  223.637418][T14011] CIFS mount error: No usable UNC path provided in device string!
[  223.637418][T14011] 
[  223.641540][T14011] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  223.655375][ T9092] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0
[  223.661806][ T9092] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input32
[  223.673343][ T9092] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:3> initialized
[  223.831726][T13940] fuse: Bad value for 'user_id'
[  223.833387][T13940] fuse: Bad value for 'user_id'
[  223.835831][T13940] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  223.839026][T13940] SELinux: failed to load policy
[  223.847263][T13940] imon:send_packet: task interrupted
[  223.849369][T13940] imon:send_packet: packet tx failed (-512)
[  223.852086][T13940] imon:vfd_write: send packet #0 failed
[  223.854567][T13940] imon:send_packet: packet tx failed (-32)
[  223.856998][T13940] imon:vfd_write: send packet #0 failed
[  223.860150][ T9092] usb 12-1: USB disconnect, device number 3
[  224.348402][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'.
[  224.362457][T14028] bond2: entered promiscuous mode
[  224.373894][T14028] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.379862][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'.
[  224.414633][T14028] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.418718][T14028] bond2: (slave sit1): The slave device specified does not support setting the MAC address
[  224.424604][T14028] bond2: (slave sit1): Error -95 calling set_mac_address
[  224.545167][T14049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14049 comm=syz.7.2351
[  224.622494][   T40] audit: type=1400 audit(1772330015.092:835): avc:  denied  { nosuid_transition } for  pid=14055 comm="syz.6.2353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[  224.631223][   T40] audit: type=1400 audit(1772330015.092:836): avc:  denied  { transition } for  pid=14055 comm="syz.6.2353" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  224.648632][T14054] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  224.707455][T14064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.962946][T14097] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  224.976318][T14103] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  224.981757][T14103] netlink: 'syz.6.2369': attribute type 4 has an invalid length.
[  224.999038][T14103] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  225.061763][T14107] CIFS mount error: No usable UNC path provided in device string!
[  225.061763][T14107] 
[  225.066662][T14107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  225.258864][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2375'.
[  225.383546][T10492] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  225.452854][T14122] SELinux:  policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c
[  225.458359][T14122] SELinux: failed to load policy
[  225.478621][T14122] bond3 (unregistering): Released all slaves
[  225.495921][T14119] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2376'.
[  225.501599][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2376'.
[  225.533602][T10492] usb 12-1: Using ep0 maxpacket: 32
[  225.539216][T10492] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.544093][T10492] usb 12-1: config 0 has no interfaces?
[  225.549103][T10492] usb 12-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  225.554153][T10492] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.557978][T10492] usb 12-1: Product: syz
[  225.559893][T10492] usb 12-1: Manufacturer: syz
[  225.561731][T10492] usb 12-1: SerialNumber: syz
[  225.565509][T10492] usb 12-1: config 0 descriptor??
[  225.771403][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.775820][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.131561][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.143662][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.148793][T14161] binder: 14110:14161 ioctl c0306201 0 returned -14
[  226.223363][T14168] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  226.230355][T14168] overlayfs: overlapping lowerdir path
[  226.276788][T14171] netlink: 444 bytes leftover after parsing attributes in process `syz.4.2390'.
[  226.296623][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  226.296637][   T40] audit: type=1400 audit(1772330016.772:844): avc:  denied  { map } for  pid=14170 comm="syz.4.2390" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  226.309931][   T40] audit: type=1400 audit(1772330016.782:845): avc:  denied  { execute } for  pid=14170 comm="syz.4.2390" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  226.651384][T14146] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  226.658165][T14146] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  226.721059][T14185] netlink: 'syz.4.2395': attribute type 1 has an invalid length.
[  226.724869][T14146] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  226.724905][T14146] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  226.758787][T14185] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  226.763073][T14185] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  226.787558][T14146] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  226.790116][T14146] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  226.812084][T14186] gretap2: entered promiscuous mode
[  226.818873][T14186] bond3: (slave gretap2): making interface the new active one
[  226.822534][T14186] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  226.851271][T14146] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  226.853989][T14146] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  226.907053][   T40] audit: type=1400 audit(1772330017.382:846): avc:  denied  { read } for  pid=14193 comm="syz.4.2396" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  226.923340][   T40] audit: type=1400 audit(1772330017.392:847): avc:  denied  { open } for  pid=14193 comm="syz.4.2396" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  226.959755][T14200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2398'.
[  227.106377][T14212] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  227.270491][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'.
[  227.274790][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'.
[  227.530088][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'.
[  227.538508][T14240] : entered promiscuous mode
[  227.691222][   T40] audit: type=1400 audit(1772330018.162:848): avc:  denied  { setattr } for  pid=14249 comm="syz.2.2411" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  227.835752][T14267] erofs (device loop2): cannot find valid erofs superblock
[  228.154279][   T29] usb 12-1: USB disconnect, device number 4
[  228.399051][T14287] bridge0: port 1(ipvlan2) entered blocking state
[  228.402095][T14287] bridge0: port 1(ipvlan2) entered disabled state
[  228.405173][T14287] ipvlan2: entered allmulticast mode
[  228.407474][T14287] bridge0: entered allmulticast mode
[  228.411635][T14287] ipvlan2: left allmulticast mode
[  228.414006][T14287] bridge0: left allmulticast mode
[  228.449063][T14288] bridge0: port 1(ipvlan2) entered blocking state
[  228.451896][T14288] bridge0: port 1(ipvlan2) entered disabled state
[  228.455176][T14288] ipvlan2: entered allmulticast mode
[  228.457495][T14288] bridge0: entered allmulticast mode
[  228.461513][T14288] ipvlan2: left allmulticast mode
[  228.465550][T14288] bridge0: left allmulticast mode
[  228.579328][   T40] audit: type=1400 audit(1772330019.052:849): avc:  denied  { read } for  pid=14290 comm="syz.6.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  228.977979][T14319] xt_ecn: cannot match TCP bits for non-tcp packets
[  229.011582][T14323] netlink: 'syz.4.2432': attribute type 2 has an invalid length.
[  229.066310][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.070106][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.074216][   T50] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  229.076358][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.082851][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.233499][   T50] usb 7-1: Using ep0 maxpacket: 32
[  229.236986][   T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.241959][   T50] usb 7-1: config 0 has no interfaces?
