last executing test programs:

2m7.380945725s ago: executing program 1 (id=41):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000880)="eb", 0x1}], 0x1, 0x7ffffd, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x2)
sendfile(r5, r3, 0x0, 0x2000081)
socket$inet6(0xa, 0x805, 0x0)
socket(0x2, 0x80805, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xc8)
fchdir(r0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

2m4.417684308s ago: executing program 4 (id=47):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newtfilter={0x170c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}, @filter_kind_options=@f_flow={{0x9}, {0x16bc, 0x2, [@TCA_FLOW_ACT={0x16b0, 0x9, 0x0, 0x1, [@m_tunnel_key={0x114, 0x20, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0xc5, 0x6, "6aebadac64a6192c6a4b0bc0dfae1252abbbcaca08ea5ade06737384564e16177d9aa795a2bd76a26334985ee66c38018342443b9460bd13a68f463f10cef202f6c7c86aa1507cc3c872098e32ab08722da0f16d6af5478794484b30c87b6a6120fd6914bbd2b1b013313aeff9b6f98141e747a03dc69f7c9d4bf67e898af6d0d82205ad8f106a602143b5a5d49a3607662dd55478d250f9f50743bda25145e7101d0a7b550ddf74af4ac8d0d48523deeb5bc71f953341d52dd27a8bb81590bc20"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x118, 0x17, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2e, 0x8, 0x20000000, 0x135, 0x3ff}}]}, {0xbb, 0x6, "8745e46ed323a02dd7f908bdc16679db673aedb546753797689c57ce84b53a69dcf83012cbdf54bcdececb436e6c6df305a302885e4a8a1ebe52023dc716baf91f35cf8fd446e6abc4ebfe28210f95fdb1d5937e4a3aa216a44b05e897dbfef3d6f68f0b55a218b068a58444e6ea98296b48b0e3c89c23566c35be858d7e2d4605bd5e71ee3fa90ad956ccb005385a6e47600f9ae3de3efd62c0a06705d34a77ebb738dd665b99eb56d51e682d300974168c341c059a1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x11c, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1, 0xe, 0x8}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xdff, 0x7, 0x0, 0x6}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0xffffffffffffffff, 0x1ff, 0x6}, 0x22}}]}, {0x9c, 0x6, "0327332c52e3c56e416c5ca3f5bbc57b22c4894b7109a642ccb1017d4f7099be0114e3d4c3b9dbd3243653548d71f2dcf92ef8649ec0cd55bceea239fff7b6d18fabdd3960035b98b3f7a576200dc3fd5a906268c8f33299c36db2635be14bd87c920c2f34225e3b4b3e81a9dbc40f823c60c23d6b3a3596b5a93ac2ad1d85170037a2cc9e6525229c03bd77f426463884a65df487b9f581"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x58, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "683852ff2c647362b36cbcb199a9f7b19d782ed90f5e122631bb7944df1c8fea3cb62ad3b2a76dbba8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x1074, 0x9, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x100, 0x1, 0xe0, {0x8, 0x0, 0x7, 0xf001, 0x6, 0x8}, {0x4f, 0x1, 0x0, 0x8001, 0x7, 0x6}, 0x80, 0x4, 0xe}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x144, 0xc, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2242, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf96, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x107d, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x22a5, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x157, 0x1, 0xc0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ea7, 0x6}}]}, {0xb6, 0x6, "41fab00b2c62fbb6b6d6e0433b535ccbf5bdfc1db073b1e6f7a2f6e791279cdcf0874136a24e857e8468ead7b893247f0a7a91dfb5520be4c66c83f665a089ed7e47a3ae602670ac58facf2fd8e6c0267b8fc4e838fb406d1688e667dd682b14b7bd6b3e18a0899bf2b9688daa44251b1f5f94d2d22e0860e256f3a42eb7cd961cbdcf9de20d5532dcbd571601a30d12f526c965a928c1c3e512890f789e5aa5f63a675f4e0b52d8aaea3ecd1eee2ed73009"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x68, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xdf3, 0x6, 0x20000000, 0x4, 0x100}}]}, {0xa, 0x6, "8439ab5840bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xec, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x5, 0xf, 0x2, 0x7}, 0x8}}]}, {0x9f, 0x6, "a09f351f6683e6a0f08f8acaf9c659bd118c14905d0a31c0373667205c896a6c339b7f3114e72b4c37c8fc0816c131c80a9e56ab92efa7bc6c092b1aa32ee3ca2d39081812d5e1d9e12c337bb2c812386888f8f3a2b5bf5ced692387704229d925bbe66bb72c1f37728668d8718e71074485e9eb0aad474e6da5ef0dc2e28558ff48c8400b42a3ffb97d9833292c80aa4b2092d0ff7956fa1b9961"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x91bb}]}}]}, 0x170c}, 0x1, 0x0, 0x0, 0x24001090}, 0x80d4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0])
r8 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x1, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x6, 0xffffffffffffffff, 0x7ffc, 0x5, 0x1, 0x100000002, 0x0, 0xde, 0x7, 0x7, 0x200000000c7, 0x7f, 0x5, 0xfffffffffffffffe, 0x8000000, 0x0, 0x8, 0x1, 0xfffffffffffffff9, 0x1, 0x86, 0x0, 0x8000000, 0x3, 0x7, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x4, 0x2, 0x0, 0x0, 0x1, 0x696, 0x3, 0x0, 0x0, 0x1, 0x20, 0xe8b, 0x0, 0x10000, 0x3, 0x0, 0x8, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0x8, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffa, 0x2000008000004, 0x800002, 0x5, 0x2, 0x0, 0x7, 0x20000000000, 0xf, 0x0, 0x1, 0x400000000, 0x404, 0xb4e, 0xffffffff, 0x400, 0xfffffffc, 0xfffffffffffffffe, 0x0, 0x3, 0xd87, 0x0, 0x44, 0xfffffffffffffffd, 0x4000000000, 0x200000000000000, 0x6, 0x4, 0x200005, 0x0, 0x1, 0x1, 0x9, 0x20000000000e9, 0x6, 0x5, 0x9607, 0x1000, 0xfffffffffffffff8, 0xb8, 0x200000, 0x0, 0x0, 0x4fffffffe, 0x100000000007, 0x7ffffffd, 0x3, 0x100, 0xffffffffffff2328, 0x1, 0x400003, 0x3, 0x0, 0x0, 0x3, 0x3, 0x8, 0x8000000000000, 0x0, 0xc, 0x3, 0x5, 0x0, 0xb, 0x800000001, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]})

2m3.293766086s ago: executing program 4 (id=50):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
socket$kcm(0x10, 0x5, 0x0) (async)
r2 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0x8a}], 0x1}, 0x24008080)

2m3.075463949s ago: executing program 1 (id=53):
syz_init_net_socket$nl_generic(0x9, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_create(0x9, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRES8=r2], 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000031eb000000e8ff000000000000000000"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r7 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000006c40), r9)
sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f0000006ec0)={0x0, 0x0, &(0x7f0000006e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r10, @ANYBLOB="000226bd7000fbdbdf2513000000180013801400008008000100262d235b070001006c6f000004001380"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'})

2m2.981901443s ago: executing program 4 (id=55):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48045}, 0x40000080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700a7001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d140000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m2.382958221s ago: executing program 4 (id=58):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a00)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x4, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000400)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x102, 0x80, @buffer={0x310, 0x1003, &(0x7f00000014c0)=""/4099}, &(0x7f0000000080)="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", 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0})
setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$9p_fd(0xfff6, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0)

2m2.145397251s ago: executing program 4 (id=60):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
kexec_load(0x4, 0xa, 0x0, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @sliced={0xc482, [0x794, 0x7, 0xceca, 0x3, 0xb, 0x1, 0xfde0, 0xfffe, 0xfffc, 0x7, 0x704d, 0xff67, 0x3, 0x7, 0x8, 0x53, 0xff, 0x0, 0xfffb, 0x6, 0x8, 0xfff7, 0x40, 0x7, 0x3f80, 0xd7bd, 0x0, 0xe, 0x0, 0x70a, 0x1000, 0x5, 0x8001, 0x1, 0x4, 0x6, 0xfff, 0xffff, 0x4, 0x2, 0x9, 0xe, 0x8, 0x2, 0x7, 0x2, 0x9, 0xfed4], 0xf4f6}})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0)
read$nci(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000fcffffff000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000002000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570003000000000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
r9 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x2, 0x0, 0x3})
r10 = io_uring_setup(0x72a2, &(0x7f0000000240)={0x0, 0x41e28, 0x0, 0x4, 0x23d})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[r9], 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200003f, 0x4c831, 0xffffffffffffffff, 0x1cbf8000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)

2m2.077112748s ago: executing program 1 (id=61):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newtfilter={0x170c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}, @filter_kind_options=@f_flow={{0x9}, {0x16bc, 0x2, [@TCA_FLOW_ACT={0x16b0, 0x9, 0x0, 0x1, [@m_tunnel_key={0x114, 0x20, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0xc5, 0x6, "6aebadac64a6192c6a4b0bc0dfae1252abbbcaca08ea5ade06737384564e16177d9aa795a2bd76a26334985ee66c38018342443b9460bd13a68f463f10cef202f6c7c86aa1507cc3c872098e32ab08722da0f16d6af5478794484b30c87b6a6120fd6914bbd2b1b013313aeff9b6f98141e747a03dc69f7c9d4bf67e898af6d0d82205ad8f106a602143b5a5d49a3607662dd55478d250f9f50743bda25145e7101d0a7b550ddf74af4ac8d0d48523deeb5bc71f953341d52dd27a8bb81590bc20"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x118, 0x17, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2e, 0x8, 0x20000000, 0x135, 0x3ff}}]}, {0xbb, 0x6, "8745e46ed323a02dd7f908bdc16679db673aedb546753797689c57ce84b53a69dcf83012cbdf54bcdececb436e6c6df305a302885e4a8a1ebe52023dc716baf91f35cf8fd446e6abc4ebfe28210f95fdb1d5937e4a3aa216a44b05e897dbfef3d6f68f0b55a218b068a58444e6ea98296b48b0e3c89c23566c35be858d7e2d4605bd5e71ee3fa90ad956ccb005385a6e47600f9ae3de3efd62c0a06705d34a77ebb738dd665b99eb56d51e682d300974168c341c059a1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x11c, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1, 0xe, 0x8}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xdff, 0x7, 0x0, 0x6}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0xffffffffffffffff, 0x1ff, 0x6}, 0x22}}]}, {0x9c, 0x6, "0327332c52e3c56e416c5ca3f5bbc57b22c4894b7109a642ccb1017d4f7099be0114e3d4c3b9dbd3243653548d71f2dcf92ef8649ec0cd55bceea239fff7b6d18fabdd3960035b98b3f7a576200dc3fd5a906268c8f33299c36db2635be14bd87c920c2f34225e3b4b3e81a9dbc40f823c60c23d6b3a3596b5a93ac2ad1d85170037a2cc9e6525229c03bd77f426463884a65df487b9f581"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x58, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "683852ff2c647362b36cbcb199a9f7b19d782ed90f5e122631bb7944df1c8fea3cb62ad3b2a76dbba8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x1074, 0x9, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x100, 0x1, 0xe0, {0x8, 0x0, 0x7, 0xf001, 0x6, 0x8}, {0x4f, 0x1, 0x0, 0x8001, 0x7, 0x6}, 0x80, 0x4, 0xe}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0x1004, 0x6, "f531d627d55e2cbe5535e11c62e55a5647595d86119e6b485106b62c3c384e75b9b09f911f08786032f89c27a2e0e369e4e9ef60aeabf1518b22dbb6abafc3fc909133333a5ab9202141bdfaa4aa7b388d0aa2790357dec28c1b9bda0868cb5e5dd62e74d202b72cdaedbda16b62f65b59a0d6dea9f3d456da6a5207081bcb47a3b35afad03c54ea6155ce8a6261c8ab270ad86abc2ba5554bff501e7f5ce3d9dc14a3f0f89ccbef62aa1cc915a06c70e40c0b2b7a07fb953ddbeb771de4934afac15ff17b8b200b1bceca6dd902e46cc3ba43f01665825fec72c407d1e0a481b355c5cd321bbb16d310726a11f46f7773adcad9758b641d07016f21423d22d977f7b5a9c66dd6787e3d0ba2e37942b0018de5cecd4b7e3a825290717ecbae4d89e01cca3974f94c932a8249396c6c70d4f5fcdd12c8e43d70b434fdeadf4b1e9f7b9f989a71580ed6a2221258774d2822b22e37f0b14edf665ac564579831342d0e47f56d60f2ab9b51fc3a3d274c5d94c0c52d791ca87bacfcf4839186c147abfae1e292ea1640c2be1de989bd751a3d390cf3cf7e52e37b8abe07dd628e2d1f89be45266dc54e4dfc9cc84c596b42ec03465f693c7ce87e4ce7d3f3e85214dd9fb5fdc771f7d565e1118286813f3b127c274aba91ccdd604b3af1353906305946eaebd64e70b20867345c03f293b2e2271d48b89d7502b67e9a54d4b2a702fc92ef5c7dbde59591823cb3db5860139c8314875262c50c3fc4e3e1336c768db28547a75b717374dbc59a26a4f7d7c146a411bb37dfae4bbdea58a2f4f7054717771832b4bedd08b263ff0d800389ec175a9fd36f1b39c48acda863f4051d425af8da04951c6fa3154777284ab2ef798e8b955894d8a944b1527e39738c9d060e3451e436f27ddb744924966375f0a6319a5a908d843ca1639e74c8984cba05ac716c464d899e7425398563b1589a1b37c203c29d0530516ae9d7a53118b7c8181a781861216956d53ced5236ea44acb4b47e5ef09cc8d13fb8e91a9e51c8e3ef6d77f7870e7b2e332ed69d52fee52d3b32b1a6177ba4bbb25886b4b9e7cc70c7851815e5848dd7acd348aff440228b0f08be6963795222717cf959976ea35bd4fb749013736de0da0931bce418d93948f6755d0dded060e69fcc6b0649798a170c7243d7f2f5825c30546a96636e79f4e2518dbd18dce5092185414aa3dc01e3cc0466404593b701966f8cdc36b51fd03fc6a7501356f2f6a6b9f6f3f8ff785aaa56cecd8e253c6e349bb7a6e0fd71fc0a1264ac1a30ed90a9460e76ae938f21d133f401e692134486b1cd3fe675dcb8daa85cf79c6905cfea9dddfbe28cc7297eb770228fb0cba3662315cc7e754c89dd48f235099d1552cabf7ed9f731f0a69696104907dd8b905ca172d8136c061cfb604776d9f2f6b8f236b3ffe02b05b7fa77d813dccaf1b84e21d30d2429b8730ee48152616d0c2393a63b984754002ac40585da5b4eb80482ff80dbd7a9b6d8fc462f21e051ce2c15fa67f6ea48328032e14bac7d91d8c81bfcd05e99fc5bb234542ae14cf4ac01f684281c3d656a0be43ece4aa2ae6d6745d56099aab67884f85356c80651d37ce478a3f953c468a417e72118c38832b790cc5eedcbba461d6b668dad7cdae326c7d68faeab2714e8153cc6238a22e2508fb6c711ff9aaaeac0a5a2103aaa1de1ede9a5d25d29d0d492df3d7966407f4d4613e88fea5c1a53bed74c48cbd4611e22a097a169858481dbc27ee4b2e5115f766122f3ca9d638b0026239486a8402904243abf921918778841aed1154e17303e55e70c99fb62c7babc14dd432e34da8ff452ebc5ed42d3ec2746a3bbb7434811e6dc26ddf308b5a922f521a32c8d70ed9d9dd1a3ba99234ff3cd3e9c0e84fc03b34d65db18846431d8f8c7503943304ecfb6b82b0ac3e1ca4a39af6f23a08049a679693fc97472ca4da1479dc51fea619f6dcf3d068b74f98867ca36e72cdcada15cbbd28d0c5e1975f400e8246ed283fcd2a76755d2528faf3d7fa3fe36137b316cf31d241cf63aa3f9dfff6f2c04d6d0006aed007e76ee27e5e7a3f2acb4507ac5db877df90f9b3a2f50cf593625073d07e08f63b6c5a98da4da6d084295b9d946779fdb818e93406f98149f75bba585d7d08659be34bef5270a2799edc6dad16420356ed2f31fe5384a3a1b1d02ce1b50ca986125e17f2adfa48d0fd29bfea4c1d0611177201bde5c5040d10a0d0790c0d457ce999e4bb96cfdff2ebdea126075b13eaad79484976aa73093c77632b7b32d90e1cf7edc09ebd59241f2925122dddae2e47dd2c54c9c9b1d7b473426853fc0bd40f438774f28fd9655c9a2e9e27a4479f3de87ba29a9471b041441d715974604040d3f4065217291c0ed8ace535b6ca3c20806a7ba918a7350ff2c98a44eaa598730003508ed9c8d6dd772d9366aab21668576ca45efec39776e912cf37318a0f02111f6bd52f3d90210c7f2652ad29ad580222c373b21b4502f096c4988f29eb3c396cb5a64f9bbf7f004716c96d66b30437fda610562b4457adbb080a4c249054365d25d5e9f8ab9686416b6aa3b26b3b5e4b8cb73aa78ef2df43c95462b55e59252e39ac30e355230816e29838a71bb599ac46f4ef2a63f57c20e4c1f07cb57225fd533687ff548c305cc1ac34d29f3a8893af0e72f04c71b8186a40da2c825b76af90cef575360c4581a03ab1cb3c6f59d5b6d71cb2a23c6b73f87b31eff12172d7b88674655a00117f4257a735f88693f17392c71acd4f13b59850c867667a3d251e16a00ae14d048d3120e8d74cef9fa4dd6508b61ac5739114605a7b1acdb7eff310f25d465541c3288af45a5ac4f3b86ebbd3b1748d493c4c50c91286c2810d169b6de1fea64aa3bd83da516baaafd39c4396469e8fcc6d472d684d7e9a731a6c049a95461f9cb55755c2c3f4314de9f02ad2ef8c1df70a11d96399fdc795e715da5e1b3bb85e6ce830ce506d77426935233d8aeaa0dd50645fa0ae430f01890ec79768c93063294736c54769d4a42450e7da29b134a92201ce45bae4fd427b41995743ed762192647746fb43f46d348555c30285d6dcbe8dbd703eb4d654057c86a70f9e70ed817b438f2c9d6a69cc4e52f98da1c1734cea7530b542f064549030ebfb29e66435d375fee6bf439691fed7c877bf548f7ce12d2cbcd6807714a75d4e6e12a4f411b8c8b7e9b8f3396a8a9782b29e8a62c31cacfb34ab3eb8fa0a85d4efc04d2a3e71f31b0543073d0ca62f32a2e1e17fd4f8983962d47badf062760c6d1405ad6fd3f1df8eb5c60717696ac8220c3f225bfc88efc1c60550b9cf2f586310988d2d5ccef310f20fea595ac7e5931e2c4f1305775ab99ca6e3f80f74befcf9faf7f429d1c653b27b0ca79954e2ebb076fb6b23835b659b9031d9fa4ae085c04776148cb580a0f64338df227c40d636bcb9fae6d72ca544792296e0c64918259dfdcf56c6549be45e729b0a6bb10b050a91c2437bc0349eb367ccf2c6524e09e22e34e92f57cfefdb9413630321386ce20ece76bda2813235e32750f45cfe73f4e63fa792f8692c30663dfbb40fe09a7e28fc8cfaa8b90b3bdaf1e0fefcecb2a009b51ac3d2e3bb3f303c8cd190a22ed402c28f4a6a818f803c4b13562a13eff67ea0f5d16f765274108b656b3c273297a6c1c02e6cfa4c6db5fa286bb81e774df25ae6e0e34a96b9bdcf6592d0dce059c4d97e25e179d3830d00e4c8b9e43968dffca6dfd8c6644c8a804ba5bb4d7cc6684f11921f34fe259578ac23fa38fb5d3c52c0e6474fa6e98a21f4dd3a7c93c74197edf05f7e788c3a5ea980878c8e9529a22bb5378a1c96d267ba1e4133b902fe621f077497aaf5d77162a1c48a4b6833d90918b32a1932d7c8b4dcf00372b30430032eda4cbd3246d5bcba571eae9e747345cda8e6859f7a788d13f6e2d540b373ed27c1ad3f7035d2b492c39e51880fa4300c17362374f82944da7c9eae35fcf43a4b7925e42f93d07d78ccca889319e6388e2119c516122b22dbcde9787f635fce229e4606c988b7d8a3c94edc36a95f8a881825ed85d83081bb1e56a8ea011ef7d2158e895fa3c8454a72911a1a8846dc992b2481008fb330276babd5b94dd894d042ad32123ced065802df531a263c30f110d50af54d0ed3745606782da928dba0b80d55079349415d404b0520e49e56d101517e62d595169f13a5a8dda82f29767ed420f08ed1ec790b4b3ea0f71833e55b2712b79d70d6558d84f136d3575c548e5eca4b1cd2039552c04af8c780e583dfd08ff60179520d809dcb68896b4a6262fd5fb8265b3ed63c2c70c3001a4a41c3b5fbb21b404e65adc8a8e34a53100040a5f98b41faefa7288670dc6ad613821b68f17842f6d3aea129ac976190a3db0f635fb84d731f8fda31ee5ebf0af2b69bba866cf7747be88463ccf523365a33312351b877b93f7e97c106a2af2bd2dac5d0cdb98c3099e5eca1752cdd0781471aaaa4bd5b93096a4b5b92545a33a9f4569511429d9258327f4576f9ebf66aadeb5d42b0ef656a9b82cd547a889009cefb4ec712c708dc222a3094da0a62b4385ad4d48b63ca5dd0735d1e88da4efef23cd310ab80da8797c6880196f008ba532a595ca82039a4d09e88d23d89944da3a43538447d11af4e01f6878c80b5714502486cba44ab09e98a1f22f50aa52081fc8f94221fe0798009f52f6f352f11bed96eabd3337de212ffe930dcbc536bd32a69e8d153f6c7efaaab39850c7e04fdcec89b484e0fa13abd5fb8110aa76e4cc184f2ca20da971662af8291d2ac32b463db2abc4fbc173f76d5ebdc9963427179549859d1cc93bc1d4606f3a6e9675c00a9f05199f9a956a075349f130595b250dfc0c6e88e7ec743b3cb05a41866484a5d5eaa0a764621814b7c1059767e72c3c8e31af1711078f22bb7558970622f5d749e6adb1c435ec3444b2d20d6fbef5cdbe5643e93f1c97c59065c516f2f31af6ee54d9887229a7719a227d320f9cb28254e99b703bdfad706b68b566544f5a1093cdb9dce6eef8917177c2ad796729680bb424f6b4a1d8f32ecdb14342b9f561d801303fc5974cb3896168769047ce5ec16395419d37f97e120043418b7fa21e4b505a3679c2abff5940105e1f1d4ce5ece9cc1900d31c888b8418c5519c14a114d29156fa0c332e37282bc1cedf66a5f8d460c9e21b4f82fc9362fb963832762efea54c163bc329e1261c9ba7b72b5021243486da85a804d1ca62fb6e09515b0881e49f80e48f922128a1096def202c0ca562e765eca955e30af56b3b9bfa625815ad420ffb849f8de66815c5b37f01b3e2aab74f23ff048611834a21e069a0199410747fe3d151ead60800b6375d6c0b182efe0c991dfee138e1e3dced5287ae63e0f119f30c82b813f1b60344044781c03d469e099102de111deef1fe1576b0c1f1c9d3bcd7a9dbbc71a1326686276c900fd8b941ffcdcdf962f31cc3ec642944672f8ea61f87a1eb9a881bc5c2f6a39222752a5ae11477224b68727042d3b090347cb899740fb7dc2f6ace70650de435d098eefbab86252a7b1cdcbc7651632c0b3eea111ae28fc85998b8c8dfd104443d11cb10e677c131edfdeb84a4b504a6042f9a855ba486e174d9e03a22a087ab8e8d11e60f88bc3e526435b32cd3d8d1a0235a5d5a0812ada02992523143e8f631767ed0cfe40fc754fe8b86be1f07cc82454db92b534d7842dca647ee66ad871cf760f41f0e0145178f643bdd3256acbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x144, 0xc, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1b27}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf96, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x107d, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x22a5, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x157, 0x1, 0xc0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ea7, 0x6}}]}, {0xb6, 0x6, "41fab00b2c62fbb6b6d6e0433b535ccbf5bdfc1db073b1e6f7a2f6e791279cdcf0874136a24e857e8468ead7b893247f0a7a91dfb5520be4c66c83f665a089ed7e47a3ae602670ac58facf2fd8e6c0267b8fc4e838fb406d1688e667dd682b14b7bd6b3e18a0899bf2b9688daa44251b1f5f94d2d22e0860e256f3a42eb7cd961cbdcf9de20d5532dcbd571601a30d12f526c965a928c1c3e512890f789e5aa5f63a675f4e0b52d8aaea3ecd1eee2ed73009"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x68, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xdf3, 0x6, 0x20000000, 0x4, 0x100}}]}, {0xa, 0x6, "8439ab5840bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xec, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x5, 0xf, 0x2, 0x7}, 0x8}}]}, {0x9f, 0x6, "a09f351f6683e6a0f08f8acaf9c659bd118c14905d0a31c0373667205c896a6c339b7f3114e72b4c37c8fc0816c131c80a9e56ab92efa7bc6c092b1aa32ee3ca2d39081812d5e1d9e12c337bb2c812386888f8f3a2b5bf5ced692387704229d925bbe66bb72c1f37728668d8718e71074485e9eb0aad474e6da5ef0dc2e28558ff48c8400b42a3ffb97d9833292c80aa4b2092d0ff7956fa1b9961"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x91bb}]}}]}, 0x170c}, 0x1, 0x0, 0x0, 0x24001090}, 0x80d4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0])
r8 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x1, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x6, 0xffffffffffffffff, 0x7ffc, 0x5, 0x1, 0x100000002, 0x0, 0xde, 0x7, 0x7, 0x200000000c7, 0x7f, 0x5, 0xfffffffffffffffe, 0x8000000, 0x0, 0x8, 0x1, 0xfffffffffffffff9, 0x1, 0x86, 0x0, 0x8000000, 0x3, 0x7, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x4, 0x2, 0x0, 0x0, 0x1, 0x696, 0x3, 0x0, 0x0, 0x1, 0x20, 0xe8b, 0x0, 0x10000, 0x3, 0x0, 0x8, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0x8, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffa, 0x2000008000004, 0x800002, 0x5, 0x2, 0x0, 0x7, 0x20000000000, 0xf, 0x0, 0x1, 0x400000000, 0x404, 0xb4e, 0xffffffff, 0x400, 0xfffffffc, 0xfffffffffffffffe, 0x0, 0x3, 0xd87, 0x0, 0x44, 0xfffffffffffffffd, 0x4000000000, 0x200000000000000, 0x6, 0x4, 0x200005, 0x0, 0x1, 0x1, 0x9, 0x20000000000e9, 0x6, 0x5, 0x9607, 0x1000, 0xfffffffffffffff8, 0xb8, 0x200000, 0x0, 0x0, 0x4fffffffe, 0x100000000007, 0x7ffffffd, 0x3, 0x100, 0xffffffffffff2328, 0x1, 0x400003, 0x3, 0x0, 0x0, 0x3, 0x3, 0x8, 0x8000000000000, 0x0, 0xc, 0x3, 0x5, 0x0, 0xb, 0x800000001, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]})

