last executing test programs:

6m38.410341884s ago: executing program 32 (id=136):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
syz_emit_ethernet(0x16, &(0x7f00000027c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x3, "8e", "167c8b", 0x6006}}}}}, 0x0)

5m28.933200462s ago: executing program 33 (id=718):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x2a0, 0x2a0, 0xffffffff, 0x188, 0xe0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @port=0xfffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={<r2=>r0, &(0x7f0000000000)='\x00', 0x400100, &(0x7f00000000c0)={@align=0xfb20, {0x8, 0x401, 0x1ff, 0x1}}, 0x9, &(0x7f0000000100), &(0x7f0000000180)})
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x47)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042004020008001b000000000038001a8004002d", @ANYRES64=r2], 0x60}, 0x1, 0x0, 0x0, 0x44890}, 0x0)

5m19.003315873s ago: executing program 34 (id=808):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00') (async)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00')
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="c87be6970899", @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x3, 0x2c, 0xffff, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1, {[@noop]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) (async)
pread64(r1, &(0x7f0000000040)=""/111, 0x6f, 0x6c38)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x8, 0x0, {0xffffffffffffffff}, {<r2=>0xffffffffffffffff}, 0x9, 0x8})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0x8, 0x590c0d22, 0x0, 0x9, 0x7, 0x3, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r3, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x4, 0x3, 0x663e, 0x8000, 0x9, 0x7, {0x3, 0x80004, 0x3, 0x42a, 0x1, 0xfe, 0x5368, 0x5, 0x3, 0x8000, 0x11ac2fcb, 0x0, r5, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {r2, r5}}, './config/usb_gadget/g1\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {r2, r5}}, './config/usb_gadget/g1\x00'})
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
recvmmsg(r0, &(0x7f0000002a40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/237, 0xed}], 0x4, &(0x7f0000000580)=""/12, 0xc}, 0x2}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/55, 0x37}, {&(0x7f0000000740)=""/24, 0x18}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/185, 0xb9}], 0x5, &(0x7f0000000940)=""/122, 0x7a}, 0xb7f}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)=""/36, 0x24}, {&(0x7f0000000a80)=""/23, 0x17}, {&(0x7f0000000ac0)=""/102, 0x66}, {&(0x7f0000000b40)=""/172, 0xac}, {&(0x7f0000000c00)=""/135, 0x87}, {&(0x7f0000000cc0)=""/113, 0x71}, {&(0x7f0000000d40)=""/12, 0xc}, {&(0x7f0000000d80)=""/223, 0xdf}], 0x8}, 0x1}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000002d00)=""/4101, 0x1005}], 0x1, &(0x7f0000001fc0)=""/106, 0x6a}, 0x5}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000002080)=""/74, 0x4a}, {&(0x7f0000002100)=""/243, 0xf3}, {&(0x7f0000002200)=""/171, 0xab}, {&(0x7f0000002c40)=""/161, 0xa1}], 0x5, &(0x7f0000002400)=""/13, 0xd}, 0x5}, {{&(0x7f0000002440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/204, 0xcc}, {&(0x7f00000025c0)=""/190, 0xbe}, {&(0x7f0000002680)=""/200, 0xc8}], 0x3}, 0x400}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000027c0)=""/75, 0x4b}, {&(0x7f0000002840)=""/66, 0x42}, {&(0x7f00000028c0)=""/116, 0x74}], 0x3, &(0x7f0000002980)=""/185, 0xb9}, 0x2}], 0x7, 0x2000, &(0x7f0000002c00))

4m46.49489042s ago: executing program 35 (id=965):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0xc140)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={<r5=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000380)={r5, 0x3})
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}})
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000180)={0xfffffffc, 0xff0000, "82c81c86cf1d40661e175a215ee4a48130b8a4da85f33e46", {0x3ff, 0x7fff}, 0x9})
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x102, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

4m4.84767496s ago: executing program 36 (id=1291):
r0 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={&(0x7f0000002000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/4096, 0x1000, 0x1}}, 0x1)

3m46.045253637s ago: executing program 37 (id=1532):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff0200000000000000000000000000010000000032"], 0x254}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000300)={{0x2, 0x1, 0x8000, 0x3, 0x81}, 0x7fffffff, 0x8, 'id0\x00', 'timer0\x00', 0x0, 0x10001, 0xffffffff, 0x10, 0x10})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x1, 0x0, 0x0, 0xffffffff}, {0x5, 0x2, 0x3, 0x7ffffdbe}]})
quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000302, 0xee00, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x6, 0x7, 0x0, 0x2, 0x9]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x46080)