[  229.246373][   T50] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  229.250280][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.253645][   T50] usb 7-1: Product: syz
[  229.255611][   T50] usb 7-1: Manufacturer: syz
[  229.257636][   T50] usb 7-1: SerialNumber: syz
[  229.264920][   T50] usb 7-1: config 0 descriptor??
[  229.638578][T14351] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  229.640906][T14351] [U] J"�e:��"


[  230.063681][T14360] xt_hashlimit: invalid rate
[  230.069194][T14360] sock: sock_timestamping_bind_phc: sock not bind to device
[  230.096494][T14360] __nla_validate_parse: 3 callbacks suppressed
[  230.096512][T14360] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2443'.
[  230.112259][T14363] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2444'.
[  230.175555][T14372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.181322][T14372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.184158][   T40] audit: type=1400 audit(1772330020.652:850): avc:  denied  { getopt } for  pid=14371 comm="syz.6.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  230.441629][   T40] audit: type=1400 audit(1772330020.912:851): avc:  denied  { mount } for  pid=14388 comm="syz.4.2452" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  230.451381][T10492] usb 11-1: new full-speed USB device number 2 using dummy_hcd
[  230.499494][T14393] fuse: Bad value for 'fd'
[  230.563585][ T6684] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0
[  230.614645][T10492] usb 11-1: not running at top speed; connect to a high speed hub
[  230.618154][T10492] usb 11-1: config 1 interface 0 altsetting 252 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  230.621894][T10492] usb 11-1: config 1 interface 0 altsetting 252 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.625831][T10492] usb 11-1: config 1 interface 0 has no altsetting 0
[  230.629814][T10492] usb 11-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  230.632950][T10492] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.635758][T10492] usb 11-1: Product: 蒼﾿逵푂삡ꏱ킳Ϭ諬튱⫼⏯䤸捲莯ᾊ꧗둥畜㤾챑䌤ર瞮説ᒎ⫔퟊섚྿냷⍤턇顷疢퇱뽈荑덎ᕛ‵䀘ꗩꪐ溸ڽဧ຦ꛎꄸ㩹چ➡ﺎ癿⌃䋍꣭ἴϪ໳譹溜ꑔ鎩┠䰑疉ꅡꥒ먕黐㱅촕ᯑ㼓ꌎ壸濢㍒翍쑾໊Ɜ噺뽱彘刵ꑥṊᰃ⏁㑸晝靐陿
[  230.646452][T10492] usb 11-1: Manufacturer: 狵ࠎ聗쐜ꉅ擄ࡶ輖㖫띠瀻Ȫ䕶諈㥦婯뛾ᾰ닚ꁍ᎟鄔＝朐퇯ᇬࠏﮋ抡ꫀ뉭둇蛡占㪠䭕䚙Ⲫ膮ূ釖ꛒ盍瑖⟊鑹䵰拁몈᥻蘖꟏襚桘黧ᯔ삗㬮颧窞먳㴝동蚶쇍り訑橷裱都䮇涪惐閵젉섒㸉ᵆ苪청䐛怣艮疞巙꠻姐⡂誎䀑樭ᮡ䯗옵靄鮷㾆䧐㫌鳃枠ś
[  230.657836][T10492] usb 11-1: SerialNumber: љ
[  230.664497][T14373] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  231.079029][T10492] usblp 11-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 252 proto 2 vid 0x04B8 pid 0x0202
[  231.088602][T10492] usb 11-1: USB disconnect, device number 2
[  231.092236][T10492] usblp0: removed
[  231.673940][   T40] audit: type=1400 audit(1772330022.152:852): avc:  denied  { connect } for  pid=14400 comm="syz.6.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  231.680631][   T40] audit: type=1400 audit(1772330022.152:853): avc:  denied  { read } for  pid=14400 comm="syz.6.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  231.839154][  T828] usb 7-1: USB disconnect, device number 24
[  232.140246][T14416] netlink: 'syz.2.2460': attribute type 39 has an invalid length.
[  232.147613][T14416] bridge0: port 3(syz_tun) entered disabled state
[  232.160981][T14416] syz_tun (unregistering): left allmulticast mode
[  232.165069][T14416] syz_tun (unregistering): left promiscuous mode
[  232.167958][T14416] bridge0: port 3(syz_tun) entered disabled state
[  232.198911][T14417] sp0: Synchronizing with TNC
[  232.534564][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2464'.
[  232.578824][T14425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  232.633639][ T9092] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  232.643752][ T5940] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  232.658993][  T838] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  232.700213][T14439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14439 comm=syz.4.2468
[  232.706677][T14439] QAT: failed to copy from user cfg_data.
[  232.797386][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'.
[  232.800529][T14443] netlink: 'syz.4.2470': attribute type 30 has an invalid length.
[  232.807877][ T6710] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.809252][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'.
[  232.810937][ T6710] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.816432][T14443] netlink: 'syz.4.2470': attribute type 30 has an invalid length.
[  232.817411][ T6710] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.822974][ T6710] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.833740][  T838] usb 12-1: Using ep0 maxpacket: 32
[  232.837162][  T838] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.840645][  T838] usb 12-1: config 0 has no interfaces?
[  232.845448][  T838] usb 12-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  232.849175][  T838] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.851854][  T838] usb 12-1: Product: syz
[  232.853292][  T838] usb 12-1: Manufacturer: syz
[  232.855565][  T838] usb 12-1: SerialNumber: syz
[  232.859868][  T838] usb 12-1: config 0 descriptor??
[  232.977282][   T40] audit: type=1400 audit(1772330023.452:854): avc:  denied  { ioctl } for  pid=14448 comm="syz.6.2472" path="socket:[56218]" dev="sockfs" ino=56218 ioctlcmd=0x8b25 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  233.071378][T14466] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2476'.