2m1.200396304s ago: executing program 1 (id=62):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a00)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x4, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000400)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x102, 0x80, @buffer={0x310, 0x1003, &(0x7f00000014c0)=""/4099}, &(0x7f0000000080)="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", 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0})
setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0)

2m0.909422318s ago: executing program 1 (id=65):
close(0x3)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000))
eventfd(0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4d, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x410)
sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x282, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x38}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b", 0x5f, r7)

2m0.825093713s ago: executing program 4 (id=67):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbccabc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m0.573920173s ago: executing program 32 (id=67):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbccabc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m0.567569426s ago: executing program 1 (id=69):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff, 0x40, 0x93, 0x100, 0x2, 0xbb002f, r5})

2m0.449046496s ago: executing program 33 (id=69):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff, 0x40, 0x93, 0x100, 0x2, 0xbb002f, r5})

11.471554987s ago: executing program 6 (id=429):
syz_emit_ethernet(0x3e0, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "47966a", 0x3aa, 0x2f, 0x1, @remote, @mcast1, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x88, 0x18, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x1, 0xfe}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7, 0x0, [0xffff, 0xfa64, 0x1ff, 0x2, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x79c}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0xc}, @calipso={0x7, 0x50, {0x3, 0x12, 0x2, 0x5, [0xffffffffffffff80, 0x5, 0x5, 0x2, 0x2, 0x3, 0xb9, 0x6, 0x5]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x4, [0x5]}}, @hao={0xc9, 0x10, @mcast2}]}, @routing={0x2c, 0xa, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @empty, @loopback]}, @fragment={0x89, 0x0, 0x1, 0x1, 0x0, 0x1d, 0x65}, @srh={0x16, 0x2, 0x4, 0x1, 0xfe, 0x40, 0x7f, [@empty]}, @srh={0x0, 0x4, 0x4, 0x2, 0x3, 0x0, 0xa77, [@mcast2, @remote]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa3, 0x1, [], "4e70c299222e66097819381bb343abce0cd64911275142f5a1a3c69a5c6b65b1e5843ae06292fce12dc393c19a6ada19d48bf68067422f4ce6743c55c3b1ee0c785fc1c04939ebfd85d9feba1e08e753c4068b2d994fd9136911073a90db40c3cbc9ea3263e1bf43bc150e2762a2349b870d6e87b9dc2150f0ef566e1a59f8e7791c4cd9c817b6ab462282cb2d55ae944b7b19dccd07f2736cf17506333a2a4b9b895f"}, {0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x25, 0x4], "6e5f404fd0948596da8177c23191cde54ffceec1da656cf74138245e758de46cc52cb97126d6ae839ce49cfa86855378d9d1c260877b17fb7c1267ddfedc9c7a0d9002dc50ceebcd31c3b775124817227aae712a25b87ec3580f79d72458ad4c725f1ed862344a6eab0d1574ce00d1c065ab1331ddd70aa0d1af5c798b66d6d833f488e52d90a1371fc732aab619ac9e1ebdd312997a98a30174ac242228b2c1622608b92eac4c4e6cce6a27362eaa544d4510fd877b4c7fee922a26acd7cab54f06256a4bec43183241008199e7f41a7a4a323d"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x6, 0x3, 0x1, 0x3, 0x3, 0x8}, 0x1, {0x8f06}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x8, 0x1, 0x1, 0x1, 0x2, 0x9}, 0x2, {0x8, 0x1, 0x1, 0x3, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x3, "8edf5f57ae5f98e05555f1a69ab81a48b64c78f36458b5b2b1db59fce80a56957254b88b909e9854dabcade2538921f5e11a474cebb9be3a86f9da9bbcbd533c7a5e809fdb84adfb85c1b8683a3150146496c18fc69c34052a8e1f5a168d9cc5ad462c8a1ad4551496a43d70482ea3f80afe9b"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount$binderfs(0x0, 0x0, 0x0, 0x1880036, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05"], 0x8)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

9.461101567s ago: executing program 5 (id=438):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
write$char_usb(0xffffffffffffffff, &(0x7f00000008c0), 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40880)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=""/183}, 0x20)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=0x4)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000240)={0x0, 0x1, 0x9, r2, 0x7fffffff}, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$vcsu(0x0, 0x0, 0x440200)
syz_open_dev$swradio(0x0, 0x0, 0x2)
mq_notify(r0, &(0x7f0000000380)={0x0, 0x4, 0x3})
mq_notify(r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)

9.431411498s ago: executing program 6 (id=439):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000100060000000500040003000000050005b2050000000900020073797a320000000010000300686173683a69702c6d616300671b26b13d7daa9f2fc7bdce4b90b6389ee099427f98465ba34619129085901f64f8c112cea6cb590ca970002a3a00"/130], 0x48}, 0x1, 0x0, 0x0, 0x4044884}, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040080)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x80}}, 0x24884)
mkdirat(0xffffffffffffffff, 0x0, 0x100)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
close(0xffffffffffffffff)
listen(r5, 0x0)

8.571435781s ago: executing program 5 (id=444):
syz_open_dev$sg(0x0, 0x0, 0x8002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

8.269415021s ago: executing program 5 (id=445):
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0)
setresuid(0x0, 0xee00, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r3, 0xd44, 0x44c1, 0x7, 0x0, 0x0)

8.21935822s ago: executing program 6 (id=446):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = syz_clone3(0x0, 0x0) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0xffffffffffffd3bb, 0x2) (async)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000340)={0x200003, 0x2200083, 0x801, 0x4, 0x7, 0xfffffffe}) (async)
r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (async)
fsopen(&(0x7f00000000c0)='openpromfs\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0) (async)
capget(&(0x7f0000000100)={0x19980330, r3}, &(0x7f00000001c0)={0x8, 0x401, 0xffffffff, 0x9, 0x7, 0x1})
fchdir(r6) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc0042, 0x8) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) (async)
socket(0x1d, 0x2, 0x6)
sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async)
eventfd2(0x4, 0x1) (async)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
eventfd(0x4)

8.093503304s ago: executing program 6 (id=448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x123)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000132)
fcntl$notify(0xffffffffffffffff, 0x402, 0x1e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

7.163659193s ago: executing program 6 (id=449):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xa0, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0x594}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x91, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r1, 0x8d, 0x1a, &(0x7f0000000000)="d021ed84d3c1ee4d1ab39aa93e00d43ec7e813e40b8fcad530f5")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r6, 0x4000)
close(r6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080))
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x20, 0x9, 0x66, {0x66, 0xf, "2633f64a852ec78572bf605a9e4d7136f580824baf7260b7e167273a059ef9b80588e91283d8e897309baf5dccb1258395364ae7e0b9b562b9de079665f3a650b1a9831662d113eb503ab87914f3410795b06ffc15775ce2f3c97d5c5f370db89c4c9d67"}}, &(0x7f0000000100)={0x0, 0x3, 0xad, @string={0xad, 0x3, "30219f2e9b969da7c67dbed7a55acad2d4877f67984fed12755cfcbd2f5e72d672f40d93d29f2f5d223186ea707da961a7a6ce9ce6bc1d69baf1fc76df199b54f8da8953223df986f60f14836e36aa61097eea32a73abb2d0c17a7fab9b047c29c1a4212e1ec0db78ba4006dfc5353a762372b10a0e32c71924befb1604c1d107d4ab5c95627da5951b7db83eb80a057b054d191c28d64f6d54d17cc314cd6517bc64fd2727408e314ed05"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x0, 0x17, 0xfb, "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"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0x20, 0x0, 0x9, {0x7, "cbd331befcb688"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x0)