3m28.475829089s ago: executing program 38 (id=1547):
r0 = socket$inet6(0xa, 0x2, 0x3a) (async)
r1 = syz_open_dev$ndb(&(0x7f0000000d40), 0x0, 0x3)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x1000) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10127, 0x2, 0x0) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f7ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000036f97fa6bd3d5000fa700"/28], 0x50) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8089}, 0x4000814) (async)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=<r14=>0x0)
sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r14, @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES64=r6, @ANYRES32=r0], 0x1c}}, 0x840) (async)
sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2de311cd94dc9b58}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec430b6e0f52d43025a8693982b4af47604c9c13f09be1c58f4898e3d9b624f8aecf67c180b1dfc885cd7f6e2587e704ced5f155ec1d723cb83fd2d2f45ccdc5623297ba04be765b21b236317d95c28808b1384ba8e0531db8d055daf8e18ff2081abd089803c3884a7ef2", @ANYRES16=r10, @ANYBLOB="000225bd7000fcdbdf251500000008000100", @ANYRES32=r14, @ANYBLOB="040014000b001400403a7d257d2a2c00"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async)
r16 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)={0x1, [<r17=>0x0]}, &(0x7f0000000600)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r16, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r17, &(0x7f0000000680)=0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000c5ef0000070000000700000004000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r15, @ANYBLOB="0300000005000000040000000f00"/28], 0x50) (async)
setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000100)=0x30003, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c)

3m5.441500458s ago: executing program 39 (id=1892):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/174, 0xae}], 0x1, 0x2, 0x1)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000480)="440f20c0350c0000000f01330f78f466470fc772d8f20f2b4b1366ba4200b80001c0feef410f01f8640f0f828636e3b59766b893000f00d82636660f51018fe9689244c200", 0x45}], 0x1, 0x47, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m35.785897328s ago: executing program 4 (id=2253):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_ENCAP_TYPE={0x6}]}, 0x28}}, 0x4000001)
write(r0, &(0x7f0000000000)='7', 0x1)
bind$phonet(r1, &(0x7f0000000280)={0x23, 0x2, 0x3, 0x1}, 0x10)
read$char_usb(r0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
getdents64(r0, &(0x7f0000000240)=""/37, 0x25)
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3)
open_by_handle_at(r0, &(0x7f0000000040)=@xfs_parent={0x1c, 0x82, {0x8, 0x400, 0xfc}}, 0x121101)

2m35.44604472s ago: executing program 4 (id=2259):
syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/137)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0xa, 0xfffffffe)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000001c0)=0x2c)
syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000000000/0x400000)=nil)
r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x1595e, 0x10000, 0x0, 0x4e, 0x0, r8}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0, &(0x7f0000000080)=<r12=>0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, r12, &(0x7f0000000340)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xd8000004}], 0x1, 0x0, 0x1, {0x0, r13}})
io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400)
r14 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0xa6fe, 0x400, 0x2, 0x200404e}, &(0x7f0000000080)=<r15=>0x0, &(0x7f0000000000)=<r16=>0x0, &(0x7f0000000040)=<r17=>0x0)
syz_io_uring_submit(r15, r16, r17, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0xd, 0x2, 0xffffffffffffffff, 0x0})
io_uring_enter(r14, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r18 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084)
sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0)

2m32.394075962s ago: executing program 4 (id=2282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48)

2m32.324617206s ago: executing program 4 (id=2283):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0x80000000, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

2m31.476631203s ago: executing program 4 (id=2299):
syz_open_dev$sg(0x0, 0x0, 0x8002)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

2m31.315757291s ago: executing program 4 (id=2303):
r0 = socket$kcm(0x23, 0x7, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24004044)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a105817b4efbeaf70030ab2430f507a1e0743bf119e0f1c4b8b951e6ef1dcfe8383ca1ab6baea1af1c244952fc1061dd7152914244d253eb32f155629c0040ab5cbb68c3c2d4c6553ce9c8674ce8328a2609b0c782ef7c9c"]) (async)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a105817b4efbeaf70030ab2430f507a1e0743bf119e0f1c4b8b951e6ef1dcfe8383ca1ab6baea1af1c244952fc1061dd7152914244d253eb32f155629c0040ab5cbb68c3c2d4c6553ce9c8674ce8328a2609b0c782ef7c9c"])
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
memfd_create(&(0x7f0000000180)='):):\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
inotify_init1(0x800)
inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x16000da3)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
memfd_create(0x0, 0x0)
memfd_create(&(0x7f00000002c0)='\x00', 0x2)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x100000001, 0x3a, '#', 0x3a, '.\\{{)-', 0x3a, './file0', 0x3a, [0x46]}, 0x2f)
memfd_create(&(0x7f0000000340)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x3)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) (async)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r6, 0x0, 0x0) (async)
connect$inet(r6, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40) (async)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