[  233.074510][T14428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.078693][T14428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.275879][   T40] audit: type=1800 audit(1772330023.742:855): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2482" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  233.437537][T14509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.441246][T14509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.469606][T14511] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  233.475830][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  233.543833][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  233.603658][T10492] usb 9-1: new low-speed USB device number 25 using dummy_hcd
[  233.607782][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  233.611098][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  233.683624][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  233.686181][   T40] audit: type=1400 audit(1772330024.162:856): avc:  denied  { bind } for  pid=14520 comm="syz.2.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  233.743659][T10492] usb 9-1: device descriptor read/64, error -32
[  233.864429][T10492] raw-gadget.0 gadget.4: failed to queue suspend event
[  233.867847][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  233.945939][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  234.007287][T10492] usb 9-1: new low-speed USB device number 26 using dummy_hcd
[  234.010480][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  234.013753][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  234.093620][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  234.157217][T14536] ubi31: attaching mtd0
[  234.161765][T14536] ubi31: scanning is finished
[  234.163497][T10492] usb 9-1: device descriptor read/64, error -32
[  234.164247][T14536] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  234.235231][T14536] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  234.273579][T10492] raw-gadget.0 gadget.4: failed to queue suspend event
[  234.276635][T10492] usb usb9-port1: attempt power cycle
[  234.279069][T10492] raw-gadget.0 gadget.4: failed to queue disconnect event
[  234.282371][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  234.307432][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2499'.
[  234.353831][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  234.363817][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  234.406879][T14545] dlm: plock device version mismatch: kernel (1.2.0), user (8.7.4)
[  234.599675][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  234.655383][T10492] usb 9-1: new low-speed USB device number 27 using dummy_hcd
[  234.673752][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  234.676706][T10492] usb 9-1: device descriptor read/8, error -32
[  234.783508][T10492] raw-gadget.0 gadget.4: failed to queue suspend event
[  234.789503][T10492] raw-gadget.0 gadget.4: failed to queue reset event
[  234.863765][T10492] raw-gadget.0 gadget.4: failed to queue resume event
[  234.931069][T14565] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  234.933526][T10492] usb 9-1: new low-speed USB device number 28 using dummy_hcd
[  234.953870][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  234.956430][T10492] usb 9-1: device descriptor read/8, error -32
[  235.051245][T14580] fuse: Unknown parameter '���Ehy�a�y/s!^�vc���D
[  235.051245][T14580] �-��>D�'
[  235.056632][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'.
[  235.059595][T14578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2510'.
[  235.063522][T10492] raw-gadget.0 gadget.4: failed to queue suspend event
[  235.073818][T10492] usb usb9-port1: unable to enumerate USB device
[  235.250976][   T40] audit: type=1400 audit(1772330025.722:857): avc:  denied  { accept } for  pid=14606 comm="syz.2.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  235.291004][T14611] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  235.297624][   T40] audit: type=1400 audit(1772330025.772:858): avc:  denied  { ioctl } for  pid=14610 comm="syz.6.2518" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  235.447187][   T54] usb 12-1: USB disconnect, device number 5
[  235.600633][   T40] audit: type=1400 audit(1772330026.072:859): avc:  denied  { accept } for  pid=14631 comm="syz.7.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  235.785653][T14666] veth0: entered promiscuous mode
[  235.789982][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'.
[  236.023498][   T54] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  236.046727][   T40] audit: type=1326 audit(1772330026.522:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14669 comm="syz.7.2538" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4d02d96517 code=0x0
[  236.059228][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'.
[  236.069981][T14679] mkiss: ax0: crc mode is auto.
[  236.193504][   T54] usb 7-1: Using ep0 maxpacket: 32
[  236.197272][   T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.200823][   T54] usb 7-1: config 0 has no interfaces?
[  236.204165][   T54] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  236.207353][   T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.210007][   T54] usb 7-1: Product: syz
[  236.211421][   T54] usb 7-1: Manufacturer: syz
[  236.213011][   T54] usb 7-1: SerialNumber: syz
[  236.216731][   T54] usb 7-1: config 0 descriptor??
[  236.257859][T14685] netlink: 'syz.4.2545': attribute type 10 has an invalid length.
[  236.262032][T14685] bond0: (slave wlan1): Opening slave failed
[  236.307459][T14687] QAT: Device 2 not found
[  236.416719][T14690] netlink: 'syz.6.2547': attribute type 39 has an invalid length.
[  236.430480][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.434730][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.789879][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.799141][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.852083][T14704] bond2: Removing last arp target with arp_interval on
[  236.987115][T14711] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  237.568779][   T40] audit: type=1400 audit(1772330028.042:861): avc:  denied  { read } for  pid=14716 comm="syz.4.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  237.582148][   T40] audit: type=1400 audit(1772330028.052:862): avc:  denied  { execute } for  pid=14716 comm="syz.4.2558" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=60606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  238.507340][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.511331][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.553757][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.557547][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.561472][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.615368][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.619172][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.622858][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.647869][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.651767][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.673768][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.677617][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.681416][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.693714][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.697496][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.701166][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.714065][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.723787][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.727678][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.731649][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.735770][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.738762][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.741628][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.745365][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.748730][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.752251][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.756230][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.759607][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.796701][T10492] usb 7-1: USB disconnect, device number 26
[  238.811796][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.818326][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.822108][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  238.826194][T14742] fuse: Unknown parameter 'u��E�ݖ!Tu���#R��~Wj�r�'��OeK�aW�@���K'
[  239.006938][T14750] xt_l2tp: missing protocol rule (udp|l2tpip)
[  239.119739][  T828] libceph: connect (1)[c::]:6789 error -101
[  239.121886][  T828] libceph: mon0 (1)[c::]:6789 connect error
[  239.257072][T14773] veth1_macvtap: left promiscuous mode
[  239.259497][T14773] macsec0: entered promiscuous mode
[  239.261623][T14773] macsec0: entered allmulticast mode
[  239.271565][T14773] veth1_macvtap: entered promiscuous mode
[  239.276232][T14773] veth1_macvtap: entered allmulticast mode
[  239.279986][T14773] macsec0: left promiscuous mode
[  239.281916][T14773] macsec0: left allmulticast mode
[  239.283788][T14773] veth1_macvtap: left allmulticast mode
[  239.287019][T14775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2576'.
[  239.296971][T14777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2576'.
[  239.300106][T14772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.384890][  T828] libceph: connect (1)[c::]:6789 error -101
[  239.389926][  T828] libceph: mon0 (1)[c::]:6789 connect error
[  239.443552][   T40] audit: type=1400 audit(1772330029.902:863): avc:  denied  { kexec_image_load } for  pid=14712 comm="syz.6.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  239.501851][T14789] binder: BINDER_SET_CONTEXT_MGR already set
[  239.508044][T14789] binder: 14788:14789 ioctl 4018620d 200000000100 returned -16
[  239.544892][T14797] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  239.547755][T14797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  239.618889][T14801] netlink: 'syz.4.2584': attribute type 4 has an invalid length.