6.675824344s ago: executing program 2 (id=450):
syz_emit_ethernet(0x3e0, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "47966a", 0x3aa, 0x2f, 0x1, @remote, @mcast1, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x88, 0x18, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x1, 0xfe}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7, 0x0, [0xffff, 0xfa64, 0x1ff, 0x2, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x79c}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0xc}, @calipso={0x7, 0x50, {0x3, 0x12, 0x2, 0x5, [0xffffffffffffff80, 0x5, 0x5, 0x2, 0x2, 0x3, 0xb9, 0x6, 0x5]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x4, [0x5]}}, @hao={0xc9, 0x10, @mcast2}]}, @routing={0x2c, 0xa, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @empty, @loopback]}, @fragment={0x89, 0x0, 0x1, 0x1, 0x0, 0x1d, 0x65}, @srh={0x16, 0x2, 0x4, 0x1, 0xfe, 0x40, 0x7f, [@empty]}, @srh={0x0, 0x4, 0x4, 0x2, 0x3, 0x0, 0xa77, [@mcast2, @remote]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa3, 0x1, [], "4e70c299222e66097819381bb343abce0cd64911275142f5a1a3c69a5c6b65b1e5843ae06292fce12dc393c19a6ada19d48bf68067422f4ce6743c55c3b1ee0c785fc1c04939ebfd85d9feba1e08e753c4068b2d994fd9136911073a90db40c3cbc9ea3263e1bf43bc150e2762a2349b870d6e87b9dc2150f0ef566e1a59f8e7791c4cd9c817b6ab462282cb2d55ae944b7b19dccd07f2736cf17506333a2a4b9b895f"}, {0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x25, 0x4], "6e5f404fd0948596da8177c23191cde54ffceec1da656cf74138245e758de46cc52cb97126d6ae839ce49cfa86855378d9d1c260877b17fb7c1267ddfedc9c7a0d9002dc50ceebcd31c3b775124817227aae712a25b87ec3580f79d72458ad4c725f1ed862344a6eab0d1574ce00d1c065ab1331ddd70aa0d1af5c798b66d6d833f488e52d90a1371fc732aab619ac9e1ebdd312997a98a30174ac242228b2c1622608b92eac4c4e6cce6a27362eaa544d4510fd877b4c7fee922a26acd7cab54f06256a4bec43183241008199e7f41a7a4a323d"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x6, 0x3, 0x1, 0x3, 0x3, 0x8}, 0x1, {0x8f06}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x8, 0x1, 0x1, 0x1, 0x2, 0x9}, 0x2, {0x8, 0x1, 0x1, 0x3, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x3, "8edf5f57ae5f98e05555f1a69ab81a48b64c78f36458b5b2b1db59fce80a56957254b88b909e9854dabcade2538921f5e11a474cebb9be3a86f9da9bbcbd533c7a5e809fdb84adfb85c1b8683a3150146496c18fc69c34052a8e1f5a168d9cc5ad462c8a1ad4551496a43d70482ea3f80afe9b"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount$binderfs(0x0, 0x0, 0x0, 0x1880036, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05"], 0x8)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

6.269128423s ago: executing program 5 (id=451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183)
mount$bind(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x381091, 0x0)
chroot(&(0x7f0000000b40)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x81, 0x9, 0x4, 0x0, @mcast1, @private1, 0x700, 0x8000, 0x8, 0x3}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x2400c840)

6.133426695s ago: executing program 0 (id=453):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) (async, rerun: 32)
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7e", 0xa, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) (async, rerun: 32)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000600)={@ptr={0x66642a85, 0x4000000, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1a}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1400}], 0x0, 0x0, 0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000f05000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)

6.009601421s ago: executing program 5 (id=454):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c)
listen(r0, 0x100)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = dup(r1)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0xfffd}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xc}}], 0x18, 0x6000000}, 0x8050)

5.381430347s ago: executing program 0 (id=455):
syz_open_dev$sg(0x0, 0x0, 0x8002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000))
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.021964469s ago: executing program 5 (id=457):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x44080)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000202010100000000000000000b0000090800084000000002d0ef1d5b"], 0x1c}, 0x1, 0x0, 0x0, 0x40941}, 0x850)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0xa, 0x3, 0x87)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r8, 0x105, 0x70bd2c, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x814)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', <r10=>0x0, 0x40, 0x10, 0xe, 0x3, {{0x16, 0x4, 0x1, 0x3a, 0x58, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@generic={0x86, 0x6, "b04250ff"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x9}, {@remote}]}, @end, @timestamp={0x44, 0x18, 0xab, 0x0, 0x8, [0x7, 0x9, 0x8001, 0x3, 0x2960]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x160, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a4000380140001006d6163766c614e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e64000000140001006272696467653000000000000000000014000100776c616e310000000000000000000000080002"], 0x12c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4000)

4.229861045s ago: executing program 34 (id=457):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x44080)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000202010100000000000000000b0000090800084000000002d0ef1d5b"], 0x1c}, 0x1, 0x0, 0x0, 0x40941}, 0x850)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0xa, 0x3, 0x87)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r8, 0x105, 0x70bd2c, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x814)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', <r10=>0x0, 0x40, 0x10, 0xe, 0x3, {{0x16, 0x4, 0x1, 0x3a, 0x58, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@generic={0x86, 0x6, "b04250ff"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x9}, {@remote}]}, @end, @timestamp={0x44, 0x18, 0xab, 0x0, 0x8, [0x7, 0x9, 0x8001, 0x3, 0x2960]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x160, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4000)

4.189253225s ago: executing program 0 (id=459):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x36, 0x34, 0x66, 0x30, 0x32, 0x37], 0x2d, [0x31, 0x30, 0x36, 0x62], 0x2d, [0x65, 0x30, 0x32, 0x32], 0x2d, [0x30, 0x34, 0x38, 0x31], 0x2d, [0x66, 0x33, 0x65, 0x63, 0x36, 0x65, 0x38, 0x38]}}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\xae85+d\"\xdcR\x02\xf3\x00T\xe9C=f\xf2xC+\xdd\x86\x8a\xf7\xef\xfd\x85\x82\xe6\x9ecv\x00\x01\x04v=\a\xd9E\x8f\xff\x8c,<\x1f\x06\xcal\x1eE){\x9b\xf1Y\xc9C\x04\xdf\x8f\t4RYjQ\x00\x05\x15\xff`\x88\x9c\xb2\x0f\x8a\xc1\xb3\x00c@+.J,\x8b'}}]}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x3}, 0xc)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000200)={[{@favordynmods}], [{@pcr={'pcr', 0x3d, 0x1e}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]})

4.138485478s ago: executing program 2 (id=460):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpriority(0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x229, &(0x7f0000000480)={0x0, 0x4d3f, 0x1000, 0x0, 0x2cf}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}})
io_uring_enter(r7, 0x47ba, 0x100, 0x5, 0x0, 0x0)

4.043528974s ago: executing program 3 (id=461):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c1eb46ca0c222ed3972000000f3d0b68f126bffdb9628fc1472f5ec27c95dfd3a916e1a69d85d366ab4a563fca576694fb45dcd1a869bc5fe05daae0899df49916850c953bb4441f8fe8c6db55b81218ddab7fb06bab8c92dd61e08fe746fc5fd2fe3d95dcae8bea3df2f7e0a0d0d36", @ANYRES64=r1, @ANYBLOB="000131aacd8428ed39dc66450009ab2dbd7000fcdbdf251c00000008000300", @ANYRES32=0x0, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r3 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000500)="1b54beef9765f16d31f668d2db37f75318510ca6025213c6788499c98b9f0e44fbf86f9f5723d4dd85b291e05f5e2aff1bf823e761dd38fed3c9d4fd078734acf85dae7e65c031996462832f2e43e417a5bb2caf853034fa56ca2546e93a459f675d2eb87a6a770800000000000000f27e32f6198656ad1152d7fd310000000000", 0x81}, {&(0x7f0000002b40)="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", 0xf80}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000800}], 0x1, 0x4054)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c100714"], 0xf)
mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r4=>0x0}, &(0x7f0000000340)=0xc)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa42000, &(0x7f00000006c0)={[{@uuid_off}, {@uuid_off}, {@uuid_auto}, {@uuid_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_off}, {@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}], [{@uid_gt={'uid>', r4}}, {@subj_role={'subj_role', 0x3d, '/dev/loop0\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x2}}, 0x20)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697b653d3078303030303030303030303030303230302c00d36f94944700cb7d82d75f68fd4d957203b80d25e2d77c0a6284cf4470273f81e1eb7326fe3df81a89efb57cea481b58ca0199bd387bc757e9cf776619c253a11bafee7182897a4ce485012244d22b2af31f72693e0f4233464b32f23be67a5b"])

3.908430305s ago: executing program 6 (id=462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x219}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
gettimeofday(&(0x7f0000000040), &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r10, 0x25, 0x2, @void}, 0x10)
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x43}], 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r11=>0x0})
r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r12, 0x0, 0x0)
syz_usb_control_io$hid(r12, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.656706791s ago: executing program 3 (id=463):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000109c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0xfff2, r1, {0x6, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x91bb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24001090}, 0x80d4)

3.415974064s ago: executing program 3 (id=464):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756})
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r4, 0x0, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x2c, 0xd3, 0x1, 0x7, [{@multicast2, 0x5}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0xf847, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8, 0x29, 0x0, @empty, @empty}}}})
r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.187236121s ago: executing program 2 (id=465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2", 0x5b}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b", 0x15}, {&(0x7f0000000b40)="7ea229968456cc1d273939b7eaaaf05b3e95c220a05dfec9deedcff57f4337977785bc5532e5d07a8ccd0bbe9ca7c342b821efd28821b4b3993cc7a9cfa514552e371060b3c74d9ad72ddd7c8d0a2ad86262c6582d5da2894f9cbeef46b8a4017be35490301c70b310c1fa63a9c4770e7ce7163b13f9", 0x76}, {&(0x7f0000000cc0)="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", 0xf3c}, {&(0x7f0000001cc0)}, {&(0x7f0000002cc0)="b7d77122ff0e4e10075f1aea20a1dd71fd9685bfad6d382d971ef3d62a2a012f7d06f00576a349d7f5e806512101a1ab500915f3f907550ba9d8071279004ff65644851c526604972b086716368cd6cf777c582bc523f87ee79f9ba6b58d65d1eb742691c9a11d2523141a94b874f6f178d76742b442232d1fd588", 0x7b}, {&(0x7f0000002d80)}, {0x0}], 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
userfaultfd(0x801)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x40004, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x0, 0xffffffff})
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8)
socket(0x28, 0x801, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x89841)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x4, 0x2]}})
ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000000))
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x128, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcc5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "222e3c0558ed061023cd452b2bd7a5c02c4c160ca8c1c7cea99a45653d7083a4c842ecae"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c0}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40844}, 0x2000)

2.886598835s ago: executing program 3 (id=466):
rt_sigpending(0x0, 0x1000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x0, 0xc, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bbac1414aafffe4e24004d90780100000004000000497a1d08fd3d0ee007deac0acea662022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d01422d01cd53c3abe943"], 0x0)

2.642315004s ago: executing program 0 (id=467):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_userptr={0xfffffffa, 0x3, 0x4, 0x2, 0x2, {r2, r3/1000+60000}, {0x1, 0xc, 0xff, 0x7, 0x8, 0xf, '\t@\x00'}, 0x6, 0x2, {&(0x7f0000000100)=[{0x0, 0x7, {&(0x7f0000000080)}, 0x5}, {0x1, 0x7ff, {&(0x7f00000000c0)}, 0x9}]}, 0x7, 0x0, r4})
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100003b00015300000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.506003311s ago: executing program 0 (id=468):
syz_open_dev$sg(0x0, 0x0, 0x8002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000))
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.025351924s ago: executing program 0 (id=469):
syz_emit_ethernet(0x3e0, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "47966a", 0x3aa, 0x2f, 0x1, @remote, @mcast1, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x88, 0x18, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x1, 0xfe}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7, 0x0, [0xffff, 0xfa64, 0x1ff, 0x2, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x79c}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0xc}, @calipso={0x7, 0x50, {0x3, 0x12, 0x2, 0x5, [0xffffffffffffff80, 0x5, 0x5, 0x2, 0x2, 0x3, 0xb9, 0x6, 0x5]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x4, [0x5]}}, @hao={0xc9, 0x10, @mcast2}]}, @routing={0x2c, 0xa, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @empty, @loopback]}, @fragment={0x89, 0x0, 0x1, 0x1, 0x0, 0x1d, 0x65}, @srh={0x16, 0x2, 0x4, 0x1, 0xfe, 0x40, 0x7f, [@empty]}, @srh={0x0, 0x4, 0x4, 0x2, 0x3, 0x0, 0xa77, [@mcast2, @remote]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa3, 0x1, [], "4e70c299222e66097819381bb343abce0cd64911275142f5a1a3c69a5c6b65b1e5843ae06292fce12dc393c19a6ada19d48bf68067422f4ce6743c55c3b1ee0c785fc1c04939ebfd85d9feba1e08e753c4068b2d994fd9136911073a90db40c3cbc9ea3263e1bf43bc150e2762a2349b870d6e87b9dc2150f0ef566e1a59f8e7791c4cd9c817b6ab462282cb2d55ae944b7b19dccd07f2736cf17506333a2a4b9b895f"}, {0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x25, 0x4], "6e5f404fd0948596da8177c23191cde54ffceec1da656cf74138245e758de46cc52cb97126d6ae839ce49cfa86855378d9d1c260877b17fb7c1267ddfedc9c7a0d9002dc50ceebcd31c3b775124817227aae712a25b87ec3580f79d72458ad4c725f1ed862344a6eab0d1574ce00d1c065ab1331ddd70aa0d1af5c798b66d6d833f488e52d90a1371fc732aab619ac9e1ebdd312997a98a30174ac242228b2c1622608b92eac4c4e6cce6a27362eaa544d4510fd877b4c7fee922a26acd7cab54f06256a4bec43183241008199e7f41a7a4a323d"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x6, 0x3, 0x1, 0x3, 0x3, 0x8}, 0x1, {0x8f06}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x8, 0x1, 0x1, 0x1, 0x2, 0x9}, 0x2, {0x8, 0x1, 0x1, 0x3, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x3, "8edf5f57ae5f98e05555f1a69ab81a48b64c78f36458b5b2b1db59fce80a56957254b88b909e9854dabcade2538921f5e11a474cebb9be3a86f9da9bbcbd533c7a5e809fdb84adfb85c1b8683a3150146496c18fc69c34052a8e1f5a168d9cc5ad462c8a1ad4551496a43d70482ea3f80afe9b"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount$binderfs(0x0, 0x0, 0x0, 0x1880036, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f"], 0x8)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

1.749890247s ago: executing program 3 (id=470):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000100060000000500040003000000050005b2050000000900020073797a320000000010000300686173683a69702c6d616300671b26b13d7daa9f2fc7bdce4b90b6389ee099427f98465ba34619129085901f64f8c112cea6cb590ca970002a3a00"/130], 0x48}, 0x1, 0x0, 0x0, 0x4044884}, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040080)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x80}}, 0x24884)
mkdirat(0xffffffffffffffff, 0x0, 0x100)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r7 = socket$unix(0x1, 0x1, 0x0)
close(0xffffffffffffffff)
listen(r7, 0x0)

1.649908845s ago: executing program 2 (id=471):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = epoll_create1(0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp, 0x1000000}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x70000003})

1.417311211s ago: executing program 2 (id=472):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESOCT], 0x14}}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2000000003500000140012800b00010067654e6576650000040002801400030067656e65766531000000000000000000de7319c8d7ee3ea372be143452da06c2b095d173164ab8e16bbb11a4dbedbd3db11d40268ed0f172fa6b03adc1aff2078cc058e02a4a731dbc31ad8a75e9bd9be35eff3ce5c09b082479936be6f5ebbcebb08f33e8d4560ed41bf54b855b4e0328898fd7cab656dcf2dc92b1140c8c34382954c6ffdf0af41c0dbecf32ad4335cd8f1007f11c78dbe3a8edeed21ccee41caa5200df883d87cc3c5c11c457c929587b35002ca6a2740c5091811117ad6b153c8413da294e15c82fe6f5fbcda407ca10"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2000000)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r8 = dup(r7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
write(r9, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
write$UHID_INPUT(r8, &(0x7f0000002180)={0x8, {"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", 0x1000}}, 0x1006)
dup(r1)
modify_ldt$write(0x1, &(0x7f0000000100)={0x3af, 0x7fffffffffffffff, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00')
read$FUSE(r12, &(0x7f00000038c0)={0x2020}, 0x2020)

521.01384ms ago: executing program 3 (id=473):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x4, 0x20001, 0x2d6})
r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = socket$netlink(0x10, 0x3, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]})
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000019100)={0x8, 0x0, {0xffffffffffffffff, @usage, 0x0, 0x5, 0x0, 0x200, 0x9, 0x81f6, 0x40, @struct={0x7, 0x3}, 0x20, 0x4, [0x4, 0x1, 0x1, 0x86, 0xfffffffffffff0f7, 0x80]}, {0x2, @struct={0x7f, 0x9}, <r7=>0x0, 0x3, 0x8, 0x5b7, 0xee79, 0x6, 0x2, @struct={0x5, 0x9}, 0x40, 0x7, [0x2, 0xfffffffffffffffb, 0xd0c, 0x1, 0x7, 0xe]}, {0xdcf, @struct={0x5, 0x101}, 0x0, 0x0, 0x5, 0x7fffffffffffffff, 0x6, 0x2, 0xe8, @struct={0x8, 0x3}, 0x10001, 0x5, [0x2, 0x0, 0x6, 0xec, 0x800, 0x7f]}, {0x3, 0x3, 0x100}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000019500)={r7, 0x3, 0x1, [0x80000000, 0x9, 0x2, 0xfffffffffffffff5, 0xfffffffffffffffe], [0x7f03, 0x2, 0x5, 0x1, 0x7, 0x3, 0x0, 0x5, 0x485, 0xd2, 0x3, 0xd02e, 0x9, 0x0, 0x3, 0x7, 0x80, 0xfffffffffffffff9, 0x7, 0x3, 0x1185c00, 0x9, 0x8, 0x8000000000000001, 0x3, 0x99e2, 0x5, 0x5, 0x2, 0x8000, 0x0, 0x1d94, 0xc, 0x2, 0x7f, 0xff, 0x3, 0x9, 0x1, 0x12e60d8f, 0xd2b, 0xf, 0xf25e, 0x5, 0x2, 0xff, 0x1000, 0xfffffffffffffffe, 0x0, 0x2, 0x8000000000000001, 0xe7, 0x5, 0x9, 0xffffffffffff2c66, 0x100000000, 0x9, 0x7ff, 0x4, 0x9, 0xff, 0x401, 0x600000000000000, 0x6, 0x100000000, 0x0, 0x401, 0x3, 0x4, 0x100000000, 0x9b, 0x80000001, 0xe, 0x0, 0xa1b, 0x3, 0x2, 0xff, 0x3, 0x3, 0x8000000000000000, 0x9d0, 0xfff, 0x1, 0x1, 0x5, 0x7fff, 0x72, 0x81, 0x5, 0x800, 0x2, 0x7ff, 0x4, 0x8, 0x7fff, 0x4, 0xff, 0x3, 0x7, 0x5, 0x7, 0x34, 0x8000000000000000, 0x1, 0xffffffff, 0x3, 0x8, 0xfffffffffffffff7, 0x100, 0x8, 0x5, 0x9, 0x5, 0x9, 0xfffffffffffffff8, 0xdb73, 0x1c0, 0xa, 0x6, 0x9]})
r8 = socket$inet(0x2, 0xa, 0x0)
sendmmsg$sock(r8, &(0x7f0000003280), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041)