2m25.670366772s ago: executing program 40 (id=2178):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40000)

2m15.483826304s ago: executing program 41 (id=2303):
r0 = socket$kcm(0x23, 0x7, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24004044)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a105817b4efbeaf70030ab2430f507a1e0743bf119e0f1c4b8b951e6ef1dcfe8383ca1ab6baea1af1c244952fc1061dd7152914244d253eb32f155629c0040ab5cbb68c3c2d4c6553ce9c8674ce8328a2609b0c782ef7c9c"]) (async)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a105817b4efbeaf70030ab2430f507a1e0743bf119e0f1c4b8b951e6ef1dcfe8383ca1ab6baea1af1c244952fc1061dd7152914244d253eb32f155629c0040ab5cbb68c3c2d4c6553ce9c8674ce8328a2609b0c782ef7c9c"])
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
memfd_create(&(0x7f0000000180)='):):\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
inotify_init1(0x800)
inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x16000da3)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
memfd_create(0x0, 0x0)
memfd_create(&(0x7f00000002c0)='\x00', 0x2)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x100000001, 0x3a, '#', 0x3a, '.\\{{)-', 0x3a, './file0', 0x3a, [0x46]}, 0x2f)
memfd_create(&(0x7f0000000340)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x3)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) (async)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r6, 0x0, 0x0) (async)
connect$inet(r6, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40) (async)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

2m8.605060949s ago: executing program 2 (id=2454):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800020000000000000000000000000061198c0000000000000000000000008b"], 0x0}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m8.445580484s ago: executing program 2 (id=2455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m8.432393082s ago: executing program 2 (id=2457):
syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

2m7.195550029s ago: executing program 2 (id=2469):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000000)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
r2 = fanotify_init(0x8, 0x101000)
write$binfmt_elf64(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001c"], 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, <r7=>0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2, r7, r8, 0x3, 0x0, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}})
ioctl$TUNSETIFF(r3, 0x41009432, 0x0)
syz_emit_ethernet(0x1d6, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)

2m5.615420641s ago: executing program 2 (id=2479):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919b0000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0xdd8, 0x40000105, 0x0, 0x0})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0x6)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, &(0x7f0000000000)={0x1, 0x1, 0xc, 0x5, 0x9, 0xffff5a79})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@func={0xf, 0x0, 0x0, 0xc, 0x5}, @fwd={0xa}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @float={0xc, 0x0, 0x0, 0x10, 0x8}, @struct={0xb, 0x5, 0x0, 0x4, 0x0, 0x401, [{0x10, 0x1, 0xe96d}, {0xb, 0x4, 0x9}, {0x7, 0x2, 0x16}, {0x6, 0x0, 0x7}, {0x7, 0x2, 0x1d45}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000200)=""/89, 0xa6, 0x59, 0x0, 0xa8000000, 0x10000}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x1)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000005f0cfb074875e0df25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30040000000000000000000c008f0001000000010000000c0090000100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4894}, 0xa080)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m5.512916173s ago: executing program 2 (id=2480):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x101940)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x20, 0xc, 0x5, 0x1, 0x0, 0x7, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x3, 0x0, 0x1, 0x8, 'syz0\x00', 0x4002}, 0x0, 0x10, 0xffffffb7, r1, 0x0, 0x10003, 'syz1\x00', 0x0, 0xffffff91})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000003000000000000000000000000b21d000000000000000000"], 0x50)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)={0x404080, 0x180, 0x1a}, 0x18)
r5 = openat(r2, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x1d50c3, 0x42)
write(r5, &(0x7f0000000300)='offline', 0x7)
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x3f2, 0x66b7a8c216f7e384, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24000800)
mlock(&(0x7f0000722000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)