[  239.667767][T14803] x_tables: duplicate underflow at hook 3
[  239.700945][T14808] netlink: 'syz.4.2586': attribute type 15 has an invalid length.
[  239.705576][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'.
[  239.728887][   T43] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  239.729010][T14808] netlink: 'syz.4.2586': attribute type 15 has an invalid length.
[  239.735422][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'.
[  239.742641][T14807] ALSA: mixer_oss: invalid OSS volume ';�'
[  239.743750][   T62] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  239.748208][   T62] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  239.750881][   T62] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  239.754623][   T40] audit: type=1326 audit(1772330030.232:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14812 comm="syz.6.2587" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f380479c799 code=0x0
[  239.903852][  T828] libceph: connect (1)[c::]:6789 error -101
[  239.906759][  T828] libceph: mon0 (1)[c::]:6789 connect error
[  239.929982][   T40] audit: type=1400 audit(1772330030.402:865): avc:  denied  { getopt } for  pid=14819 comm="syz.4.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  240.021587][T14766] ceph: No mds server is up or the cluster is laggy
[  240.476938][   T40] audit: type=1400 audit(1772330030.952:866): avc:  denied  { ioctl } for  pid=14843 comm="syz.2.2595" path="socket:[58037]" dev="sockfs" ino=58037 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  240.488045][   T40] audit: type=1400 audit(1772330030.962:867): avc:  denied  { setattr } for  pid=14843 comm="syz.2.2595" name="KEY" dev="sockfs" ino=58037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  240.666000][T14851] Bluetooth: hci0: load_link_keys: too big key_count value 9472
[  240.697646][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2598'.
[  240.719435][   T40] audit: type=1400 audit(1772330031.192:868): avc:  denied  { lock } for  pid=14854 comm="syz.2.2599" path="socket:[60826]" dev="sockfs" ino=60826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  240.729137][   T40] audit: type=1400 audit(1772330031.202:869): avc:  denied  { accept } for  pid=14854 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  240.945867][   T40] audit: type=1400 audit(1772330031.422:870): avc:  denied  { mounton } for  pid=14862 comm="syz.6.2602" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  240.947944][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  240.953230][T14865] bridge2: entered promiscuous mode
[  240.984499][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  240.988020][T14864] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  240.990910][T14864] UDF-fs: Scanning with blocksize 512 failed
[  240.996705][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  241.000935][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  241.011235][T14864] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  241.020745][T14864] UDF-fs: Scanning with blocksize 1024 failed
[  241.023277][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  241.027981][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  241.031395][T14864] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  241.035226][T14864] UDF-fs: Scanning with blocksize 2048 failed
[  241.037589][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  241.040745][T14864] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  241.045203][T14864] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found
[  241.048547][T14864] UDF-fs: Scanning with blocksize 4096 failed
[  241.051260][T14864] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1)
[  241.182699][T14875] dvmrp0: entered allmulticast mode
[  241.323679][   T29] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  241.473561][   T29] usb 12-1: Using ep0 maxpacket: 32
[  241.476698][   T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.479976][   T29] usb 12-1: config 0 has no interfaces?
[  241.483312][   T29] usb 12-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  241.493480][   T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.496645][   T29] usb 12-1: Product: syz
[  241.498230][   T29] usb 12-1: Manufacturer: syz
[  241.500200][   T29] usb 12-1: SerialNumber: syz
[  241.513670][   T29] usb 12-1: config 0 descriptor??
[  241.518625][T14882] ip6t_srh: unknown srh invflags 51E8
[  241.764004][T10492] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  241.916049][T10492] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.921060][T10492] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.925766][T10492] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  241.931489][T10492] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  241.935984][T10492] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.943632][T10492] usb 11-1: config 0 descriptor??
[  242.137117][T14898] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  242.238262][T14903] exFAT-fs (nbd2): unable to read boot sector
[  242.240490][T14903] exFAT-fs (nbd2): failed to read boot sector
[  242.242824][T14903] exFAT-fs (nbd2): failed to recognize exfat type
[  242.351525][T10492] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[  242.363478][T10492] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  242.400442][T14918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2618'.
[  242.426402][T14921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.429758][T14921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.808060][   T34] usb 11-1: USB disconnect, device number 3
[  243.282202][T14942] netlink: 'syz.6.2623': attribute type 5 has an invalid length.
[  244.090541][T10492] usb 12-1: USB disconnect, device number 6
[  244.170252][T14960] netlink: 'syz.6.2630': attribute type 1 has an invalid length.
[  244.197738][T14960] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.208658][T14960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14960 comm=syz.6.2630
[  244.290376][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  244.290392][   T40] audit: type=1400 audit(1772330034.762:874): avc:  denied  { map } for  pid=14979 comm="syz.6.2636" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  244.303502][   T40] audit: type=1400 audit(1772330034.762:875): avc:  denied  { execute } for  pid=14979 comm="syz.6.2636" path="/proc/asound/seq/clients" dev="proc" ino=4026532343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
[  244.311045][T14980] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2636'.
[  244.359574][T14985] xt_nat: multiple ranges no longer supported
[  244.435280][T14989] IPv6: NLM_F_CREATE should be specified when creating new route
[  244.439466][T14989] comedi comedi2: comedi_config --init_data is deprecated
[  244.544201][T10492] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  244.663652][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'.
[  244.667091][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.676136][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.679240][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.682285][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.685583][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.688693][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.691752][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'.
[  244.694852][T10492] usb 12-1: Using ep0 maxpacket: 32
[  244.699353][T10492] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.702761][T10492] usb 12-1: config 0 has no interfaces?
[  244.710006][T10492] usb 12-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  244.712982][T10492] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.715802][T10492] usb 12-1: Product: syz
[  244.717169][T10492] usb 12-1: Manufacturer: syz
[  244.718575][T10492] usb 12-1: SerialNumber: syz
[  244.721606][T10492] usb 12-1: config 0 descriptor??