0s ago: executing program 2 (id=474):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.834885][ T5871] usb 1-1: device descriptor read/64, error -71
[   80.955098][ T5871] usb usb1-port1: attempt power cycle
[   81.138699][   T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.287185][   T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.308335][ T5871] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   81.335437][ T5871] usb 1-1: device descriptor read/8, error -71
[   81.373161][   T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.444366][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.452502][   T30] audit: type=1400 audit(1773638010.414:256): avc:  denied  { ioctl } for  pid=6172 comm="syz-executor" path="socket:[10328]" dev="sockfs" ino=10328 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.453171][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.493702][   T30] audit: type=1400 audit(1773638010.464:257): avc:  denied  { write } for  pid=6175 comm="syz.3.71" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   81.517223][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.528089][   T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.546151][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.556226][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.604885][ T5871] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   81.711330][ T5871] usb 1-1: device descriptor read/8, error -71
[   81.721395][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.730196][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.737792][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.745244][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.752512][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.214483][   T30] audit: type=1400 audit(1773638011.184:258): avc:  denied  { create } for  pid=6177 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   82.283701][   T30] audit: type=1400 audit(1773638011.254:259): avc:  denied  { sqpoll } for  pid=6187 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   82.295116][ T5871] usb usb1-port1: unable to enumerate USB device
[   82.351603][   T30] audit: type=1400 audit(1773638011.314:260): avc:  denied  { watch watch_reads } for  pid=6187 comm="syz.0.73" path="/13" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   82.541171][ T6177] delete_channel: no stack
[   82.563476][   T30] audit: type=1400 audit(1773638011.534:261): avc:  denied  { read } for  pid=5473 comm="dhcpcd" name="n103" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.798171][   T30] audit: type=1400 audit(1773638011.534:262): avc:  denied  { open } for  pid=5473 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.874912][   T30] audit: type=1400 audit(1773638011.534:263): avc:  denied  { getattr } for  pid=5473 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   83.051259][ T6224] fuse: Unknown parameter 'ew	�`��}����<���ָ@�o�́��g��&g3��������'
[   83.255153][   T30] audit: type=1400 audit(1773638011.594:264): avc:  denied  { connect } for  pid=6210 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   83.385508][   T77] bridge_slave_1: left allmulticast mode
[   83.391331][   T77] bridge_slave_1: left promiscuous mode
[   83.443210][   T77] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.576978][   T77] bridge_slave_0: left allmulticast mode
[   83.582644][   T77] bridge_slave_0: left promiscuous mode
[   83.644022][   T77] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.655840][ T5809] Bluetooth: hci3: command tx timeout
[   83.805939][  T917] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   83.815400][ T5809] Bluetooth: hci4: command tx timeout
[   83.974947][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   83.998356][  T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.021447][  T917] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[   84.032913][  T917] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[   84.074489][  T917] usb 3-1: Product: syz
[   84.080920][  T917] usb 3-1: Manufacturer: syz
[   84.099666][  T917] usb 3-1: SerialNumber: syz
[   84.112524][  T917] usb 3-1: config 0 descriptor??
[   84.130689][  T917] gspca_main: conex-2.14.0 probing 0572:0041
[   84.139676][   T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.150099][   T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.165121][   T10] usb 1-1: Using ep0 maxpacket: 32
[   84.177301][   T10] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[   84.185697][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.220792][   T77] bond0 (unregistering): Released all slaves
[   84.227751][   T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[   84.250545][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.260377][   T10] usb 1-1: Product: syz
[   84.265078][   T10] usb 1-1: Manufacturer: syz
[   84.270045][   T10] usb 1-1: SerialNumber: syz
[   84.285060][   T10] usb 1-1: config 0 descriptor??
[   84.299224][   T10] gspca_main: sunplus-2.14.0 probing 08ca:2060
[   84.309329][ T6172] chnl_net:caif_netlink_parms(): no params data found
[   84.634834][ T5864] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   84.667388][  T917] usb 3-1: USB disconnect, device number 6
[   84.845048][ T6182] chnl_net:caif_netlink_parms(): no params data found
[   84.866817][ T5864] usb 4-1: not running at top speed; connect to a high speed hub
[   84.899031][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.996740][ T5864] usb 4-1: string descriptor 0 read error: -22
[   85.003017][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.044673][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.061905][   T77] hsr_slave_0: left promiscuous mode
[   85.096016][ T5864] usb 4-1: bad CDC descriptors
[   85.105025][   T77] hsr_slave_1: left promiscuous mode
[   85.110863][   T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.146443][   T77] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.165198][   T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.174077][   T77] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.204765][   T77] veth1_macvtap: left promiscuous mode
[   85.210463][   T77] veth0_macvtap: left promiscuous mode
[   85.228082][   T77] veth1_vlan: left promiscuous mode
[   85.233406][   T77] veth0_vlan: left promiscuous mode
[   85.322717][ T6249] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   85.684364][   T77] team0 (unregistering): Port device team_slave_1 removed
[   85.709128][   T77] team0 (unregistering): Port device team_slave_0 removed
[   85.734888][ T5809] Bluetooth: hci3: command tx timeout
[   85.895328][ T5809] Bluetooth: hci4: command tx timeout
[   86.014619][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.038439][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.057875][ T6172] bridge_slave_0: entered allmulticast mode
[   86.076015][ T6172] bridge_slave_0: entered promiscuous mode
[   86.117175][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.203271][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.226113][ T6172] bridge_slave_1: entered allmulticast mode
[   86.247592][ T6172] bridge_slave_1: entered promiscuous mode
[   86.260900][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.269765][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.305280][ T6182] bridge_slave_0: entered allmulticast mode
[   86.345340][ T6182] bridge_slave_0: entered promiscuous mode
[   86.380087][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.417301][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.431421][ T6182] bridge_slave_1: entered allmulticast mode
[   86.451107][ T6182] bridge_slave_1: entered promiscuous mode
[   86.471466][ T6290] Zero length message leads to an empty skb
[   86.493573][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.664833][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.714216][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.128555][ T6172] team0: Port device team_slave_0 added
[   87.138461][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.189868][ T6172] team0: Port device team_slave_1 added
[   87.222231][ T6182] team0: Port device team_slave_0 added
[   87.231470][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.240720][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.273675][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.314550][   T24] usb 4-1: USB disconnect, device number 3
[   87.315430][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.329428][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.355661][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.380829][ T6182] team0: Port device team_slave_1 added
[   87.530753][   T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.864840][ T5809] Bluetooth: hci3: command tx timeout
[   87.975551][ T5809] Bluetooth: hci4: command tx timeout
[   88.005590][   T30] kauditd_printk_skb: 19 callbacks suppressed
[   88.005607][   T30] audit: type=1400 audit(1773638016.694:284): avc:  denied  { create } for  pid=6299 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   88.124639][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.140254][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.319056][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.354713][   T24] usb 1-1: USB disconnect, device number 7
[   88.390414][ T6172] hsr_slave_0: entered promiscuous mode
[   88.433940][ T6172] hsr_slave_1: entered promiscuous mode
[   88.449890][ T6172] debugfs: 'hsr0' already exists in 'hsr'
[   88.460057][ T6172] Cannot create hsr debugfs directory
[   88.477384][   T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.494421][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.502852][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.529394][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.674973][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   88.735587][   T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.806032][   T10] usb 4-1: device descriptor read/64, error -71
[   88.818383][ T6324] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[   88.892531][ T6182] hsr_slave_0: entered promiscuous mode
[   88.900022][ T6182] hsr_slave_1: entered promiscuous mode
[   88.913252][ T6182] debugfs: 'hsr0' already exists in 'hsr'
[   88.921951][ T6182] Cannot create hsr debugfs directory
[   88.996213][   T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.064832][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   89.214912][   T10] usb 4-1: device descriptor read/64, error -71
[   89.298803][   T77] bridge_slave_1: left allmulticast mode
[   89.311198][   T77] bridge_slave_1: left promiscuous mode
[   89.319550][   T77] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.327284][   T10] usb usb4-port1: attempt power cycle
[   89.342646][   T77] bridge_slave_0: left allmulticast mode
[   89.351722][   T77] bridge_slave_0: left promiscuous mode
[   89.370146][   T77] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.734841][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   89.772577][   T10] usb 4-1: device descriptor read/8, error -71
[   89.830567][   T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.839204][   T30] audit: type=1400 audit(1773638018.804:285): avc:  denied  { listen } for  pid=6333 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.858833][   T30] audit: type=1400 audit(1773638018.814:286): avc:  denied  { connect } for  pid=6333 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.880931][   T30] audit: type=1400 audit(1773638018.814:287): avc:  denied  { read } for  pid=6333 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.903525][   T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.912336][ T5809] Bluetooth: hci3: command tx timeout
[   89.918220][   T30] audit: type=1400 audit(1773638018.864:288): avc:  denied  { shutdown } for  pid=6333 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.936286][   T77] bond0 (unregistering): Released all slaves
[   90.015177][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   90.052470][ T6172] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   90.063027][   T10] usb 4-1: device descriptor read/8, error -71
[   90.064849][ T5809] Bluetooth: hci4: command tx timeout
[   90.090504][ T6172] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   90.166818][ T6172] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   90.183859][ T6172] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   90.199767][   T10] usb usb4-port1: unable to enumerate USB device
[   90.339194][   T77] hsr_slave_0: left promiscuous mode
[   90.346413][   T77] hsr_slave_1: left promiscuous mode
[   90.492643][   T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.500126][   T77] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.517982][   T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.525484][   T77] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.542172][   T77] veth1_macvtap: left promiscuous mode
[   90.548192][   T77] veth0_macvtap: left promiscuous mode
[   90.553712][   T77] veth1_vlan: left promiscuous mode
[   90.559412][   T77] veth0_vlan: left promiscuous mode
[   90.652283][   T30] audit: type=1400 audit(1773638019.624:289): avc:  denied  { connect } for  pid=6343 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   91.204192][   T77] team0 (unregistering): Port device team_slave_1 removed
[   91.220920][   T77] team0 (unregistering): Port device team_slave_0 removed
[   91.459837][ T6354] comedi comedi0: Minor 3 could not be opened
[   91.567023][   T30] audit: type=1400 audit(1773638020.534:290): avc:  denied  { append } for  pid=6355 comm="syz.0.93" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   91.595179][ T6182] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   91.632276][ T6182] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   91.671091][ T6182] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   91.706685][ T6182] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   91.814989][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   91.851219][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.904196][ T6172] 8021q: adding VLAN 0 to HW filter on device team0
[   91.930702][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.937867][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.978928][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   91.992216][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.994821][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   91.999393][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.009666][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   92.049699][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.057237][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.067176][ T6356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   92.098090][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   92.141339][ T6182] 8021q: adding VLAN 0 to HW filter on device team0
[   92.176194][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.183358][ T6205] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.244040][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.251192][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.333409][    T9] usb 1-1: USB disconnect, device number 8
[   92.647188][ T6172] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.761579][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.925367][   T30] audit: type=1400 audit(1773638021.894:291): avc:  denied  { create } for  pid=6408 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   92.985107][   T30] audit: type=1400 audit(1773638021.904:292): avc:  denied  { ioctl } for  pid=6408 comm="syz.3.99" path="socket:[10988]" dev="sockfs" ino=10988 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   93.084360][   T30] audit: type=1400 audit(1773638021.954:293): avc:  denied  { read } for  pid=6413 comm="syz.0.100" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   93.132703][   T30] audit: type=1400 audit(1773638022.064:294): avc:  denied  { mounton } for  pid=6423 comm="syz.2.101" path="/23/file0" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   93.220014][   T30] audit: type=1400 audit(1773638022.064:295): avc:  denied  { mount } for  pid=6423 comm="syz.2.101" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   93.243188][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   93.267088][   T30] audit: type=1400 audit(1773638022.134:296): avc:  denied  { map } for  pid=6423 comm="syz.2.101" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.290334][   T30] audit: type=1400 audit(1773638022.134:297): avc:  denied  { execute } for  pid=6423 comm="syz.2.101" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.347594][   T30] audit: type=1400 audit(1773638022.224:298): avc:  denied  { read } for  pid=6423 comm="syz.2.101" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   93.374075][   T30] audit: type=1400 audit(1773638022.234:299): avc:  denied  { open } for  pid=6423 comm="syz.2.101" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   93.413644][ T6172] veth0_vlan: entered promiscuous mode
[   93.416205][   T10] usb 1-1: config 0 has no interfaces?
[   93.424636][   T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   93.425216][ T6172] veth1_vlan: entered promiscuous mode
[   93.454250][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.493025][ T6182] veth0_vlan: entered promiscuous mode
[   93.500203][   T10] usb 1-1: config 0 descriptor??
[   93.527553][ T6182] veth1_vlan: entered promiscuous mode
[   93.534397][ T6172] veth0_macvtap: entered promiscuous mode
[   93.547902][ T6172] veth1_macvtap: entered promiscuous mode
[   93.572683][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.598585][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.616879][   T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.627797][   T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.637229][   T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.648876][ T6182] veth0_macvtap: entered promiscuous mode
[   93.656750][   T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.675151][ T6182] veth1_macvtap: entered promiscuous mode
[   93.723325][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.752970][   T10] usb 1-1: USB disconnect, device number 9
[   93.755345][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.789011][   T30] audit: type=1400 audit(1773638022.764:300): avc:  denied  { write } for  pid=6413 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   93.795048][ T6206] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.861969][ T6206] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.883266][ T6206] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.898963][ T6206] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.911626][ T6430] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   93.912269][ T6436] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   93.926101][ T6430] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   93.928841][ T6436] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   93.947700][ T6436] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   93.971034][ T6436] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   93.973859][ T6430] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   93.982748][ T6436] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   93.991366][ T6436] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   94.006737][ T6436] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   94.015570][ T6430] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   94.022949][ T6436] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   94.030891][ T6436] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   94.045140][ T6430] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   94.054838][ T6436] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   94.066732][ T6430] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   94.071048][ T6436] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   94.118980][ T6436] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   94.140107][ T6446] capability: warning: `syz.3.102' uses deprecated v2 capabilities in a way that may be insecure
[   94.225003][ T6430] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   94.235407][ T6430] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   94.254550][ T6430] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   94.264279][ T6430] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   94.375660][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.399002][   T30] audit: type=1400 audit(1773638023.364:301): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   94.424875][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.469968][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.480573][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.499051][   T30] audit: type=1400 audit(1773638023.464:302): avc:  denied  { getopt } for  pid=6461 comm="syz.3.103" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   94.548076][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.560133][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.605445][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.630405][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.746145][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[   95.843315][ T6514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.109'.
[   95.969778][ T6510] bond1: Unable to set down delay as MII monitoring is disabled
[   96.051882][ T6510] bond1 (unregistering): Released all slaves
[   96.916553][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'.
[   97.236856][ T6517] random: crng reseeded on system resumption
[   97.391174][ T6529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.617378][ T6529] xt_hashlimit: size too large, truncated to 1048576
[   98.394854][ T5871] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   98.524940][ T5871] usb 3-1: device descriptor read/64, error -71
[   98.796792][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.0.123'.
[   98.807550][ T5871] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[   98.960308][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   99.906433][ T5871] usb 3-1: device descriptor read/64, error -71
[   99.925169][   T24] usb 7-1: Using ep0 maxpacket: 16
[   99.933630][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.948122][ T6589] tipc: Failed to remove unknown binding: 66,1,1/0:675860534/675860536
[   99.974500][   T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  100.188662][ T5871] usb usb3-port1: attempt power cycle