1m50.4418528s ago: executing program 42 (id=2480):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x101940)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x20, 0xc, 0x5, 0x1, 0x0, 0x7, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x3, 0x0, 0x1, 0x8, 'syz0\x00', 0x4002}, 0x0, 0x10, 0xffffffb7, r1, 0x0, 0x10003, 'syz1\x00', 0x0, 0xffffff91})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000003000000000000000000000000b21d000000000000000000"], 0x50)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)={0x404080, 0x180, 0x1a}, 0x18)
r5 = openat(r2, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x1d50c3, 0x42)
write(r5, &(0x7f0000000300)='offline', 0x7)
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x3f2, 0x66b7a8c216f7e384, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24000800)
mlock(&(0x7f0000722000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)

34.598250873s ago: executing program 0 (id=3515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) (async, rerun: 32)
close(r1) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) (rerun: 32)
read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) (async)
io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x18)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @multicast}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000100)="b5bec73fea", 0x5}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

34.275080542s ago: executing program 0 (id=3519):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x3) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

34.143922551s ago: executing program 0 (id=3520):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

34.101725701s ago: executing program 0 (id=3521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)

34.093683105s ago: executing program 0 (id=3522):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r4, &(0x7f0000000000)='7', 0x1) (async)
write(r4, &(0x7f0000000000)='7', 0x1)
msgsnd(0x0, &(0x7f0000000940)={0x1}, 0x2000, 0x800)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000003c0)={0x1}, 0x8) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000003c0)={0x1}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x5, 0x0) (async)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x4)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r8 = accept4$unix(r6, 0x0, 0x0, 0x800)
recvfrom$unix(r8, &(0x7f0000000240)=""/229, 0xe5, 0x40010010, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x96}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r10, 0x702, 0x1e, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ptrace$pokeuser(0x6, r9, 0x388, 0x41d9fda7) (async)
ptrace$pokeuser(0x6, r9, 0x388, 0x41d9fda7)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x6, &(0x7f00000000c0)=[{0x26, '\x00', @buffer={"bc3b2ab1d4dd10d9413895d1456ddd803c7dd8ea00d33e97e80a093854fe55a9", 0x20}, 0x6}, {0x1d, '\x00', @buffer={"8b81f06597d8dce9fc67e82025338a22510de92aa06a2b9ebcd73c0207c902cd", 0x20}, 0x7}, {0x43, '\x00', @buffer={"7d35420d9b670a03f9529d473d8691803e5cc56500698f48645bc7d20b6ed7a0", 0x20}, 0x10000}]}) (async)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x6, &(0x7f00000000c0)=[{0x26, '\x00', @buffer={"bc3b2ab1d4dd10d9413895d1456ddd803c7dd8ea00d33e97e80a093854fe55a9", 0x20}, 0x6}, {0x1d, '\x00', @buffer={"8b81f06597d8dce9fc67e82025338a22510de92aa06a2b9ebcd73c0207c902cd", 0x20}, 0x7}, {0x43, '\x00', @buffer={"7d35420d9b670a03f9529d473d8691803e5cc56500698f48645bc7d20b6ed7a0", 0x20}, 0x10000}]})

33.985137174s ago: executing program 0 (id=3523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x10, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d0, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa, 0x47}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x1e1, 0x2a, [@supported_rates={0x1, 0x4, [{0x36, 0x1}, {0x60, 0x1}, {0x18, 0x1}, {0x4, 0x1}]}, @supported_rates={0x1, 0x3, [{0x3, 0x1}, {0x3}, {0x30, 0x1}]}, @perr={0x84, 0xa1, {0x9, 0x9, [{{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0xe}, {{}, @broadcast, 0x0, @void, 0x35}, {{}, @device_a, 0x1ff, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x8c, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0xe41, @value, 0x32}, {{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x40}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x8}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x13}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @cf={0x4, 0x6, {0xa, 0x81, 0x7, 0x6}}, @challenge={0x10, 0x1, 0x6c}, @mic={0x8c, 0x18, {0x77c, "4f8775574162", @long="884e6b87849859ab41d6121e5cbef9d8"}}, @measure_req={0x26, 0xfd, {0x6, 0x5d, 0xff, "08eeb3e5de9c3ae3903fc1e4c0e2e754bc6849994fd06bb073b27daf5721e527d80661e043f0574f908e1b16ffd73c28e4f8d498db28f2a085fe1f51536d415d4f51a88f20209c4e30d82afd3fd400d8ee6e60cb0bc7b5dc188a50673e01b9012fa334a6fdeab630e0b3aa8eed717e747dcd31aebf41bd1b5f2dc50c16fbc2a5ceb56aad25e5d97023abac57719c20a5d0d655f27f6abd016f886ad01f5a343c2ea5925f71767541232188a0f390c2d30ffd32a64e38b45b5418fd8defbf97c58396eea72ddf68e25c8309c93d5e317a54eda2de484ac31d05e08586cb55e7ef445a859396eb146fbc0238eff7ff54ac439e35a17201e01ea039"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="50eec093c918"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x98, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xca}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x10001}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="794101978ec4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ac77048448c1"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff}, @NL80211_BAND_LC={0x8, 0x5, 0xe}]}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18)
unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)