[  244.933134][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.938647][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.217980][   T40] audit: type=1400 audit(1772330035.692:876): avc:  denied  { mounton } for  pid=15026 comm="syz.6.2652" path="/192/file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  245.226265][   T40] audit: type=1400 audit(1772330035.702:877): avc:  denied  { append } for  pid=15026 comm="syz.6.2652" name="file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  245.234062][   T40] audit: type=1400 audit(1772330035.712:878): avc:  denied  { lock } for  pid=15026 comm="syz.6.2652" path="/192/file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  245.294762][T15032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.303519][T15032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.529690][T15044] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  245.578243][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.584714][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.588678][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.592097][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.612798][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.616873][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.625460][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.630025][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.634347][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.637650][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.641482][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.645358][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.688059][   T40] audit: type=1400 audit(1772330036.162:879): avc:  denied  { remount } for  pid=15056 comm="syz.4.2659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  245.688218][T15057] devtmpfs: Cannot change global quota limit on remount
[  245.720720][   T40] audit: type=1400 audit(1772330036.192:880): avc:  denied  { unmount } for  pid=8816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  245.752610][T15059] futex_wake_op: syz.4.2660 tries to shift op by -1; fix this program
[  245.773184][T15061] overlayfs: conflicting options: userxattr,metacopy=on
[  245.840948][T15064] i2c i2c-1: Invalid block write size 34
[  245.915706][T10492] IPVS: starting estimator thread 0...
[  245.947490][T15076] bridge3: port 1(veth5) entered blocking state
[  245.949698][T15076] bridge3: port 1(veth5) entered disabled state
[  245.951853][T15076] veth5: entered allmulticast mode
[  245.954748][T15076] veth5: entered promiscuous mode
[  246.013823][T15077] IPVS: using max 28 ests per chain, 67200 per kthread
[  246.201121][T15102] nbd: must specify at least one socket
[  246.306838][T15114] netlink: 'syz.6.2677': attribute type 7 has an invalid length.
[  246.465615][T15132] netlink: 'syz.4.2682': attribute type 4 has an invalid length.
[  246.468630][T15132] netlink: 'syz.4.2682': attribute type 4 has an invalid length.
[  246.570841][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.575638][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.631077][T15144] netlink: 'syz.2.2686': attribute type 1 has an invalid length.
[  246.650777][T15144] 8021q: adding VLAN 0 to HW filter on device bond4
[  246.664881][T15153] overlay: Unknown parameter 'smackfsdef'
[  246.740512][T15161] openvswitch: netlink: Missing valid actions attribute.
[  246.743837][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.804248][ T1024] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  246.851371][T15168] netlink: 'syz.2.2694': attribute type 10 has an invalid length.
[  246.920266][T15173] netlink: 'syz.2.2696': attribute type 39 has an invalid length.
[  246.924160][T15173] veth0_macvtap: left promiscuous mode
[  246.924976][   T40] audit: type=1400 audit(1772330037.402:881): avc:  denied  { connect } for  pid=15174 comm="syz.4.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  247.003852][T15183] sctp: [Deprecated]: syz.4.2699 (pid 15183) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.003852][T15183] Use struct sctp_sack_info instead
[  247.257538][ T6013] usb 12-1: USB disconnect, device number 7
[  247.353276][   T40] audit: type=1400 audit(1772330037.822:882): avc:  denied  { map } for  pid=15197 comm="syz.7.2704" path="socket:[63518]" dev="sockfs" ino=63518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  247.400826][T15201] netlink: 'syz.7.2705': attribute type 21 has an invalid length.
[  247.404221][T15201] __nla_validate_parse: 39 callbacks suppressed
[  247.404230][T15201] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2705'.
[  247.520049][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.524442][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.644683][T15218] lo speed is unknown, defaulting to 1000
[  247.647191][T15218] lo speed is unknown, defaulting to 1000
[  247.651618][T15218] lo speed is unknown, defaulting to 1000
[  247.658588][T15218] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  247.668756][T15218] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  247.697683][T15218] lo speed is unknown, defaulting to 1000
[  247.701688][T15218] lo speed is unknown, defaulting to 1000
[  247.705928][T15218] lo speed is unknown, defaulting to 1000
[  247.711745][T15218] lo speed is unknown, defaulting to 1000
[  247.714792][T15218] lo speed is unknown, defaulting to 1000
[  247.810305][   T40] audit: type=1400 audit(1772330038.282:883): avc:  denied  { node_bind } for  pid=15223 comm="syz.6.2714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  247.873788][ T1024] usb 7-1: device descriptor read/64, error -71
[  247.902499][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2716'.
[  247.928227][T15231] bond4: entered promiscuous mode
[  247.930802][T15231] 8021q: adding VLAN 0 to HW filter on device bond4
[  248.049209][T15237] binder: BINDER_SET_CONTEXT_MGR already set
[  248.051305][T15237] binder: 15236:15237 ioctl 4018620d 2000000002c0 returned -16
[  248.123540][ T1024] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  248.132904][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'.
[  248.137019][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'.
[  248.273806][ T1024] usb 7-1: device descriptor read/64, error -71
[  248.384347][ T1024] usb usb7-port1: attempt power cycle
[  248.723897][ T1024] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  248.754824][ T1024] usb 7-1: device descriptor read/8, error -71
[  249.013752][ T1024] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  249.043928][ T1024] usb 7-1: device descriptor read/8, error -71
[  249.153808][ T1024] usb usb7-port1: unable to enumerate USB device
[  249.297150][T15273] mkiss: ax0: crc mode is auto.
[  249.431698][T15278] uprobe: syz.4.2730:15278 failed to unregister, leaking uprobe
[  249.436374][T15278] netlink: 'syz.4.2730': attribute type 1 has an invalid length.
[  249.452587][T15278] 8021q: adding VLAN 0 to HW filter on device bond4
[  249.460775][T15278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15278 comm=syz.4.2730
[  249.493868][T15278] bond4: (slave veth1): Enslaving as an active interface with a down link
[  249.502494][T15278] Cannot find set identified by id 65534 to match
[  249.508140][T15278] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  249.510696][T15278] [U] J"�e:��"


[  249.699413][T15291] loop1: detected capacity change from 0 to 4
[  249.705513][ T6029] Dev loop1: unable to read RDB block 4
[  249.707998][ T6029]  loop1: unable to read partition table
[  249.710114][ T6029] loop1: partition table beyond EOD, truncated
[  249.717552][T15291] Dev loop1: unable to read RDB block 4
[  249.719446][T15291]  loop1: unable to read partition table
[  249.721381][T15291] loop1: partition table beyond EOD, truncated
[  249.723617][T15291] loop_reread_partitions: partition scan of loop1 (�被x������ ) failed (rc=-5)
[  249.799112][T15295] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2737'.
[  249.802861][T15295] 9p: Unknown access argument 18446744073709551615� : -22
[  249.927230][T15303] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2740'.