[  100.694341][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  100.735151][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  100.735166][   T30] audit: type=1400 audit(1773638029.714:320): avc:  denied  { setopt } for  pid=6598 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  100.784341][   T24] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  100.894989][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.904478][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  100.929860][   T24] usb 7-1: SerialNumber: syz
[  100.962816][   T24] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  100.984849][ T5871] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  101.025338][ T5871] usb 3-1: device descriptor read/8, error -71
[  101.183896][   T24] usb 7-1: USB disconnect, device number 2
[  101.340361][ T6613] syzkaller0: entered promiscuous mode
[  101.625988][ T6613] syzkaller0: entered allmulticast mode
[  101.797764][   T30] audit: type=1400 audit(1773638030.714:321): avc:  denied  { execute } for  pid=6609 comm="syz.3.129" path="/32/cpu.stat" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.845726][ T6620] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3 out of range (51000000..2150000000)
[  102.089391][   T30] audit: type=1400 audit(1773638031.064:322): avc:  denied  { read write } for  pid=6632 comm="syz.6.134" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  102.306242][   T30] audit: type=1400 audit(1773638031.084:323): avc:  denied  { open } for  pid=6632 comm="syz.6.134" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  102.997677][   T30] audit: type=1400 audit(1773638031.134:324): avc:  denied  { bind } for  pid=6629 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  103.101010][   T30] audit: type=1326 audit(1773638032.004:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.6.135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x0
[  103.805019][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  103.988265][ T5857] usb 6-1: Using ep0 maxpacket: 32
[  104.009842][ T5857] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  104.026770][ T5857] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  104.288073][ T5857] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  104.306651][ T5857] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  104.320235][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[  104.337018][ T5857] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  104.347045][ T5857] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  104.397572][ T5857] usb 6-1: Product: syz
[  104.405106][ T5857] usb 6-1: Manufacturer: syz
[  104.413091][ T5857] usb 6-1: SerialNumber: syz
[  104.636574][ T5857] usb 6-1: config 0 descriptor??
[  104.682484][ T5857] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  104.748683][ T5857] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  104.865423][   T30] audit: type=1400 audit(1773638033.834:326): avc:  denied  { mount } for  pid=6669 comm="syz.3.138" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  104.950255][   T30] audit: type=1400 audit(1773638033.864:327): avc:  denied  { ioctl } for  pid=6678 comm="syz.6.139" path="socket:[13380]" dev="sockfs" ino=13380 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  105.471141][ T6108] usb 6-1: USB disconnect, device number 2
[  105.483654][ T6108] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  105.837788][   T30] audit: type=1400 audit(1773638034.804:328): avc:  denied  { create } for  pid=6686 comm="syz.6.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  105.884260][   T30] audit: type=1400 audit(1773638034.804:329): avc:  denied  { setopt } for  pid=6686 comm="syz.6.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.097643][   T30] audit: type=1400 audit(1773638035.074:330): avc:  denied  { ioctl } for  pid=6692 comm="syz.3.142" path="socket:[12724]" dev="sockfs" ino=12724 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  106.196632][   T30] audit: type=1400 audit(1773638035.174:331): avc:  denied  { audit_read } for  pid=6686 comm="syz.6.141" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  106.364853][ T6108] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  106.514904][ T6108] usb 6-1: Using ep0 maxpacket: 32
[  106.535485][ T6108] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  106.543707][ T6108] usb 6-1: config 0 has no interface number 0
[  106.554096][ T6108] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  106.573307][ T6108] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  106.583027][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.591185][ T6108] usb 6-1: Product: syz
[  106.595460][ T6108] usb 6-1: Manufacturer: syz
[  106.600054][ T6108] usb 6-1: SerialNumber: syz
[  106.608546][ T6108] usb 6-1: config 0 descriptor??
[  106.623676][ T6108] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  106.634141][ T6108] em28xx 6-1:0.132: Video interface 132 found:
[  106.652812][ T6635] wg1: entered promiscuous mode
[  106.657788][ T6635] wg1: entered allmulticast mode
[  108.036389][ T6108] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  108.951334][   T30] audit: type=1400 audit(1773638037.104:332): avc:  denied  { setopt } for  pid=6710 comm="syz.0.145" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  109.047974][ T6720] loop6: detected capacity change from 0 to 7
[  110.031468][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.041195][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.053794][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'.
[  110.054376][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.072226][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.082040][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.091612][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.102340][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.111978][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.120714][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.130330][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.144803][ T6722] netlink: 68 bytes leftover after parsing attributes in process `syz.5.143'.
[  110.153678][ T6722] netlink: 68 bytes leftover after parsing attributes in process `syz.5.143'.
[  110.256420][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.266043][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.284313][ T6108] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  110.314608][ T6108] em28xx 6-1:0.132: board has no eeprom
[  110.434717][ T6108] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  110.442962][ T6108] em28xx 6-1:0.132: analog set to bulk mode.
[  110.449508][ T5871] em28xx 6-1:0.132: Registering V4L2 extension
[  110.466250][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.475862][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.485469][ T6720] ldm_validate_partition_table(): Disk read failed.
[  110.497498][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.507130][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.961112][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.970907][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.983279][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.992952][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  111.024839][ T6720] Dev loop6: unable to read RDB block 0
[  111.033475][ T6720]  loop6: unable to read partition table
[  111.040382][ T6720] loop6: partition table beyond EOD, truncated
[  111.046860][ T6720] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  111.152762][   T30] audit: type=1400 audit(1773638040.114:333): avc:  denied  { write } for  pid=6733 comm="syz.0.148" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  111.324789][   T30] audit: type=1400 audit(1773638040.294:334): avc:  denied  { create } for  pid=6739 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  111.525291][ T5871] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  111.531125][ T5912] usb 6-1: USB disconnect, device number 3
[  111.974905][ T5871] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[  111.983796][ T5871] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-19)
[  112.027414][ T5912] em28xx 6-1:0.132: Disconnecting em28xx
[  112.625830][ T5871] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  112.632980][ T5871] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  112.732243][ T5871] em28xx 6-1:0.132: No AC97 audio processor
[  112.745059][ T5871] usb 6-1: Decoder not found
[  112.805993][ T5871] em28xx 6-1:0.132: failed to create media graph
[  112.812458][ T5871] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  112.878741][ T5871] em28xx 6-1:0.132: Remote control support is not available for this card.
[  113.037778][ T5912] em28xx 6-1:0.132: Closing input extension
[  113.117733][ T5912] em28xx 6-1:0.132: Freeing device
[  113.516318][ T5912] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  113.717514][ T5912] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  114.146997][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.156434][ T5912] usb 6-1: Product: syz
[  114.160611][ T5912] usb 6-1: Manufacturer: syz
[  114.165586][ T5912] usb 6-1: SerialNumber: syz
[  114.180144][ T5912] usb 6-1: config 0 descriptor??
[  114.198200][ T5912] hub 6-1:0.0: bad descriptor, ignoring hub
[  114.218338][ T5912] hub 6-1:0.0: probe with driver hub failed with error -5
[  114.244171][ T5912] f81232 6-1:0.0: f81534a converter detected
[  114.422874][ T5912] usb 6-1: f81534a converter now attached to ttyUSB0
[  114.643539][ T5912] usb 6-1: USB disconnect, device number 4
[  114.791897][ T5912] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  114.845617][ T5912] f81232 6-1:0.0: device disconnected
[  116.394491][ T6840] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  116.426389][   T30] audit: type=1400 audit(1773638045.384:335): avc:  denied  { relabelto } for  pid=6839 comm="syz.5.163" name="5" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  116.455230][ T5857] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  116.551697][   T30] audit: type=1400 audit(1773638045.384:336): avc:  denied  { associate } for  pid=6839 comm="syz.5.163" name="5" dev="tmpfs" ino=40 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  116.596760][ T6850] netlink: 'syz.3.164': attribute type 1 has an invalid length.
[  116.626924][   T30] audit: type=1400 audit(1773638045.574:337): avc:  denied  { unmount } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  116.686145][   T30] audit: type=1400 audit(1773638045.624:338): avc:  denied  { mount } for  pid=6846 comm="syz.6.165" name="/" dev="ramfs" ino=13585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  116.686516][ T6850] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.709744][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.726620][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.727559][ T5857] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  116.727583][ T5857] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  116.727600][ T5857] usb 3-1: Manufacturer: syz
[  116.751825][ T5857] usb 3-1: config 0 descriptor??
[  116.892457][ T6859] bond1: (slave gretap1): making interface the new active one
[  116.949663][   T30] audit: type=1400 audit(1773638045.924:339): avc:  denied  { name_bind } for  pid=6851 comm="syz.0.166" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  117.102434][ T6863] tmpfs: Cannot change global quota limit on remount
[  117.409481][   T30] audit: type=1400 audit(1773638045.934:340): avc:  denied  { name_connect } for  pid=6851 comm="syz.0.166" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  117.431587][   T30] audit: type=1400 audit(1773638046.074:341): avc:  denied  { remount } for  pid=6856 comm="syz.5.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  117.466888][ T6859] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  117.507063][   T30] audit: type=1400 audit(1773638046.484:342): avc:  denied  { getopt } for  pid=6864 comm="syz.6.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  117.608678][ T6850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6850 comm=syz.3.164
[  117.907238][   T30] audit: type=1400 audit(1773638046.864:343): avc:  denied  { write } for  pid=6868 comm="syz.5.169" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  118.785446][ T6832] syzkaller0: entered promiscuous mode
[  118.791074][ T6832] syzkaller0: entered allmulticast mode
[  118.800224][   T30] audit: type=1400 audit(1773638046.864:344): avc:  denied  { ioctl } for  pid=6868 comm="syz.5.169" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  120.322508][ T6890] netlink: 'syz.5.172': attribute type 12 has an invalid length.
[  120.333773][ T6890] netlink: 'syz.5.172': attribute type 29 has an invalid length.
[  120.341823][ T6890] netlink: 'syz.5.172': attribute type 2 has an invalid length.
[  120.349578][ T6890] netlink: 136 bytes leftover after parsing attributes in process `syz.5.172'.
[  120.358615][ T6889] netlink: 'syz.5.172': attribute type 12 has an invalid length.
[  120.366378][ T6889] netlink: 'syz.5.172': attribute type 29 has an invalid length.
[  120.374090][ T6889] netlink: 'syz.5.172': attribute type 2 has an invalid length.
[  120.381791][ T6889] netlink: 136 bytes leftover after parsing attributes in process `syz.5.172'.
[  120.415808][ T5857] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71
[  120.424642][ T5857] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71
[  120.454890][ T5857] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71
[  120.465682][ T6895] warning: `syz.3.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  120.477220][ T5857] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[  120.494577][ T5857] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71
[  120.541105][ T5857] usb 3-1: USB disconnect, device number 11
[  121.035654][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.178'.
[  121.044597][ T6915] bond0: ARP target 8.4.0.0 is already present
[  121.051518][ T6915] bond0: option arp_ip_target: invalid value (1032)
[  122.939807][ T6923] devpts: Bad value for 'max'
[  123.113864][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  123.113879][   T30] audit: type=1400 audit(1773638052.084:348): avc:  denied  { create } for  pid=6916 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  123.228644][   T30] audit: type=1400 audit(1773638052.084:349): avc:  denied  { connect } for  pid=6916 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  123.228671][   T30] audit: type=1400 audit(1773638052.164:350): avc:  denied  { write } for  pid=6916 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  123.436294][ T5871] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  123.604836][ T5871] usb 7-1: Using ep0 maxpacket: 8
[  123.945464][ T5871] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[  123.955646][ T5871] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  124.000516][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.028960][ T5871] usb 7-1: Product: syz
[  124.046799][ T5871] usb 7-1: Manufacturer: syz
[  124.059048][ T5871] usb 7-1: SerialNumber: syz
[  124.078320][ T5871] usb 7-1: config 0 descriptor??
[  124.123359][ T5871] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  124.163664][ T5871] usb 7-1: setting power ON
[  124.196137][ T5871] dvb-usb: bulk message failed: -22 (2/0)
[  124.231207][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.265140][ T5871] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  124.296759][ T5871] usb 7-1: media controller created
[  124.325863][ T6929] dvb-usb: bulk message failed: -22 (3/0)
[  124.331827][ T6929] dvb-usb: bulk message failed: -22 (4/0)
[  124.348571][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.181'.
[  124.377605][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.421207][ T6952] fuse: Unknown parameter 'euid<00000000000000000000'
[  124.429956][   T30] audit: type=1326 audit(1773638053.404:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  124.458660][ T6952] cgroup: Unknown subsys name 'pcr'
[  124.655118][ T5871] usb 7-1: selecting invalid altsetting 6
[  124.692376][ T5871] usb 7-1: digital interface selection failed (-22)
[  124.724878][   T30] audit: type=1326 audit(1773638053.404:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  124.753266][ T5871] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  124.780602][ T5871] usb 7-1: setting power OFF
[  124.787915][ T5871] dvb-usb: bulk message failed: -22 (2/0)
[  124.794258][ T5871] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  124.805071][   T30] audit: type=1326 audit(1773638053.434:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  124.832228][ T5871] (NULL device *): no alternate interface
[  124.892189][ T5871] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  124.909266][   T30] audit: type=1326 audit(1773638053.454:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  124.977888][ T5871] usb 7-1: USB disconnect, device number 3
[  125.015929][ T6959] 9p: Bad value for 'rfdno'
[  125.017415][   T30] audit: type=1326 audit(1773638053.454:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  125.143663][   T30] audit: type=1400 audit(1773638053.764:356): avc:  denied  { unmount } for  pid=6172 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  125.189306][ T6966] netlink: 'syz.3.186': attribute type 1 has an invalid length.
[  125.217958][   T30] audit: type=1400 audit(1773638053.914:357): avc:  denied  { map } for  pid=6957 comm="syz.5.185" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  125.309669][ T6970] netlink: 14 bytes leftover after parsing attributes in process `syz.3.186'.
[  125.399505][ T6972] netlink: 112 bytes leftover after parsing attributes in process `syz.6.189'.
[  125.774838][ T5857] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  125.782802][ T6985] futex_wake_op: syz.0.191 tries to shift op by -1; fix this program
[  125.954855][ T5857] usb 6-1: Using ep0 maxpacket: 32
[  125.972812][ T5857] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  126.128133][ T5857] usb 6-1: config 0 has no interface number 0
[  126.230284][ T5857] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  126.285215][ T5857] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  126.347305][ T5857] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  126.375532][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'.
[  126.384423][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.395029][ T5857] usb 6-1: Product: syz
[  126.399230][ T5857] usb 6-1: Manufacturer: syz
[  126.403820][ T5857] usb 6-1: SerialNumber: syz
[  126.409546][ T6993] netlink: 152 bytes leftover after parsing attributes in process `syz.3.193'.
[  126.553580][ T5857] usb 6-1: config 0 descriptor??
[  127.147002][ T5857] radio-si470x 6-1:0.35: this is not a si470x device.
[  127.175284][ T5857] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  127.202273][ T7012] netlink: 'syz.3.197': attribute type 1 has an invalid length.
[  127.216541][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  127.315345][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  127.321990][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  127.363202][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'.
[  127.406333][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.422585][    T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  127.433904][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.444604][ T7022] 9pnet_fd: Insufficient options for proto=fd
[  127.451619][ T5857] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71)
[  127.473640][    T9] usb 3-1: config 0 descriptor??
[  127.482021][ T5857] radio-raremono 6-1:0.35: V4L2 device registered as radio48
[  127.493515][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  127.514834][ T5857] usb 6-1: USB disconnect, device number 5
[  127.541682][ T5857] radio-raremono 6-1:0.35: Thanko's Raremono disconnected
[  127.785314][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.821713][ T7032] syzkaller0: entered promiscuous mode
[  127.828823][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.887147][ T7032] syzkaller0: entered allmulticast mode
[  127.904100][ T7032] tc action pedit offset must be on 32 bit boundaries
[  127.916028][ T7003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.195'.
[  128.012393][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.024291][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.059250][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.069307][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.118838][ T7033] devpts: Bad value for 'max'
[  128.438731][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  128.449882][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  128.459597][ T7049] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  128.467267][ T7049] UDF-fs: Scanning with blocksize 512 failed
[  128.476645][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  128.486800][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  128.496656][ T7049] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  128.504310][ T7049] UDF-fs: Scanning with blocksize 1024 failed
[  128.513750][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  128.523750][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  128.553316][ T7049] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  128.561053][ T7049] UDF-fs: Scanning with blocksize 2048 failed
[  128.569102][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  128.579005][ T7049] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  128.588614][ T7049] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  128.596525][ T7049] UDF-fs: Scanning with blocksize 4096 failed
[  128.602606][ T7049] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  128.665731][ T5857] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  128.816255][ T5857] usb 1-1: config 4 has an invalid interface number: 42 but max is 0
[  128.836629][ T5857] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  128.849952][ T5857] usb 1-1: config 4 has no interface number 0
[  128.861289][ T5857] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51
[  128.878680][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.900204][ T5857] s2255 1-1:4.42: Could not find bulk-in endpoint
[  128.921136][ T5857] Sensoray 2255 driver load failed: 0xfffffff4
[  128.946004][ T5857] s2255 1-1:4.42: probe with driver s2255 failed with error -12