32.065083663s ago: executing program 1 (id=3545):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000180)=0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

31.904647978s ago: executing program 1 (id=3548):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000070000004000000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
r6 = fanotify_init(0x20, 0x0)
fanotify_mark(r6, 0x1, 0x2, r5, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)

30.989020834s ago: executing program 1 (id=3565):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0))
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000b37884c2098785bf"], 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25070000000a0004007770616e330000000c0006000100000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x48d, 0x4)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
r5 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"})
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000005000000a30c"])
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)="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", 0x139}], 0x1}}], 0x1, 0x34001401)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES8=r3, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES8=r3, @ANYBLOB="080004"], 0x50}}, 0x0)

30.680374495s ago: executing program 1 (id=3568):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
r0 = getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r1, &(0x7f0000004c80)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc)
getpeername(r1, 0x0, &(0x7f0000005680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='-:mygrou-/myevent ./dummy:', 0x1a)
r3 = syz_pidfd_open(r0, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr, 0x3a}], [], 0x2f})

30.637178191s ago: executing program 1 (id=3569):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0000001ae2d68f774dd2ef0300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x20b, 0xfffffffffffffffc})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0xfffffe14)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302cb10665725f69643d", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',max_read=0x0000000000000005,default_permissions,func=BPRM_CHECK,rootcontext=user_u,func=MMAP_CHECK,subj_type=/dev/fuse\x00,\x00'])
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

30.424933483s ago: executing program 1 (id=3572):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64)
r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r9, &(0x7f0000000500)={&(0x7f0000000300)={0x1d, r4, 0x1, {0x0, 0x1, 0x4}, 0x3}, 0x18, &(0x7f00000004c0)={&(0x7f0000000440)="2e91d362db5b0947183b4fdd80a6055a6225b62165420da427135ddb4dbcdf651a4e3efa412bb8e6a0c5023f09a58fe049c6a8ba297c5ccfdc152cd9b232d641c6e872bc27efa7a647f5bb99f2b18f7b5f240dc74a003657c648148d4669a97f32d561adb5867b86e766", 0x6a}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async, rerun: 64)
r10 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r11=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) (async, rerun: 32)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) (rerun: 32)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x198, r12, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4041}, 0x40001) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1c, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x1, 0xd, 0x2, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5}, @generic={0xf7, 0x3, 0x4, 0x9, 0x5}, @call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62, '\x00', r11}, 0x94) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)

30.345234929s ago: executing program 43 (id=3572):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64)
r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r9, &(0x7f0000000500)={&(0x7f0000000300)={0x1d, r4, 0x1, {0x0, 0x1, 0x4}, 0x3}, 0x18, &(0x7f00000004c0)={&(0x7f0000000440)="2e91d362db5b0947183b4fdd80a6055a6225b62165420da427135ddb4dbcdf651a4e3efa412bb8e6a0c5023f09a58fe049c6a8ba297c5ccfdc152cd9b232d641c6e872bc27efa7a647f5bb99f2b18f7b5f240dc74a003657c648148d4669a97f32d561adb5867b86e766", 0x6a}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async, rerun: 64)
r10 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r11=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) (async, rerun: 32)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) (rerun: 32)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x198, r12, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4041}, 0x40001) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1c, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x1, 0xd, 0x2, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5}, @generic={0xf7, 0x3, 0x4, 0x9, 0x5}, @call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62, '\x00', r11}, 0x94) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)