[  249.982075][   T40] audit: type=1400 audit(1772330040.452:884): avc:  denied  { watch } for  pid=15304 comm="syz.4.2741" path="/513/file0" dev="tmpfs" ino=2730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  250.257453][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2743'.
[  250.490623][T15315] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  250.495596][T15315] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  250.551024][T15319] /dev/sg0: Can't lookup blockdev
[  250.737661][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2750'.
[  250.784504][T15339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.788414][T15339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.795126][T15339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.799441][T15339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.806307][T15339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.809871][T15339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.488902][T15343] CUSE: unknown device info "�<�5����<Z�j5������9�$�+��r�(�0X�8"
[  251.491982][T15343] CUSE: unknown device info "eQ���mŀ%���P;T������38R�2߫Jg���$�O��k�J�;fA��v#ܗ�5��i�R/Ab?`W4���w�F��odADxa�*��"
[  251.497091][T15343] CUSE: unknown device info "��dP�"
[  251.499244][T15343] CUSE: unknown device info "O{S�n`�����W�A{����F4Q���>�\���
�z��0z,~XY�+A}s��F'%���:�Ij!�@�Q��mߑR��GQ��q6*�5p)�x�?,"
[  251.504429][T15343] CUSE: unknown device info "��&b��%Z��W��)��3\my�	��"
[  251.506757][T15343] CUSE: unknown device info "ҭS��������mM��i�_��0˱�ݯ;q�]�{�i��79�{�0Ե�t��~��>V����Z�\�.9��OC����U�&�q����msf�k��c��""
[  251.511293][T15343] CUSE: DEVNAME unspecified
[  251.624226][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  251.667176][T15351] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  251.671380][   T40] audit: type=1400 audit(1772330042.142:885): avc:  denied  { relabelto } for  pid=15350 comm="syz.2.2756" name="263" dev="tmpfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  251.682722][   T40] audit: type=1400 audit(1772330042.142:886): avc:  denied  { associate } for  pid=15350 comm="syz.2.2756" name="263" dev="tmpfs" ino=1391 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[  251.705183][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  251.724578][   T40] audit: type=1400 audit(1772330042.202:887): avc:  denied  { remove_name } for  pid=12264 comm="syz-executor" name="file0" dev="tmpfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  251.735920][   T40] audit: type=1400 audit(1772330042.202:888): avc:  denied  { rmdir } for  pid=12264 comm="syz-executor" name="263" dev="tmpfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  251.746958][T15357] Bluetooth: MGMT ver 1.23
[  251.775367][   T54] usb 9-1: new low-speed USB device number 29 using dummy_hcd
[  251.778979][    C3] raw-gadget.0 gadget.4: ignoring, device is not running
[  251.782088][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  251.853573][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  251.923656][   T54] usb 9-1: device descriptor read/64, error -32
[  252.033620][   T54] raw-gadget.0 gadget.4: failed to queue suspend event
[  252.036048][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  252.084626][ T6013] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  252.113842][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  252.173599][   T54] usb 9-1: new low-speed USB device number 30 using dummy_hcd
[  252.176559][    C3] raw-gadget.0 gadget.4: ignoring, device is not running
[  252.178969][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  252.243767][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  252.244951][ T6013] usb 7-1: config index 0 descriptor too short (expected 45885, got 36)
[  252.249248][ T6013] usb 7-1: config 99 has too many interfaces: 211, using maximum allowed: 32
[  252.252102][ T6013] usb 7-1: config 99 has an invalid descriptor of length 158, skipping remainder of the config
[  252.256093][ T6013] usb 7-1: config 99 has 0 interfaces, different from the descriptor's value: 211
[  252.259199][ T6013] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  252.262212][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.303479][   T54] usb 9-1: device descriptor read/64, error -32
[  252.413653][   T54] raw-gadget.0 gadget.4: failed to queue suspend event
[  252.416457][   T54] usb usb9-port1: attempt power cycle
[  252.418651][   T54] raw-gadget.0 gadget.4: failed to queue disconnect event
[  252.421644][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  252.493684][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  252.496222][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  252.704669][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  252.763516][   T54] usb 9-1: new low-speed USB device number 31 using dummy_hcd
[  252.783861][    C3] raw-gadget.0 gadget.4: ignoring, device is not running
[  252.786644][   T54] usb 9-1: device descriptor read/8, error -32
[  252.894058][   T54] raw-gadget.0 gadget.4: failed to queue suspend event
[  252.897344][   T54] raw-gadget.0 gadget.4: failed to queue reset event
[  252.965372][   T54] raw-gadget.0 gadget.4: failed to queue resume event
[  253.023556][   T54] usb 9-1: new low-speed USB device number 32 using dummy_hcd
[  253.044785][    C3] raw-gadget.0 gadget.4: ignoring, device is not running
[  253.047716][   T54] usb 9-1: device descriptor read/8, error -32
[  253.154490][   T54] raw-gadget.0 gadget.4: failed to queue suspend event
[  253.157661][   T54] usb usb9-port1: unable to enumerate USB device
[  253.301710][  T828] hid-generic 0004:0006:0002.0006: item fetching failed at offset 1/2
[  253.305625][  T828] hid-generic 0004:0006:0002.0006: probe with driver hid-generic failed with error -22
[  254.285084][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.287985][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.291915][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.295711][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.810172][ T6013] usb 7-1: string descriptor 0 read error: -71
[  254.819251][ T6013] usb 7-1: USB disconnect, device number 32
[  254.832035][T15417] dlm: no local IP address has been set
[  254.836649][T15417] dlm: cannot start dlm midcomms -107
[  254.873999][T15424] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication
[  254.969620][   T40] audit: type=1400 audit(1772330045.442:889): avc:  denied  { setopt } for  pid=15430 comm="syz.7.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  254.994933][T15431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  254.999251][T15431] block device autoloading is deprecated and will be removed.
[  255.115411][T15441] futex_wake_op: syz.2.2782 tries to shift op by 32; fix this program
[  255.149584][T15439] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2783'.
[  255.201660][   T40] audit: type=1326 audit(1772330045.672:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.7.2784" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d02d9c799 code=0x0
[  255.238641][T15443] can0: slcan on ttyS3.
[  255.323924][T15443] can0 (unregistered): slcan off ttyS3.
[  255.533212][T15484] netlink: get zone limit has 4 unknown bytes
[  255.546887][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'.
[  255.553697][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'.
[  255.576318][T15484] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2793'.