[  129.441804][   T24] usb 1-1: USB disconnect, device number 10
[  129.670220][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  129.670236][   T30] audit: type=1400 audit(1773638058.644:362): avc:  denied  { write } for  pid=7067 comm="syz.5.205" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  129.856497][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'.
[  129.903295][   T30] audit: type=1400 audit(1773638058.874:363): avc:  denied  { bind } for  pid=7074 comm="syz.5.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  129.934513][ T7077] bridge1: entered allmulticast mode
[  129.946997][ T7077] team0: Failed to send port change of device bridge1 via netlink (err -105)
[  129.954836][   T24] usb 3-1: USB disconnect, device number 12
[  129.972072][   T30] audit: type=1400 audit(1773638058.894:364): avc:  denied  { setopt } for  pid=7074 comm="syz.5.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  129.997371][ T7077] team0: Failed to send options change via netlink (err -105)
[  130.028937][ T7077] team0: Port device bridge1 added
[  130.346877][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'.
[  130.372524][ T5857] IPVS: starting estimator thread 0...
[  130.514981][ T7094] IPVS: using max 41 ests per chain, 98400 per kthread
[  130.788594][ T7104] fuse: Unknown parameter 'euid<00000000000000000000'
[  130.830889][   T30] audit: type=1326 audit(1773638059.804:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.6.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  130.893329][ T7104] cgroup: Unknown subsys name 'pcr'
[  130.900393][   T30] audit: type=1326 audit(1773638059.854:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.6.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  131.057633][   T30] audit: type=1326 audit(1773638059.864:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.6.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  131.073148][ T7111] bridge_slave_0: left allmulticast mode
[  131.128865][   T30] audit: type=1326 audit(1773638059.874:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.6.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  131.132751][ T7111] bridge_slave_0: left promiscuous mode
[  131.277194][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.398852][   T30] audit: type=1326 audit(1773638059.874:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.6.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  131.456478][ T7111] bridge_slave_1: left allmulticast mode
[  131.462920][ T7111] bridge_slave_1: left promiscuous mode
[  131.490473][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.685046][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  132.579743][ T7111] bond0: (slave bond_slave_0): Releasing backup interface
[  132.630385][ T7126] binder: 7121:7126 ioctl 4018620d 0 returned -22
[  132.632659][   T30] audit: type=1400 audit(1773638061.604:370): avc:  denied  { ioctl } for  pid=7121 comm="syz.0.219" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  132.682950][ T7111] bond0: (slave bond_slave_1): Releasing backup interface
[  132.684807][ T5871] usb 6-1: Using ep0 maxpacket: 16
[  132.703656][ T7126] binder: 7121:7126 ioctl c0306201 0 returned -14
[  132.712959][ T7126] binder: 7121:7126 ioctl c0306201 0 returned -14
[  132.816301][ T5871] usb 6-1: config 0 has an invalid interface number: 68 but max is 0
[  132.831818][ T5871] usb 6-1: config 0 has no interface number 0
[  132.849264][ T5871] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.862231][ T7111] team0: Port device team_slave_0 removed
[  132.871268][ T5871] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  132.893988][ T7131] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0)
[  132.931662][ T7135] devpts: Bad value for 'max'
[  132.944338][ T7134] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  132.958144][ T7111] team0: Port device team_slave_1 removed
[  132.970931][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.979792][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.989523][ T5871] usb 6-1: Product: syz
[  132.993737][ T5871] usb 6-1: Manufacturer: syz
[  132.998653][   T30] audit: type=1400 audit(1773638061.964:371): avc:  denied  { ioctl } for  pid=7133 comm="syz.6.222" path="socket:[14059]" dev="sockfs" ino=14059 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  133.000134][ T5871] usb 6-1: SerialNumber: syz
[  133.029302][ T7111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.047973][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.084070][ T5871] usb 6-1: config 0 descriptor??
[  133.094665][ T7111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.138781][ T7111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  133.193172][ T5871] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  133.441389][ T6200] usb 6-1: Failed to submit usb control message: -71
[  133.441609][  T917] usb 6-1: USB disconnect, device number 6
[  133.448474][ T6200] usb 6-1: unable to send the bmi data to the device: -71
[  133.986308][ T6200] usb 6-1: unable to get target info from device
[  133.995543][ T6200] usb 6-1: could not get target info (-71)
[  134.008857][ T6200] usb 6-1: could not probe fw (-71)
[  135.264165][ T7178] FAULT_INJECTION: forcing a failure.
[  135.264165][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  135.324910][ T5857] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  135.338500][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.6.230 Not tainted syzkaller #0 PREEMPT(full) 
[  135.338524][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  135.338533][ T7178] Call Trace:
[  135.338539][ T7178]  <TASK>
[  135.338546][ T7178]  dump_stack_lvl+0x100/0x190
[  135.338579][ T7178]  should_fail_ex.cold+0x5/0xa
[  135.338602][ T7178]  _copy_to_user+0x32/0xd0
[  135.338629][ T7178]  simple_read_from_buffer+0xcb/0x170
[  135.338660][ T7178]  proc_fail_nth_read+0x1af/0x230
[  135.338684][ T7178]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.338710][ T7178]  ? rw_verify_area+0xce/0x6d0
[  135.338733][ T7178]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.338756][ T7178]  vfs_read+0x1e4/0xb30
[  135.338785][ T7178]  ? __pfx_vfs_read+0x10/0x10
[  135.338810][ T7178]  ? __fget_files+0x215/0x3d0
[  135.338833][ T7178]  ? __fget_files+0x21f/0x3d0
[  135.338858][ T7178]  ksys_read+0x12a/0x250
[  135.338883][ T7178]  ? __pfx_ksys_read+0x10/0x10
[  135.338916][ T7178]  do_syscall_64+0x106/0xf80
[  135.338938][ T7178]  ? clear_bhb_loop+0x40/0x90
[  135.338959][ T7178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.338977][ T7178] RIP: 0033:0x7f045c35cfce
[  135.338992][ T7178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  135.339007][ T7178] RSP: 002b:00007f045d22efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  135.339024][ T7178] RAX: ffffffffffffffda RBX: 00007f045d22f6c0 RCX: 00007f045c35cfce
[  135.339035][ T7178] RDX: 000000000000000f RSI: 00007f045d22f0a0 RDI: 0000000000000003
[  135.339045][ T7178] RBP: 00007f045d22f090 R08: 0000000000000000 R09: 0000000000000000
[  135.339055][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.339064][ T7178] R13: 00007f045c616038 R14: 00007f045c615fa0 R15: 00007ffc7f9042d8
[  135.339088][ T7178]  </TASK>
[  135.602388][ T7186] netlink: 'syz.6.234': attribute type 1 has an invalid length.
[  135.610254][ T7186] netlink: 88 bytes leftover after parsing attributes in process `syz.6.234'.
[  135.619758][ T7186] netlink: 1 bytes leftover after parsing attributes in process `syz.6.234'.
[  135.658879][ T7186] netlink: 'syz.6.234': attribute type 1 has an invalid length.
[  135.667003][ T7186] netlink: 634 bytes leftover after parsing attributes in process `syz.6.234'.
[  135.735515][ T5857] usb 6-1: Using ep0 maxpacket: 32
[  135.864865][ T5857] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  136.013268][ T5857] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  136.040835][ T5857] usb 6-1: config 0 interface 0 has no altsetting 0
[  136.159951][ T5857] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  136.174631][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.200564][ T5857] usb 6-1: Product: syz
[  136.211450][ T5857] usb 6-1: Manufacturer: syz
[  136.219821][ T5857] usb 6-1: SerialNumber: syz
[  136.250076][ T5857] usb 6-1: config 0 descriptor??
[  136.325378][ T7200] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  136.331963][ T7200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  136.351394][ T7200] vhci_hcd vhci_hcd.0: Device attached
[  136.361491][ T7202] vhci_hcd: connection closed
[  136.363093][ T6200] vhci_hcd vhci_hcd.0: stop threads
[  136.382177][ T6200] vhci_hcd vhci_hcd.0: release socket
[  136.390345][ T6200] vhci_hcd vhci_hcd.0: disconnect device
[  137.466628][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  137.466645][   T30] audit: type=1400 audit(1773638066.214:375): avc:  denied  { write } for  pid=7204 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  137.558489][ T5857] gs_usb 6-1:0.0: Couldn't get device config: (err=-110)
[  137.581039][ T5857] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110
[  137.921334][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'.
[  138.149270][   T30] audit: type=1326 audit(1773638067.124:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.3.243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c9eb9c799 code=0x0
[  138.185304][ T7220] syzkaller0: entered promiscuous mode
[  138.190815][ T7220] syzkaller0: entered allmulticast mode
[  138.652793][  T792] usb 6-1: USB disconnect, device number 7
[  139.455457][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.246'.
[  139.543350][ T7252] overlayfs: failed to clone upperpath
[  139.583117][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.246'.
[  139.773693][   T30] audit: type=1400 audit(1773638068.724:377): avc:  denied  { connect } for  pid=7243 comm="syz.6.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  139.814378][ T7253] team0: Port device team_slave_0 removed
[  140.994707][   T30] audit: type=1400 audit(1773638069.044:378): avc:  denied  { write } for  pid=7267 comm="syz.5.251" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  143.163457][   T30] audit: type=1400 audit(1773638072.134:379): avc:  denied  { bind } for  pid=7277 comm="syz.5.254" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  143.234275][   T30] audit: type=1400 audit(1773638072.134:380): avc:  denied  { node_bind } for  pid=7277 comm="syz.5.254" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  143.274634][   T30] audit: type=1400 audit(1773638072.164:381): avc:  denied  { read } for  pid=7277 comm="syz.5.254" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  143.319621][   T30] audit: type=1400 audit(1773638072.164:382): avc:  denied  { open } for  pid=7277 comm="syz.5.254" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  143.395084][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  143.866960][   T30] audit: type=1400 audit(1773638072.164:383): avc:  denied  { ioctl } for  pid=7277 comm="syz.5.254" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  143.954918][ T5857] usb 1-1: Using ep0 maxpacket: 8
[  143.967185][ T5857] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  143.998055][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.010599][ T5857] usb 1-1: Product: syz
[  144.015376][ T5857] usb 1-1: Manufacturer: syz
[  144.020196][ T5857] usb 1-1: SerialNumber: syz
[  144.036739][ T5857] usb 1-1: config 0 descriptor??
[  144.195720][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.238252][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.254988][ T5857] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  144.274984][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.316877][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.325787][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.342159][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.386795][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.405346][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.452403][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.471483][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'.
[  144.632297][ T7311] fuse: Unknown parameter 'euid<00000000000000000000'
[  144.643144][ T7311] cgroup: Unknown subsys name 'pcr'
[  144.649874][   T30] audit: type=1326 audit(1773638073.614:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  144.763797][   T30] audit: type=1326 audit(1773638073.614:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  145.384883][   T30] audit: type=1326 audit(1773638073.624:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  145.408989][   T30] audit: type=1326 audit(1773638073.624:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  145.844070][ T7325] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  145.944353][ T5857] usb write operation failed. (-71)
[  145.962214][ T5857] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  145.972640][   T30] audit: type=1400 audit(1773638074.904:388): avc:  denied  { mount } for  pid=7320 comm="syz.5.260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  146.725304][ T5857] dvbdev: DVB: registering new adapter (Terratec H7)
[  146.732065][ T5857] usb 1-1: media controller created
[  146.741870][ T5857] usb read operation failed. (-71)
[  146.755722][ T5857] usb write operation failed. (-71)
[  146.763663][ T5857] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  146.779245][ T5857] usb 1-1: USB disconnect, device number 11
[  148.636736][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  148.636751][   T30] audit: type=1400 audit(1773638077.614:391): avc:  denied  { create } for  pid=7341 comm="syz.6.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  148.880275][ T7343] hsr_slave_0: left promiscuous mode
[  148.881324][   T30] audit: type=1400 audit(1773638077.844:392): avc:  denied  { read } for  pid=7349 comm="syz.5.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  149.086476][ T7343] hsr_slave_1: left promiscuous mode
[  149.888017][ T7368] netlink: 'syz.3.274': attribute type 7 has an invalid length.
[  149.917552][ T7368] netlink: 'syz.3.274': attribute type 1 has an invalid length.
[  149.938054][ T7368] __nla_validate_parse: 44 callbacks suppressed
[  149.938066][ T7368] netlink: 96 bytes leftover after parsing attributes in process `syz.3.274'.
[  149.987348][ T7368] netlink: 1 bytes leftover after parsing attributes in process `syz.3.274'.
[  150.006830][ T7368] netlink: 'syz.3.274': attribute type 1 has an invalid length.
[  150.014634][ T7368] netlink: 'syz.3.274': attribute type 8 has an invalid length.
[  150.038232][ T7368] netlink: 606 bytes leftover after parsing attributes in process `syz.3.274'.
[  150.104874][  T917] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  150.274801][  T917] usb 7-1: Using ep0 maxpacket: 8
[  150.289232][  T917] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  150.309324][  T917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.328240][  T917] usb 7-1: Product: syz
[  150.340038][  T917] usb 7-1: Manufacturer: syz
[  150.356858][  T917] usb 7-1: SerialNumber: syz
[  150.420853][  T917] usb 7-1: config 0 descriptor??
[  151.509774][  T917] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  151.714811][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  151.835098][ T5857] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  151.876160][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.902174][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.917288][ T5878] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  151.977974][ T5857] usb 6-1: device descriptor read/64, error -71
[  151.995928][ T5878] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  152.004176][ T5878] usb 3-1: Manufacturer: syz
[  152.017137][ T5878] usb 3-1: config 0 descriptor??
[  152.224833][ T5857] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  152.384814][ T5857] usb 6-1: device descriptor read/64, error -71
[  152.505330][ T5857] usb usb6-port1: attempt power cycle
[  152.735103][  T917] usb write operation failed. (-71)
[  152.742212][  T917] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  152.753639][  T917] dvbdev: DVB: registering new adapter (Terratec H7)
[  152.760787][  T917] usb 7-1: media controller created
[  152.766381][  T917] usb read operation failed. (-71)
[  152.771731][  T917] usb write operation failed. (-71)
[  152.779139][  T917] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  152.795082][  T917] usb 7-1: USB disconnect, device number 4
[  152.855040][ T5857] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  152.875186][ T5857] usb 6-1: device descriptor read/8, error -71
[  153.065510][ T7380] netlink: 'syz.2.278': attribute type 4 has an invalid length.
[  153.078403][ T5878] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[  153.089212][ T5878] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[  153.098818][ T5878] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[  153.107882][ T5878] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  153.116257][ T5857] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  153.124931][ T5878] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71
[  153.143124][ T7401] fuse: Unknown parameter 'euid<00000000000000000000'
[  153.153271][ T5878] usb 3-1: USB disconnect, device number 13
[  153.159611][ T5857] usb 6-1: device descriptor read/8, error -71
[  153.267109][ T7401] cgroup: Unknown subsys name 'pcr'
[  153.276132][   T30] audit: type=1326 audit(1773638082.244:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.6.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  153.305921][ T5857] usb usb6-port1: unable to enumerate USB device
[  153.319069][   T30] audit: type=1326 audit(1773638082.244:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.6.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  153.343616][   T30] audit: type=1326 audit(1773638082.244:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.6.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  153.376342][   T30] audit: type=1326 audit(1773638082.314:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.6.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  153.421055][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'.
[  153.494421][   T30] audit: type=1326 audit(1773638082.314:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.6.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  153.506153][ T7407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.282'.
[  153.665789][ T7415] netlink: 'syz.6.283': attribute type 39 has an invalid length.
[  154.235799][ T7431] netlink: 'syz.6.286': attribute type 2 has an invalid length.
[  154.243707][ T7431] netlink: 'syz.6.286': attribute type 1 has an invalid length.
[  154.568318][ T7438] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'.
[  155.101834][   T30] audit: type=1400 audit(1773638084.074:398): avc:  denied  { create } for  pid=7451 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  155.197459][   T30] audit: type=1400 audit(1773638084.174:399): avc:  denied  { accept } for  pid=7451 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  155.428831][ T7464] fuse: Unknown parameter 'euid<00000000000000000000'
[  155.782385][ T7474] overlayfs: failed to clone lowerpath
[  155.803764][   T30] audit: type=1400 audit(1773638084.754:400): avc:  denied  { mount } for  pid=7442 comm="syz.3.289" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  156.060558][ T7464] cgroup: Unknown subsys name 'pcr'
[  156.095182][   T30] audit: type=1326 audit(1773638085.034:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  156.260123][   T30] audit: type=1326 audit(1773638085.034:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  156.391475][   T30] audit: type=1326 audit(1773638085.044:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  156.561915][   T30] audit: type=1326 audit(1773638085.054:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  156.784550][   T30] audit: type=1400 audit(1773638085.754:405): avc:  denied  { write } for  pid=7483 comm="syz.2.297" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  156.824886][  T792] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  156.984484][ T7490] netlink: 'syz.2.297': attribute type 21 has an invalid length.
[  156.994766][  T792] usb 1-1: Using ep0 maxpacket: 16
[  157.011227][  T792] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  157.040078][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  157.051188][ T7490] netlink: 128 bytes leftover after parsing attributes in process `syz.2.297'.
[  157.066635][  T792] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  157.097071][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.100860][ T7490] netlink: 'syz.2.297': attribute type 4 has an invalid length.
[  157.127425][  T792] usb 1-1: Product: syz
[  157.170397][   T30] audit: type=1400 audit(1773638086.114:406): avc:  denied  { accept } for  pid=7483 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  157.285364][ T7490] netlink: 'syz.2.297': attribute type 5 has an invalid length.
[  157.324857][ T7490] netlink: 3 bytes leftover after parsing attributes in process `syz.2.297'.
[  157.362964][  T792] usb 1-1: Manufacturer: syz
[  157.371730][  T792] usb 1-1: SerialNumber: syz
[  157.394024][  T792] usb 1-1: config 0 descriptor??
[  157.413466][  T792] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  157.474843][  T792] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  157.845278][   T30] audit: type=1400 audit(1773638086.704:407): avc:  denied  { remount } for  pid=7493 comm="syz.5.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  158.155694][ T5871] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  158.195484][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'.
[  158.225576][  T792] em28xx 1-1:0.0: chip ID is em28178
[  158.786319][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.810722][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.949900][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  158.978286][ T5871] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  159.000524][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.027410][ T5871] usb 6-1: config 0 descriptor??
[  159.883935][ T7510] ALSA: mixer_oss: invalid OSS volume ''
[  159.890900][ T7512] syz.6.304 (7512) used greatest stack depth: 18376 bytes left
[  160.273678][   T30] audit: type=1400 audit(2000000000.070:408): avc:  denied  { firmware_load } for  pid=7510 comm="syz.6.304" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  160.455266][   T24] usb 1-1: USB disconnect, device number 12