18.937950671s ago: executing program 44 (id=3523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x10, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d0, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa, 0x47}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x1e1, 0x2a, [@supported_rates={0x1, 0x4, [{0x36, 0x1}, {0x60, 0x1}, {0x18, 0x1}, {0x4, 0x1}]}, @supported_rates={0x1, 0x3, [{0x3, 0x1}, {0x3}, {0x30, 0x1}]}, @perr={0x84, 0xa1, {0x9, 0x9, [{{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0xe}, {{}, @broadcast, 0x0, @void, 0x35}, {{}, @device_a, 0x1ff, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x8c, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0xe41, @value, 0x32}, {{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x40}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x8}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x13}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @cf={0x4, 0x6, {0xa, 0x81, 0x7, 0x6}}, @challenge={0x10, 0x1, 0x6c}, @mic={0x8c, 0x18, {0x77c, "4f8775574162", @long="884e6b87849859ab41d6121e5cbef9d8"}}, @measure_req={0x26, 0xfd, {0x6, 0x5d, 0xff, "08eeb3e5de9c3ae3903fc1e4c0e2e754bc6849994fd06bb073b27daf5721e527d80661e043f0574f908e1b16ffd73c28e4f8d498db28f2a085fe1f51536d415d4f51a88f20209c4e30d82afd3fd400d8ee6e60cb0bc7b5dc188a50673e01b9012fa334a6fdeab630e0b3aa8eed717e747dcd31aebf41bd1b5f2dc50c16fbc2a5ceb56aad25e5d97023abac57719c20a5d0d655f27f6abd016f886ad01f5a343c2ea5925f71767541232188a0f390c2d30ffd32a64e38b45b5418fd8defbf97c58396eea72ddf68e25c8309c93d5e317a54eda2de484ac31d05e08586cb55e7ef445a859396eb146fbc0238eff7ff54ac439e35a17201e01ea039"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="50eec093c918"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x98, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xca}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x10001}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="794101978ec4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ac77048448c1"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff}, @NL80211_BAND_LC={0x8, 0x5, 0xe}]}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18)
unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)

9.221648101s ago: executing program 3 (id=3787):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8f, 0x0, &(0x7f00000000c0)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5f8a73daefb8225", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001}, 0x50) (async)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="92300fefa304040008001b54045a3b4af930de5ce9338b21e7566647c4c7436fdcc427800fce083f45233f347199c59ce28e5c4e2fecc0a740b2574803da095278cc5abb4f3b77bc9e70e875841e58812787d296b6078b7cd7c95c302e4553ce39a207b38243007423a319704df2690be8326e48a6830e3169e2a70d0b07c1d7442469fdd9893404bcf7bb89a224fa8baca0217f2213c4b9fea64e4c15ee6a453cff72"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

9.124718453s ago: executing program 3 (id=3789):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r2, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001800)={0x44, 0x0, &(0x7f0000001ac0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x20, 0x10, 0x100, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x16b, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x24000080)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101440, 0x0)

9.12444815s ago: executing program 6 (id=3790):
timer_create(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x400000000008001, 0x2008) (async)
set_mempolicy(0x3, &(0x7f0000000040)=0x400000000008001, 0x2008)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1b6d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (async)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1b6d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
listen(r0, 0x5)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9f00a0006000100110402000500ac886b9d00385e2798ec44f8388619f74fa771bcfc7f71a0d558b2287271e70b5dc476dda2bcdb58ce1590326a3ad0d1f20bbe6368726e01465301b2cb8c555d9dd909791e01789d60373f212b0457fed9e9aa81b8ad7919d5ed22fc91358029a4f0895aa8f89742c50a3e"], 0xf) (async)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9f00a0006000100110402000500ac886b9d00385e2798ec44f8388619f74fa771bcfc7f71a0d558b2287271e70b5dc476dda2bcdb58ce1590326a3ad0d1f20bbe6368726e01465301b2cb8c555d9dd909791e01789d60373f212b0457fed9e9aa81b8ad7919d5ed22fc91358029a4f0895aa8f89742c50a3e"], 0xf)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$team(&(0x7f0000000200), r1)
syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x100)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)}) (async)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)})

8.934563602s ago: executing program 3 (id=3792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0700020000010100e3ff05000000180001801400020076657468315f746f5f6873720000000005000700010000006f25525d50daafafcee1affe6cd899a85819d5af72964e496fbc127f7febd20a9f39e5356e8f8a22ab4e55"], 0x34}}, 0x40800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a1e1"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000300))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb}, 0x94)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0xe)