[  255.622215][T15489] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2794'.
[  255.801376][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'.
[  255.806032][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'.
[  255.967178][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.970377][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.983670][T15520] netlink: 'syz.2.2803': attribute type 2 has an invalid length.
[  256.151608][T15529] (syz.7.2806,15529,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  256.151713][   T40] audit: type=1400 audit(1772330046.622:891): avc:  denied  { create } for  pid=15528 comm="syz.7.2806" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  256.273627][   T34] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  256.423503][   T34] usb 7-1: Using ep0 maxpacket: 32
[  256.427131][   T34] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  256.430596][   T34] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  256.434662][   T34] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  256.438174][   T34] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  256.443558][   T54] usb 12-1: new full-speed USB device number 8 using dummy_hcd
[  256.447391][   T34] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  256.450388][   T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.453200][   T34] usb 7-1: Product: syz
[  256.454733][   T34] usb 7-1: Manufacturer: syz
[  256.456292][   T34] usb 7-1: SerialNumber: syz
[  256.464055][    C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  256.468195][   T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input34
[  256.595621][   T54] usb 12-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  256.599466][   T54] usb 12-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.602777][   T54] usb 12-1: config 0 interface 0 has no altsetting 0
[  256.605896][   T54] usb 12-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  256.609173][   T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.622129][   T54] usb 12-1: config 0 descriptor??
[  256.703554][   T34] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  256.706516][   T34]  (id 0x00)
[  256.763804][   T34] rc_core: IR keymap rc-imon-pad not found
[  256.765835][   T34] Registered IR keymap rc-empty
[  256.767995][   T34] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  256.771611][   T34] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  256.904239][   T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0
[  256.909410][   T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input35
[  256.916267][   T34] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:33> initialized
[  256.951105][T15552] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2811'.
[  257.030913][   T54] hid-steam 0003:28DE:1102.0007: item fetching failed at offset 3/5
[  257.035236][   T54] hid-steam 0003:28DE:1102.0007: steam_probe:parse of hid interface failed
[  257.038719][   T54] hid-steam 0003:28DE:1102.0007: probe with driver hid-steam failed with error -22
[  257.644033][   T54] usb 7-1: USB disconnect, device number 33
[  257.646612][T15554] imon:send_packet: packet tx failed (-71)
[  257.673672][T15554] imon:vfd_write: send packet #0 failed
[  257.745424][T10492] usb 12-1: USB disconnect, device number 8
[  257.974055][T15567] loop6: detected capacity change from 0 to 7
[  257.978238][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  257.982065][    C0] buffer_io_error: 14 callbacks suppressed
[  257.982075][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  257.988754][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  257.991919][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  257.995284][   T54] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  258.001044][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.005349][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.009043][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.012188][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.025590][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.029625][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.085818][T15566] 
[  258.086983][T15566] ======================================================
[  258.090157][T15566] WARNING: possible circular locking dependency detected
[  258.093311][T15566] syzkaller #0 Tainted: G             L     
[  258.096072][T15566] ------------------------------------------------------
[  258.099109][T15566] syz.4.2815/15566 is trying to acquire lock:
[  258.101749][T15566] ffff88801caf6a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0
[  258.105986][T15566] 
[  258.105986][T15566] but task is already holding lock:
[  258.109115][T15566] ffff888028648060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  258.113902][T15566] 
[  258.113902][T15566] which lock already depends on the new lock.
[  258.113902][T15566] 
[  258.118786][T15566] 
[  258.118786][T15566] the existing dependency chain (in reverse order) is:
[  258.121892][T15566] 
[  258.121892][T15566] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}:
[  258.124847][T15566]        blk_alloc_queue+0x610/0x790
[  258.126747][T15566]        blk_mq_alloc_queue+0x174/0x290
[  258.128749][T15566]        __blk_mq_alloc_disk+0x29/0x120
[  258.131177][T15566]        loop_add+0x498/0xb60
[  258.133292][T15566]        loop_init+0x1d3/0x200
[  258.135594][T15566]        do_one_initcall+0x11d/0x760
[  258.137722][T15566]        kernel_init_freeable+0x6e5/0x7a0
[  258.139974][T15566]        kernel_init+0x1f/0x1e0
[  258.142090][T15566]        ret_from_fork+0x754/0xd80
[  258.144294][T15566]        ret_from_fork_asm+0x1a/0x30
[  258.146648][T15566] 
[  258.146648][T15566] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  258.149988][T15566]        fs_reclaim_acquire+0xc4/0x100
[  258.152434][T15566]        kmem_cache_alloc_noprof+0x4c/0x6e0
[  258.155002][T15566]        __kernfs_iattrs+0x126/0x400
[  258.157294][T15566]        __kernfs_setattr+0x4d/0x3c0
[  258.159682][T15566]        kernfs_iop_setattr+0xda/0x130
[  258.161797][T15566]        notify_change+0xb25/0x1330
[  258.163729][T15566]        do_truncate+0x1df/0x240
[  258.165531][T15566]        path_openat+0x2a55/0x31a0
[  258.167341][T15566]        do_file_open+0x20e/0x430
[  258.169132][T15566]        do_sys_openat2+0x10d/0x1e0
[  258.170956][T15566]        __x64_sys_openat+0x12d/0x210
[  258.172747][T15566]        do_syscall_64+0x106/0xf80
[  258.174492][T15566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.176722][T15566] 
[  258.176722][T15566] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  258.179681][T15566]        __lock_acquire+0x14b8/0x2630
[  258.181692][T15566]        lock_acquire+0x1cf/0x380
[  258.183595][   T54] usb 7-1: Using ep0 maxpacket: 32
[  258.183691][T15566]        down_read+0x99/0x460