[  160.462465][   T24] em28xx 1-1:0.0: Disconnecting em28xx
[  160.493289][   T24] em28xx 1-1:0.0: Freeing device
[  161.482413][ T5871] usbhid 6-1:0.0: can't add hid device: -71
[  161.494275][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  161.520615][ T5871] usb 6-1: USB disconnect, device number 12
[  161.676509][ T7525] fuse: Unknown parameter 'euid<00000000000000000000'
[  161.756257][ T7525] cgroup: Unknown subsys name 'pcr'
[  161.763269][   T30] audit: type=1326 audit(2000000002.190:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27479c799 code=0x7ffc0000
[  161.837273][   T30] audit: type=1326 audit(2000000002.190:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe27479c799 code=0x7ffc0000
[  161.935237][   T30] audit: type=1326 audit(2000000002.200:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27479c799 code=0x7ffc0000
[  162.014780][   T30] audit: type=1326 audit(2000000002.200:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27479c799 code=0x7ffc0000
[  162.593359][ T7554] 9p: Bad value for 'rfdno'
[  162.804820][ T5871] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  162.982437][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  163.056924][ T5871] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  163.074768][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.095166][ T5871] usb 3-1: Product: syz
[  163.116657][ T5871] usb 3-1: Manufacturer: syz
[  163.121293][ T5871] usb 3-1: SerialNumber: syz
[  163.128721][   T30] audit: type=1400 audit(2000000003.560:413): avc:  denied  { execute } for  pid=7556 comm="syz.0.316" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  163.191120][ T5871] usb 3-1: config 0 descriptor??
[  163.234554][ T5871] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  163.462684][ T5871] usb 3-1: USB disconnect, device number 14
[  163.623496][ T7584] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  163.797510][ T7584] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  164.716607][   T30] audit: type=1326 audit(2000000005.130:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  164.763633][   T30] audit: type=1326 audit(2000000005.140:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  164.953291][   T30] audit: type=1326 audit(2000000005.140:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  165.115115][ T7619] xt_hashlimit: size too large, truncated to 1048576
[  165.279607][ T7620] process 'syz.2.324' launched './file2' with NULL argv: empty string added
[  165.384848][   T30] audit: type=1326 audit(2000000005.140:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  165.511373][   T30] audit: type=1326 audit(2000000005.140:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  165.610846][   T30] audit: type=1326 audit(2000000005.140:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  165.803463][   T30] audit: type=1326 audit(2000000005.140:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.342654][   T30] audit: type=1326 audit(2000000005.140:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.376782][   T30] audit: type=1326 audit(2000000005.140:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.405033][   T30] audit: type=1326 audit(2000000005.140:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.441758][   T30] audit: type=1326 audit(2000000005.140:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.490504][   T30] audit: type=1326 audit(2000000005.140:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.640666][   T30] audit: type=1326 audit(2000000005.140:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9eb9c799 code=0x7ffc0000
[  166.883585][ T7639] netlink: 'syz.5.328': attribute type 3 has an invalid length.
[  168.158773][ T7654] 9p: Could not find request transport: fd00000000000000000010
[  168.651318][ T7663] sd 0:0:1:0: PR command failed: 1026
[  168.657386][ T7663] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  168.664500][ T7663] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  168.909166][ T7666] syzkaller0: entered promiscuous mode
[  168.914949][ T7666] syzkaller0: entered allmulticast mode
[  170.234854][ T5857] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  170.394823][ T5857] usb 7-1: Using ep0 maxpacket: 8
[  170.404313][ T5857] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  170.413949][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.440060][ T5857] pvrusb2: Hardware description: Terratec Grabster AV400
[  170.447471][ T5857] pvrusb2: **********
[  170.451579][ T5857] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  170.465346][ T5857] pvrusb2: Important functionality might not be entirely working.
[  170.482715][ T5857] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  170.494600][ T5857] pvrusb2: **********
[  170.650702][ T2336] pvrusb2: Invalid write control endpoint
[  170.823740][ T2336] pvrusb2: Invalid write control endpoint
[  170.836009][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  170.853091][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  170.866731][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  170.877251][ T2336] pvrusb2: Device being rendered inoperable
[  170.908463][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.920499][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  170.930336][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.940056][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'.
[  170.941336][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  170.960411][ T5878] usb 7-1: USB disconnect, device number 5
[  171.048815][ T2336] pvrusb2: Attached sub-driver cx25840
[  171.058505][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  171.069630][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  171.699605][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  171.699616][   T30] audit: type=1400 audit(2000000012.130:445): avc:  denied  { bind } for  pid=7705 comm="syz.6.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  171.811230][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  171.821892][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  171.831587][ T7710] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  171.839341][ T7710] UDF-fs: Scanning with blocksize 512 failed
[  171.849010][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  171.859125][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  171.868828][ T7710] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  171.876512][ T7710] UDF-fs: Scanning with blocksize 1024 failed
[  171.885175][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  171.919262][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  171.928928][ T7710] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  171.936622][ T7710] UDF-fs: Scanning with blocksize 2048 failed
[  171.944832][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  171.954777][ T7710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  171.964370][ T7710] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  171.972068][ T7710] UDF-fs: Scanning with blocksize 4096 failed
[  171.978187][ T7710] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  172.574840][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  172.679596][ T7718] 9p: Bad value for 'rfdno'
[  172.766558][ T5878] usb 3-1: Using ep0 maxpacket: 8
[  172.808121][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  172.826680][ T5878] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  172.855516][ T5878] usb 3-1: Product: syz
[  172.864790][ T5878] usb 3-1: Manufacturer: syz
[  172.869395][ T5878] usb 3-1: SerialNumber: syz
[  172.886116][ T5878] usb 3-1: config 0 descriptor??
[  172.916689][ T5878] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  172.939346][ T7722] block nbd0: NBD_DISCONNECT
[  173.518927][ T5878] gspca_zc3xx: reg_w_i err -110
[  173.561101][ T5878] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  174.325611][ T7734] syz.0.358 (7734): /proc/7732/oom_adj is deprecated, please use /proc/7732/oom_score_adj instead.
[  175.303352][ T5878] usb 3-1: USB disconnect, device number 15
[  175.358491][ T7747] Driver unsupported XDP return value 0 on prog  (id 21) dev N/A, expect packet loss!
[  175.411010][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'.
[  175.464829][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  175.704883][   T30] audit: type=1400 audit(2000000015.920:446): avc:  denied  { read } for  pid=7749 comm="syz.2.364" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  175.824822][ T5871] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  175.852185][ T7751] cgroup: Unknown subsys name 'pcr'
[  175.872185][   T30] audit: type=1400 audit(2000000015.940:447): avc:  denied  { open } for  pid=7749 comm="syz.2.364" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  175.926870][   T10] usb 6-1: Using ep0 maxpacket: 8
[  175.935997][   T10] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.953337][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  175.970775][   T30] audit: type=1400 audit(2000000015.970:448): avc:  denied  { ioctl } for  pid=7749 comm="syz.2.364" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  175.970967][   T10] usb 6-1: string descriptor 0 read error: -22
[  176.018205][   T10] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.40
[  176.024785][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  176.054581][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.056825][ T5871] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  176.094541][   T30] audit: type=1326 audit(2000000016.280:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  176.142210][ T5871] usb 1-1: config 0 has no interface number 0
[  176.165905][ T5871] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  176.189126][ T5871] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  176.199359][   T30] audit: type=1326 audit(2000000016.280:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  176.263114][ T5871] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  176.304539][ T5871] usb 1-1: config 0 interface 196 has no altsetting 0
[  176.311625][   T30] audit: type=1326 audit(2000000016.290:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  176.368502][ T5871] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  176.398191][   T30] audit: type=1326 audit(2000000016.290:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fe99c799 code=0x7ffc0000
[  176.427234][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.509692][ T5871] usb 1-1: Product: syz
[  176.513878][ T5871] usb 1-1: Manufacturer: syz
[  176.538362][ T5871] usb 1-1: SerialNumber: syz
[  176.553217][   T30] audit: type=1400 audit(2000000016.480:453): avc:  denied  { write } for  pid=7758 comm="syz.6.365" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  176.564061][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.584552][ T5871] usb 1-1: config 0 descriptor??
[  176.591469][ T7745] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  176.735797][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.784929][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.842430][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.863553][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.898245][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.904067][ T7776] devpts: Bad value for 'max'
[  176.953394][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  176.973530][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  177.002247][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  177.028295][   T10] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0
[  177.158509][   T10] cypress 0003:04B4:DE64.0004: hidraw0: USB HID v0.04 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0
[  177.271079][   T10] usb 6-1: USB disconnect, device number 13
[  177.809979][ T7781] fido_id[7781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  177.876708][ T5871] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  177.942192][ T5871] ipheth 1-1:0.196: probe with driver ipheth failed with error -71
[  178.017039][ T5871] usb 1-1: USB disconnect, device number 13
[  178.074745][   T30] audit: type=1400 audit(2000000018.500:454): avc:  denied  { connect } for  pid=7792 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  178.111197][ T7795] netlink: 'syz.0.372': attribute type 1 has an invalid length.
[  178.183556][ T7795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.239742][ T7805] 9pnet_fd: Insufficient options for proto=fd
[  178.275902][   T30] audit: type=1400 audit(2000000018.700:455): avc:  denied  { write } for  pid=7792 comm="syz.5.371" path="socket:[17452]" dev="sockfs" ino=17452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  178.504456][ T7816] fuse: Unknown parameter 'euid<00000000000000000000'
[  178.530634][   T30] audit: type=1400 audit(2000000018.960:456): avc:  denied  { name_bind } for  pid=7814 comm="syz.2.378" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  179.306911][ T7816] cgroup: Unknown subsys name 'pcr'
[  179.313280][   T30] audit: type=1326 audit(2000000019.740:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.6.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  179.368761][   T30] audit: type=1326 audit(2000000019.740:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.6.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  179.698684][ T7827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.380'.
[  179.801338][   T30] audit: type=1326 audit(2000000019.770:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.6.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  179.923820][   T30] audit: type=1326 audit(2000000019.770:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.6.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045c39c799 code=0x7ffc0000
[  180.823017][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[  180.854482][   T30] audit: type=1400 audit(2000000021.280:461): avc:  denied  { listen } for  pid=7852 comm="syz.3.389" lport=35355 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  180.893904][   T30] audit: type=1400 audit(2000000021.310:462): avc:  denied  { accept } for  pid=7852 comm="syz.3.389" lport=35355 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  181.084790][   T30] audit: type=1400 audit(2000000021.320:463): avc:  denied  { write } for  pid=7852 comm="syz.3.389" path="socket:[17551]" dev="sockfs" ino=17551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  181.938858][ T7861] loop6: detected capacity change from 0 to 7
[  181.946929][    C1] blk_print_req_error: 10 callbacks suppressed
[  181.946945][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  181.962680][    C1] buffer_io_error: 10 callbacks suppressed
[  181.962692][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  181.980260][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  181.989855][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.004778][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.014383][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.024632][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  182.034251][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.042687][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.052257][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.061649][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.071201][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.079388][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.088963][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.104726][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.114347][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.124497][ T7861] ldm_validate_partition_table(): Disk read failed.
[  182.135183][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.144761][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.153942][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[  182.163509][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  182.194786][ T7861] Dev loop6: unable to read RDB block 0
[  182.206195][ T7880] devpts: Bad value for 'max'
[  182.216160][ T7861]  loop6: unable to read partition table
[  182.221913][ T7861] loop6: partition table beyond EOD, truncated
[  182.228742][ T7861] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  183.004844][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  183.165522][ T5878] usb 3-1: Using ep0 maxpacket: 16
[  183.172079][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.183508][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.193453][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  183.207566][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  183.216696][   T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  183.224851][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.235632][ T5878] usb 3-1: config 0 descriptor??
[  183.310193][   T30] audit: type=1400 audit(2000000023.740:464): avc:  denied  { write } for  pid=7895 comm="syz.0.400" path="socket:[16836]" dev="sockfs" ino=16836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  183.363926][  T917] IPVS: starting estimator thread 0...
[  183.374792][   T10] usb 7-1: Using ep0 maxpacket: 8
[  183.392558][   T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  183.402991][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.411311][   T10] usb 7-1: Product: syz
[  183.418881][   T10] usb 7-1: Manufacturer: syz
[  183.424680][   T10] usb 7-1: SerialNumber: syz
[  183.424855][ T5871] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  183.444685][   T10] usb 7-1: config 0 descriptor??
[  183.455015][ T7898] IPVS: using max 75 ests per chain, 180000 per kthread
[  183.598094][ T5871] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  183.616587][ T5871] usb 6-1: config 220 has an invalid descriptor of length 168, skipping remainder of the config
[  183.638246][ T5871] usb 6-1: config 220 has no interface number 2
[  183.652467][ T5871] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x5 has invalid maxpacket 64947, setting to 64
[  183.669144][ T5878] hid_parser_main: 4007 callbacks suppressed
[  183.669157][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.696332][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.703670][   T10] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  183.711401][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.720056][ T5871] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  183.720505][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.743198][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.750474][ T5871] usb 6-1: config 220 interface 0 has no altsetting 0
[  183.761142][ T5871] usb 6-1: config 220 interface 76 has no altsetting 0
[  183.761146][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.761165][ T5871] usb 6-1: config 220 interface 1 has no altsetting 0
[  183.785878][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.800547][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.807091][ T5871] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  183.819219][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.827742][ T5878] logitech 0003:046D:CA03.0005: unknown main item tag 0x0
[  183.834796][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.848800][ T5871] usb 6-1: Product: syz
[  183.855312][ T5871] usb 6-1: Manufacturer: syz
[  183.863170][ T5871] usb 6-1: SerialNumber: syz
[  183.878115][ T5878] logitech 0003:046D:CA03.0005: hidraw0: USB HID v0.0a Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0
[  183.936865][ T5878] logitech 0003:046D:CA03.0005: no inputs found
[  184.065408][ T7902] 9pnet_fd: Insufficient options for proto=fd
[  184.120266][ T5871] usb 6-1: selecting invalid altsetting 0
[  184.138443][ T5871] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  184.148237][ T5871] uvcvideo 6-1:220.0: No valid video chain found.
[  184.186399][ T5871] usb 6-1: selecting invalid altsetting 0
[  184.206996][ T5871] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  184.222703][ T5871] usb 6-1: USB disconnect, device number 14
[  184.991053][   T10] usb write operation failed. (-71)
[  185.003365][   T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  185.028487][   T10] dvbdev: DVB: registering new adapter (Terratec H7)
[  185.035452][   T10] usb 7-1: media controller created
[  185.041030][   T10] usb read operation failed. (-71)
[  185.046765][   T10] usb write operation failed. (-71)
[  185.055973][   T10] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  185.067698][   T10] usb 7-1: USB disconnect, device number 6
[  185.337242][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'.
[  185.498189][ T5871] usb 3-1: USB disconnect, device number 16
[  186.419955][   T30] audit: type=1400 audit(2000000026.850:465): avc:  denied  { read write } for  pid=7931 comm="syz.6.408" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  186.482303][   T30] audit: type=1400 audit(2000000026.850:466): avc:  denied  { open } for  pid=7931 comm="syz.6.408" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  186.795108][ T7951] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:2
[  186.965949][ T7953] devpts: Bad value for 'max'
[  187.195110][ T7965] xt_l2tp: v2 doesn't support IP mode
[  187.231321][ T7965] tmpfs: Unknown parameter '�ze'
[  188.354255][ T7990] netlink: 68 bytes leftover after parsing attributes in process `syz.0.418'.
[  188.507835][  T917] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  188.647214][  T917] usb 6-1: device descriptor read/64, error -71
[  188.707484][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  188.713789][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  188.896533][  T917] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  189.059370][  T917] usb 6-1: device descriptor read/64, error -71
[  189.575102][  T917] usb usb6-port1: attempt power cycle
[  190.444820][  T917] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  190.584377][  T917] usb 6-1: device descriptor read/8, error -71
[  190.619293][ T8014] orangefs_mount: mount request failed with -4
[  190.766108][ T8033] devpts: Bad value for 'max'
[  190.834897][  T917] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  190.875251][  T917] usb 6-1: device descriptor read/8, error -71
[  191.007083][  T917] usb usb6-port1: unable to enumerate USB device
[  191.372080][   T30] audit: type=1400 audit(2000000287.802:467): avc:  denied  { append } for  pid=8046 comm="syz.2.435" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  192.933744][ T8073] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.254779][ T5871] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  193.408794][ T5871] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  193.419870][ T5871] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  193.449731][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  193.484879][ T5871] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  193.519960][ T5871] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  193.545145][ T5871] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  193.554336][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  193.569020][ T5871] usb 3-1: Product: syz
[  193.577954][ T5871] usb 3-1: Manufacturer: syz
[  193.588024][ T5871] cdc_wdm 3-1:1.0: skipping garbage
[  193.593260][ T5871] cdc_wdm 3-1:1.0: skipping garbage
[  193.601612][ T5871] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  193.607995][ T5871] cdc_wdm 3-1:1.0: Unknown control protocol
[  193.770175][   T30] audit: type=1400 audit(2000000290.202:468): avc:  denied  { create } for  pid=8081 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  194.695172][   T30] audit: type=1400 audit(2000000290.462:469): avc:  denied  { read write } for  pid=8072 comm="syz.2.443" name="cdc-wdm0" dev="devtmpfs" ino=2912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  194.731627][   T30] audit: type=1400 audit(2000000290.462:470): avc:  denied  { open } for  pid=8072 comm="syz.2.443" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  195.124814][ T5857] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  195.136090][ T5871] usb 3-1: USB disconnect, device number 17
[  195.171679][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'.
[  195.377690][ T5857] usb 7-1: unable to get BOS descriptor or descriptor too short
[  195.407632][ T5857] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  195.453475][ T5857] usb 7-1: config 1 interface 0 has no altsetting 0
[  195.513499][ T5857] usb 7-1: string descriptor 0 read error: -22
[  195.520217][ T8105] devpts: Bad value for 'max'
[  195.531825][ T5857] usb 7-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[  195.553479][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.293168][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.311955][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.551142][ T8118] sd 0:0:1:0: device reset
[  196.689826][ T5857] hid_parser_main: 28 callbacks suppressed
[  196.690001][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  196.844032][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  196.863615][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  196.880139][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  196.906703][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  196.942923][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  196.961050][ T6200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.999627][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  197.030318][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  197.077491][ T6200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.079480][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  197.160908][ T5857] saitek 0003:0738:1709.0006: unknown main item tag 0x0
[  197.206061][ T6200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.297780][ T6200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.388163][ T5857] saitek 0003:0738:1709.0006: hidraw0: USB HID vff.7f Device [HID 0738:1709] on usb-dummy_hcd.6-1/input0
[  197.728156][ T6200] bridge_slave_1: left allmulticast mode
[  197.756633][ T6200] bridge_slave_1: left promiscuous mode
[  197.762378][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.804123][ T6200] bridge_slave_0: left allmulticast mode
[  197.818860][ T6200] bridge_slave_0: left promiscuous mode
[  197.829386][ T8136] fuse: Bad value for 'fd'
[  197.839169][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.922914][ T6108] usb 7-1: USB disconnect, device number 7
[  197.932408][   T30] audit: type=1326 audit(2000000294.362:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab39c799 code=0x7ffc0000
[  197.975609][ T8140] cgroup: Unknown subsys name 'pcr'
[  198.052934][   T30] audit: type=1326 audit(2000000294.402:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab39c799 code=0x7ffc0000
[  198.097818][   T30] audit: type=1326 audit(2000000294.412:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe1ab39c799 code=0x7ffc0000
[  198.138880][   T30] audit: type=1326 audit(2000000294.442:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab39c799 code=0x7ffc0000
[  198.147691][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.184178][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.200167][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.223547][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.233601][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.264333][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.271625][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.279943][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.299598][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.319310][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.344790][   T30] audit: type=1326 audit(2000000294.442:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab39c799 code=0x7ffc0000
[  198.644924][  T917] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  198.692745][ T6200] team0: Port device bridge1 removed
[  198.777827][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.813861][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.855140][  T917] usb 7-1: Using ep0 maxpacket: 32
[  198.862138][ T6200] bond0 (unregistering): Released all slaves
[  198.889829][  T917] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  198.912210][  T917] usb 7-1: config 0 has no interface number 0
[  198.918896][  T917] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  198.954352][ T8181] ALSA: mixer_oss: invalid OSS volume ''
[  198.965263][ T8181] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*���q�pA�ڜ��e�T��|K�'
[  198.966346][  T917] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  198.992805][ T8181] ALSA: mixer_oss: invalid OSS volume ':�a��z����]�q��e�X�fb]݆�B��.'
[  199.032186][ T8178] bond1: (slave bond_slave_1): Device is not our slave
[  199.039252][ T8178] bond1: option active_slave: invalid value (bond_slave_1)
[  199.054829][  T917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.074930][ T8181] ALSA: mixer_oss: invalid OSS volume '��j|�����q⩃˚[�w�3�^.���ג�'
[  199.083795][ T8181] ALSA: mixer_oss: invalid OSS volume '�"P޸��ۜ���o[�8>�7|�YMe�p��q'
[  199.092742][ T8181] ALSA: mixer_oss: invalid OSS volume '��wI��׷�#�t\�W�,�bP=&e�'
[  199.101109][ T8181] ALSA: mixer_oss: invalid OSS volume ']����z�a�-�!)����ϻ�vC�Yps��'
[  199.109893][ T8181] ALSA: mixer_oss: invalid OSS volume 'L�E�]D��xt��݂OY3f��k$T��"'
[  199.118665][ T8181] ALSA: mixer_oss: invalid OSS volume '�[�'
[  199.118706][  T917] usb 7-1: Product: syz
[  199.128880][  T917] usb 7-1: Manufacturer: syz
[  199.133530][  T917] usb 7-1: SerialNumber: syz
[  199.138862][ T8181] ALSA: mixer_oss: invalid OSS volume '���3���A14IN�+|�\'
[  199.147950][ T8181] ALSA: mixer_oss: invalid OSS volume '�$<eӠ��{�.*,)A��;���8�mTx���'
[  199.156861][ T8181] ALSA: mixer_oss: invalid OSS volume 'B�r�y�PWb�D)*0KqV:�̏h�'y'
[  199.165352][ T8181] ALSA: mixer_oss: invalid OSS volume 'L��Sb)�!Ɖ��[����H!Uʦ�Q�'
[  199.173566][ T8181] ALSA: mixer_oss: invalid OSS volume '�Z'
[  199.179537][ T8181] ALSA: mixer_oss: invalid OSS volume '(�������ف�r��V��P8��.��$��'
[  199.195472][  T917] usb 7-1: config 0 descriptor??
[  199.205499][ T8181] ALSA: mixer_oss: invalid OSS volume '�H?�'
[  199.207715][  T917] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  199.224651][ T8181] ALSA: mixer_oss: invalid OSS volume 'P/*�'
[  199.259708][ T8178] bond1 (unregistering): Released all slaves
[  199.290152][  T917] em28xx 7-1:0.132: Video interface 132 found:
[  199.629677][  T917] em28xx 7-1:0.132: chip ID is em2860
[  199.827679][ T6200] hsr_slave_0: left promiscuous mode
[  199.843541][ T6200] hsr_slave_1: left promiscuous mode
[  199.863914][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.004837][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.024143][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.031777][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.069204][ T6200] veth1_macvtap: left promiscuous mode
[  200.082596][ T6200] veth0_macvtap: left promiscuous mode
[  200.127256][ T6200] veth1_vlan: left promiscuous mode
[  200.173166][ T8203] devpts: Bad value for 'max'
[  200.188535][ T6200] veth0_vlan: left promiscuous mode
[  200.337855][   T30] audit: type=1400 audit(2000000296.772:476): avc:  denied  { create } for  pid=8210 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  200.385821][ T5812] Bluetooth: hci3: command tx timeout
[  200.589079][   T30] audit: type=1400 audit(2000000297.022:477): avc:  denied  { write } for  pid=8214 comm="syz.2.472" path="socket:[19529]" dev="sockfs" ino=19529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  200.758997][  T917] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  200.796830][  T917] em28xx 7-1:0.132: board has no eeprom
[  200.884495][ T6200] team0 (unregistering): Port device team_slave_1 removed
[  200.894050][  T917] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  200.922097][  T917] em28xx 7-1:0.132: analog set to bulk mode.
[  200.943095][   T10] em28xx 7-1:0.132: Registering V4L2 extension
[  200.953992][ T6200] team0 (unregistering): Port device team_slave_0 removed
[  201.077473][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  201.110837][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  201.129529][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  201.148823][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  201.206080][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  201.221585][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  201.233456][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  201.242873][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[  201.297154][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[  201.316619][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[  201.353541][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5)
[  201.386594][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5)
[  201.405186][   T10] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5)
[  201.418147][   T10] em28xx 7-1:0.132: Config register raw data: 0xfffffffb
[  201.427034][   T10] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[  201.434170][   T10] em28xx 7-1:0.132: No AC97 audio processor
[  201.461172][   T10] videodev: could not get a free minor
[  201.472307][   T10] em28xx 7-1:0.132: unable to register vbi device
[  201.550154][   T10] em28xx 7-1:0.132: V4L2 device video103 deregistered
[  202.042178][   T10] em28xx 7-1:0.132: Remote control support is not available for this card.
[  202.044524][ T8226] ==================================================================
[  202.058850][ T8226] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[  202.064781][  T917] usb 7-1: USB disconnect, device number 8
[  202.066308][ T8226] Read of size 8 at addr ffff888055c38748 by task v4l_id/8226
[  202.072994][  T917] em28xx 7-1:0.132: Disconnecting em28xx
[  202.079520][ T8226] 
[  202.079538][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.079562][ T8226] Tainted: [L]=SOFTLOCKUP
[  202.079567][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  202.079576][ T8226] Call Trace:
[  202.079583][ T8226]  <TASK>
[  202.079589][ T8226]  dump_stack_lvl+0x100/0x190
[  202.079617][ T8226]  print_report+0x156/0x4c9
[  202.079638][ T8226]  ? __virt_addr_valid+0x81/0x620
[  202.079659][ T8226]  ? __phys_addr+0xe8/0x180
[  202.079680][ T8226]  ? v4l2_fh_init+0x27d/0x2c0
[  202.079699][ T8226]  kasan_report+0xdf/0x1e0
[  202.079714][ T8226]  ? v4l2_fh_init+0x27d/0x2c0
[  202.079735][ T8226]  v4l2_fh_init+0x27d/0x2c0
[  202.079753][ T8226]  v4l2_fh_open+0x64/0xa0
[  202.079772][ T8226]  em28xx_v4l2_open+0x11e/0x570
[  202.079792][ T8226]  v4l2_open+0x1d2/0x490
[  202.079811][ T8226]  ? __pfx_v4l2_open+0x10/0x10
[  202.079829][ T8226]  chrdev_open+0x234/0x6a0
[  202.079845][ T8226]  ? __pfx_chrdev_open+0x10/0x10
[  202.079860][ T8226]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  202.079881][ T8226]  do_dentry_open+0x6d8/0x1660
[  202.079903][ T8226]  ? __pfx_chrdev_open+0x10/0x10
[  202.079919][ T8226]  vfs_open+0x82/0x3f0
[  202.079938][ T8226]  path_openat+0x208c/0x31a0
[  202.079955][ T8226]  ? rcu_is_watching+0x12/0xc0
[  202.079973][ T8226]  ? trace_sched_exit_tp+0x13a/0x180
[  202.079995][ T8226]  ? __pfx_path_openat+0x10/0x10
[  202.080014][ T8226]  do_file_open+0x20e/0x430
[  202.080030][ T8226]  ? __pfx_do_file_open+0x10/0x10
[  202.080045][ T8226]  ? __pfx___schedule+0x10/0x10
[  202.080068][ T8226]  ? alloc_fd+0x476/0x790
[  202.080086][ T8226]  do_sys_openat2+0x10d/0x1e0
[  202.080103][ T8226]  ? __pfx_do_sys_openat2+0x10/0x10
[  202.080124][ T8226]  __x64_sys_openat+0x12d/0x210
[  202.080142][ T8226]  ? __pfx___x64_sys_openat+0x10/0x10
[  202.080160][ T8226]  ? __pfx___schedule+0x10/0x10
[  202.080176][ T8226]  ? do_user_addr_fault+0x8d6/0x12f0
[  202.080200][ T8226]  do_syscall_64+0x106/0xf80
[  202.080218][ T8226]  ? clear_bhb_loop+0x40/0x90
[  202.080234][ T8226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.080250][ T8226] RIP: 0033:0x7f82f20a7407
[  202.080263][ T8226] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  202.080277][ T8226] RSP: 002b:00007ffd2ae10940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  202.080292][ T8226] RAX: ffffffffffffffda RBX: 00007f82f2762880 RCX: 00007f82f20a7407
[  202.080302][ T8226] RDX: 0000000000000000 RSI: 00007ffd2ae10f1b RDI: ffffffffffffff9c
[  202.080311][ T8226] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  202.080320][ T8226] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  202.080329][ T8226] R13: 00007ffd2ae10b90 R14: 00007f82f28c9000 R15: 00005634df8e24d8
[  202.080343][ T8226]  </TASK>
[  202.080349][ T8226] 
[  202.362880][ T8226] Allocated by task 10:
[  202.367017][ T8226]  kasan_save_stack+0x30/0x50
[  202.371682][ T8226]  kasan_save_track+0x14/0x30
[  202.376342][ T8226]  __kasan_kmalloc+0xaa/0xb0
[  202.380918][ T8226]  em28xx_v4l2_init.cold+0x94/0x3503
[  202.386188][ T8226]  em28xx_init_extension+0x13a/0x200
[  202.391461][ T8226]  request_module_async+0x61/0x80
[  202.396469][ T8226]  process_one_work+0xa23/0x19a0
[  202.401385][ T8226]  worker_thread+0x5ef/0xe50
[  202.405984][ T8226]  kthread+0x370/0x450
[  202.410032][ T8226]  ret_from_fork+0x754/0xd80
[  202.414610][ T8226]  ret_from_fork_asm+0x1a/0x30
[  202.419354][ T8226] 
[  202.421681][ T8226] Freed by task 10:
[  202.425462][ T8226]  kasan_save_stack+0x30/0x50
[  202.430123][ T8226]  kasan_save_track+0x14/0x30
[  202.434783][ T8226]  kasan_save_free_info+0x3b/0x70
[  202.439792][ T8226]  __kasan_slab_free+0x5f/0x80
[  202.444548][ T8226]  kfree+0x1f6/0x6b0
[  202.448422][ T8226]  kref_put.isra.0+0x56/0x90
[  202.452990][ T8226]  em28xx_v4l2_init.cold+0x280/0x3503
[  202.458345][ T8226]  em28xx_init_extension+0x13a/0x200
[  202.463611][ T8226]  request_module_async+0x61/0x80
[  202.468629][ T8226]  process_one_work+0xa23/0x19a0
[  202.473541][ T8226]  worker_thread+0x5ef/0xe50
[  202.478107][ T8226]  kthread+0x370/0x450
[  202.482150][ T8226]  ret_from_fork+0x754/0xd80
[  202.486714][ T8226]  ret_from_fork_asm+0x1a/0x30
[  202.491459][ T8226] 
[  202.493761][ T8226] The buggy address belongs to the object at ffff888055c38000
[  202.493761][ T8226]  which belongs to the cache kmalloc-8k of size 8192
[  202.507797][ T8226] The buggy address is located 1864 bytes inside of
[  202.507797][ T8226]  freed 8192-byte region [ffff888055c38000, ffff888055c3a000)
[  202.521763][ T8226] 
[  202.524077][ T8226] The buggy address belongs to the physical page:
[  202.530462][ T8226] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55c38
[  202.539201][ T8226] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  202.547675][ T8226] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  202.555196][ T8226] page_type: f5(slab)
[  202.559153][ T8226] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122
[  202.567710][ T8226] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  202.576276][ T8226] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122
[  202.584924][ T8226] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  202.593580][ T8226] head: 00fff00000000003 ffffea0001570e01 00000000ffffffff 00000000ffffffff
[  202.602231][ T8226] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  202.610873][ T8226] page dumped because: kasan: bad access detected
[  202.617260][ T8226] page_owner tracks the page as allocated
[  202.622961][ T8226] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7816, tgid 7810 (syz.6.377), ts 179339581572, free_ts 170180260669
[  202.644213][ T8226]  post_alloc_hook+0x153/0x170
[  202.648963][ T8226]  get_page_from_freelist+0x111d/0x3140
[  202.654493][ T8226]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  202.660372][ T8226]  new_slab+0xa6/0x6b0
[  202.664419][ T8226]  refill_objects+0x26b/0x400
[  202.669076][ T8226]  __pcs_replace_empty_main+0x1ab/0x660
[  202.674604][ T8226]  __kmalloc_cache_noprof+0x493/0x6f0
[  202.679955][ T8226]  audit_log_d_path+0xed/0x210
[  202.684700][ T8226]  audit_log_d_path_exe+0x46/0x80
[  202.689708][ T8226]  audit_log_task+0x2fe/0x3a0
[  202.694369][ T8226]  audit_seccomp+0x7a/0x1f0
[  202.698848][ T8226]  __seccomp_filter+0x896/0x1140
[  202.703849][ T8226]  __secure_computing+0x221/0x2e0
[  202.709286][ T8226]  do_syscall_64+0x568/0xf80
[  202.713856][ T8226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.719740][ T8226] page last free pid 7685 tgid 7683 stack trace:
[  202.726300][ T8226]  __free_frozen_pages+0x7e1/0x10d0
[  202.731486][ T8226]  sg_remove_scat+0x1b6/0x510
[  202.736143][ T8226]  sg_finish_rem_req+0x322/0x590
[  202.741061][ T8226]  sg_common_write.isra.0+0xcd3/0x1b90
[  202.746504][ T8226]  sg_new_write.isra.0+0x5b9/0xb10
[  202.751599][ T8226]  sg_ioctl+0x357/0x2730
[  202.755840][ T8226]  __x64_sys_ioctl+0x18e/0x210
[  202.760592][ T8226]  do_syscall_64+0x106/0xf80
[  202.765164][ T8226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.771033][ T8226] 
[  202.773336][ T8226] Memory state around the buggy address:
[  202.778949][ T8226]  ffff888055c38600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.786987][ T8226]  ffff888055c38680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.795031][ T8226] >ffff888055c38700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.803067][ T8226]                                               ^
[  202.809452][ T8226]  ffff888055c38780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.817488][ T8226]  ffff888055c38800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.825541][ T8226] ==================================================================
[  202.834287][  T917] em28xx 7-1:0.132: Closing input extension
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  202.876553][ T5812] Bluetooth: hci3: command tx timeout
[  202.882277][ T8226] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  202.889477][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.899997][ T8226] Tainted: [L]=SOFTLOCKUP
[  202.904312][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  202.914351][ T8226] Call Trace:
[  202.917619][ T8226]  <TASK>
[  202.920532][ T8226]  dump_stack_lvl+0x100/0x190
[  202.925200][ T8226]  vpanic+0x552/0x970
[  202.929161][ T8226]  ? __pfx_vpanic+0x10/0x10
[  202.933651][ T8226]  ? v4l2_fh_init+0x27d/0x2c0
[  202.938317][ T8226]  panic+0xd1/0xe0
[  202.942023][ T8226]  ? __pfx_panic+0x10/0x10
[  202.946419][ T8226]  ? v4l2_fh_init+0x27d/0x2c0
[  202.951078][ T8226]  ? preempt_schedule_common+0x42/0xc0
[  202.956521][ T8226]  ? check_panic_on_warn+0x1f/0x90
[  202.961610][ T8226]  check_panic_on_warn.cold+0x19/0x34
[  202.966968][ T8226]  end_report.part.0+0x3a/0x90
[  202.971719][ T8226]  kasan_report.cold+0xe/0x18
[  202.976379][ T8226]  ? v4l2_fh_init+0x27d/0x2c0
[  202.981221][ T8226]  v4l2_fh_init+0x27d/0x2c0
[  202.985708][ T8226]  v4l2_fh_open+0x64/0xa0
[  202.990041][ T8226]  em28xx_v4l2_open+0x11e/0x570
[  202.994877][ T8226]  v4l2_open+0x1d2/0x490
[  202.999103][ T8226]  ? __pfx_v4l2_open+0x10/0x10
[  203.003851][ T8226]  chrdev_open+0x234/0x6a0
[  203.008245][ T8226]  ? __pfx_chrdev_open+0x10/0x10
[  203.013162][ T8226]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  203.019483][ T8226]  do_dentry_open+0x6d8/0x1660
[  203.024231][ T8226]  ? __pfx_chrdev_open+0x10/0x10
[  203.029149][ T8226]  vfs_open+0x82/0x3f0
[  203.033198][ T8226]  path_openat+0x208c/0x31a0
[  203.037772][ T8226]  ? rcu_is_watching+0x12/0xc0
[  203.042523][ T8226]  ? trace_sched_exit_tp+0x13a/0x180
[  203.047792][ T8226]  ? __pfx_path_openat+0x10/0x10
[  203.052713][ T8226]  do_file_open+0x20e/0x430
[  203.057196][ T8226]  ? __pfx_do_file_open+0x10/0x10
[  203.062198][ T8226]  ? __pfx___schedule+0x10/0x10
[  203.067034][ T8226]  ? alloc_fd+0x476/0x790
[  203.071701][ T8226]  do_sys_openat2+0x10d/0x1e0
[  203.076362][ T8226]  ? __pfx_do_sys_openat2+0x10/0x10
[  203.081541][ T8226]  __x64_sys_openat+0x12d/0x210
[  203.086373][ T8226]  ? __pfx___x64_sys_openat+0x10/0x10
[  203.091737][ T8226]  ? __pfx___schedule+0x10/0x10
[  203.096566][ T8226]  ? do_user_addr_fault+0x8d6/0x12f0
[  203.101831][ T8226]  do_syscall_64+0x106/0xf80
[  203.106403][ T8226]  ? clear_bhb_loop+0x40/0x90
[  203.111066][ T8226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.116943][ T8226] RIP: 0033:0x7f82f20a7407
[  203.121339][ T8226] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  203.140930][ T8226] RSP: 002b:00007ffd2ae10940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  203.149322][ T8226] RAX: ffffffffffffffda RBX: 00007f82f2762880 RCX: 00007f82f20a7407
[  203.157271][ T8226] RDX: 0000000000000000 RSI: 00007ffd2ae10f1b RDI: ffffffffffffff9c
[  203.165219][ T8226] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  203.173166][ T8226] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  203.181112][ T8226] R13: 00007ffd2ae10b90 R14: 00007f82f28c9000 R15: 00005634df8e24d8
[  203.189067][ T8226]  </TASK>
[  203.192342][ T8226] Kernel Offset: disabled
[  203.196648][ T8226] Rebooting in 86400 seconds..