[  258.187412][T15566]        kernfs_iop_getattr+0x9c/0xf0
[  258.189337][T15566]        vfs_getattr_nosec+0x2d4/0x430
[  258.191422][T15566]        vfs_getattr+0x4a/0x60
[  258.193786][T15566]        loop_query_min_dio_size.isra.0+0x117/0x250
[  258.196831][T15566]        lo_ioctl+0x13aa/0x1bc0
[  258.199133][T15566]        blkdev_ioctl+0x5ad/0x6f0
[  258.201472][T15566]        __x64_sys_ioctl+0x18e/0x210
[  258.203796][T15566]        do_syscall_64+0x106/0xf80
[  258.205850][T15566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.208558][T15566] 
[  258.208558][T15566] other info that might help us debug this:
[  258.208558][T15566] 
[  258.212077][T15566] Chain exists of:
[  258.212077][T15566]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23
[  258.212077][T15566] 
[  258.217057][T15566]  Possible unsafe locking scenario:
[  258.217057][T15566] 
[  258.219661][T15566]        CPU0                    CPU1
[  258.221805][T15566]        ----                    ----
[  258.223698][T15566]   lock(&q->q_usage_counter(io)#23);
[  258.225883][T15566]                                lock(fs_reclaim);
[  258.228179][T15566]                                lock(&q->q_usage_counter(io)#23);
[  258.231283][T15566]   rlock(&root->kernfs_iattr_rwsem);
[  258.233244][T15566] 
[  258.233244][T15566]  *** DEADLOCK ***
[  258.233244][T15566] 
[  258.234608][   T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.236666][T15566] 3 locks held by syz.4.2815/15566:
[  258.236684][T15566]  #0: ffff888028779448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0
[  258.240801][   T54] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  258.243270][T15566]  #1: ffff888028648060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  258.247234][   T54] usb 7-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  258.251161][T15566]  #2: ffff888028648098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  258.255543][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.259453][T15566] 
[  258.259453][T15566] stack backtrace:
[  258.259472][T15566] CPU: 2 UID: 0 PID: 15566 Comm: syz.4.2815 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.259497][T15566] Tainted: [L]=SOFTLOCKUP
[  258.259504][T15566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  258.259513][T15566] Call Trace:
[  258.259521][T15566]  <TASK>
[  258.259529][T15566]  dump_stack_lvl+0x100/0x190
[  258.259560][T15566]  print_circular_bug.cold+0x178/0x1c7
[  258.259588][T15566]  check_noncircular+0x146/0x160
[  258.259616][T15566]  __lock_acquire+0x14b8/0x2630
[  258.259646][T15566]  lock_acquire+0x1cf/0x380
[  258.259670][T15566]  ? kernfs_iop_getattr+0x9c/0xf0
[  258.259695][T15566]  ? __pfx___might_resched+0x10/0x10
[  258.259716][T15566]  down_read+0x99/0x460
[  258.259743][T15566]  ? kernfs_iop_getattr+0x9c/0xf0
[  258.259766][T15566]  ? find_held_lock+0x2b/0x80
[  258.259788][T15566]  ? __pfx_down_read+0x10/0x10
[  258.259807][T15566]  ? kernfs_root+0xee/0x2a0
[  258.259833][T15566]  kernfs_iop_getattr+0x9c/0xf0
[  258.259858][T15566]  vfs_getattr_nosec+0x2d4/0x430
[  258.259876][T15566]  ? __pfx_kernfs_iop_getattr+0x10/0x10
[  258.259901][T15566]  vfs_getattr+0x4a/0x60
[  258.259918][T15566]  loop_query_min_dio_size.isra.0+0x117/0x250
[  258.259948][T15566]  ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10
[  258.259985][T15566]  lo_ioctl+0x13aa/0x1bc0
[  258.260013][T15566]  ? __pfx_lo_ioctl+0x10/0x10
[  258.260038][T15566]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  258.260066][T15566]  ? kasan_quarantine_put+0x104/0x240
[  258.260089][T15566]  ? blk_get_meta_cap+0xd4/0x6c0
[  258.260117][T15566]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  258.260147][T15566]  ? blkdev_common_ioctl+0x515/0x2ba0
[  258.260165][T15566]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  258.260185][T15566]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  258.260211][T15566]  ? do_vfs_ioctl+0x226/0x13e0
[  258.260234][T15566]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  258.260257][T15566]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  258.260281][T15566]  ? __fget_files+0x215/0x3d0
[  258.260298][T15566]  ? __pfx_lo_ioctl+0x10/0x10
[  258.260325][T15566]  blkdev_ioctl+0x5ad/0x6f0
[  258.260341][T15566]  ? __pfx_blkdev_ioctl+0x10/0x10
[  258.260356][T15566]  ? selinux_file_ioctl+0x139/0x290
[  258.260373][T15566]  ? selinux_file_ioctl+0xb4/0x290
[  258.260392][T15566]  ? __pfx_blkdev_ioctl+0x10/0x10
[  258.260409][T15566]  __x64_sys_ioctl+0x18e/0x210
[  258.260434][T15566]  do_syscall_64+0x106/0xf80
[  258.260451][T15566]  ? clear_bhb_loop+0x40/0x90
[  258.260497][T15566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.260516][T15566] RIP: 0033:0x7fe91f19c799
[  258.260531][T15566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.260548][T15566] RSP: 002b:00007fe91ffdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.260566][T15566] RAX: ffffffffffffffda RBX: 00007fe91f415fa0 RCX: 00007fe91f19c799
[  258.260578][T15566] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000006
[  258.260590][T15566] RBP: 00007fe91f232bd9 R08: 0000000000000000 R09: 0000000000000000
[  258.260600][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.260612][T15566] R13: 00007fe91f416038 R14: 00007fe91f415fa0 R15: 00007ffeef094368
[  258.260629][T15566]  </TASK>
[  258.262596][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.271703][   T54] usb 7-1: config 0 descriptor??
[  258.275406][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.410215][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.414225][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.417953][T15567] ldm_validate_partition_table(): Disk read failed.
[  258.444182][T15567] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.446829][T15567] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.449402][T15567] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.451943][T15567] Dev loop6: unable to read RDB block 0
[  258.453849][T15567]  loop6: unable to read partition table
[  258.456352][T15567] loop6: partition table beyond EOD, truncated
[  258.458997][T15567] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  258.459512][ T6743] ldm_validate_partition_table(): Disk read failed.
[  258.468307][ T6743] Dev loop6: unable to read RDB block 0
[  258.470858][ T6743]  loop6: unable to read partition table
[  258.473592][ T6743] loop6: partition table beyond EOD, truncated
[  258.485830][T15566] ldm_validate_partition_table(): Disk read failed.
[  258.488909][T15566] Dev loop6: unable to read RDB block 0
[  258.491394][T15566]  loop6: unable to read partition table
[  258.494297][T15566] loop6: partition table beyond EOD, truncated
[  258.497160][T15566] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  258.681262][   T54] usb 7-1: USB disconnect, device number 34
[  260.727092][ T1419] ieee802154 phy0 wpan0: encryption failed: -22