8.885038934s ago: executing program 3 (id=3793):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1770d8, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x7f)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80001, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0xa040)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x102030405060708, {}, 0x20}, 0x18)
connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0xee}, 0xff}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x27b, 0x1e0, 0x0, 0x2, 0x4, 0x7, 0x410}})

8.830798396s ago: executing program 3 (id=3794):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c000d07001000000014"], 0xffe)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004051}, 0x8000)

8.562804058s ago: executing program 3 (id=3796):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8080, 0x0)
ioctl$COMEDI_LOCK(r0, 0x6405)
setns(0xc9, 0x0)
close(0x3)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0x808, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x9c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000810)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000))
ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x81, 0x0})

8.469079027s ago: executing program 45 (id=3796):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8080, 0x0)
ioctl$COMEDI_LOCK(r0, 0x6405)
setns(0xc9, 0x0)
close(0x3)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0x808, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x9c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000810)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000))
ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x81, 0x0})

8.044389664s ago: executing program 6 (id=3800):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000127919036cf50a02b05fb71bc65670a800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

8.043794786s ago: executing program 6 (id=3801):
mount$afs(&(0x7f0000000500)=ANY=[@ANYBLOB="2573797a303a73797a302e726561646f6e6c7900a4b37d1a36b9207d7c6e00b84ae9543eb33da6f8ed4c558890b621d08064863b926c262fdcf42199a4180d5db732288db90f8fbece67288d94cb126ae43a06a9123297957d1b3fd74856252c68b5132c242d760498fae06b648d481d81528cb5855945ef81c28c99d703f569454642d71c4dcef21f2e067a06cc3e87dc4f0d7ce45de16bf5d504477bdc2ea4e73b707859c05917a9032ca7a953bb10a6db44ea663861a8bf2a64e6ccf9cb8e8c9a47311a434cc2f4edfb54"], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14882, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x123084, 0x0)
ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000080))
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
fcntl$dupfd(r6, 0x0, r8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x5794, @private0, 0x8000}, 0x1c)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5)
sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0xfffffffffffffd3c, &(0x7f0000001dc0)=[{&(0x7f0000000100)="91f8a98a50936e53a25703d11e449f1b57b747d6d000202030", 0x19}], 0x1}}], 0x1, 0x2090)
writev(r3, &(0x7f00000033c0)=[{&(0x7f0000000180)="228b0a3652", 0x5}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535a4000000", 0x60}, {&(0x7f0000000300)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a6196efc585d57b8fa2abcd7f2952f7dcf21546acf8e7aafc9162ea1db56c850af0a225d919b0120fd83206ccb82f13d5165ffd3fdc07d89b14be9048e81ebb9", 0xa7}, {&(0x7f0000002280)="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", 0x116}], 0x4)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000))
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="ad43000000000000000006"], 0x14}}, 0x0)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)
fsopen(&(0x7f0000000080)='adfs\x00', 0x0)

7.592959236s ago: executing program 6 (id=3805):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
pwritev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000240)='o', 0x1}], 0x2, 0x8, 0x7ff)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
move_mount(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x7e, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x94)

7.471601678s ago: executing program 6 (id=3808):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10400, 0x9)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
getdents64(r0, &(0x7f0000000800)=""/4096, 0x1000)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x9, 0x2b2c, 0x3e, 0x9}, 'syz0\x00', 0x2d})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080), 0x4)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000500)={0x50, 0x13, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @const={0xc, {0x100, 0x4, 0x4, 0x5}}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="30000000440007012cbd70801400240002"], 0x30}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

6.93069962s ago: executing program 6 (id=3811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000)

6.820668155s ago: executing program 46 (id=3811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000)

2.565599362s ago: executing program 9 (id=3797):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.480586115s ago: executing program 9 (id=3846):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x10, 0xffe0}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4006881}, 0x20000900)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r3, &(0x7f0000000640)=[{&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26", 0x4b}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
socket(0x2, 0x3, 0xff)
syz_usbip_server_init(0x6)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000001140), 0x8880, 0x0)
r4 = socket$inet6(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r4], 0x22)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x2ee06d9dd6da598a, 0x1, 0x0, 0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.893992133s ago: executing program 8 (id=3851):
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x400403, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0xd, 0xfffffffffffffff8, 0x4, 0xfffffffffffffffa, 0x6, 0x120, 0x7, 0x1ff, 0x1, 0x10, 0x1, 0x76dc, 0xfffffffffffffff7, 0x10000, 0xf], 0x6000, 0x30004})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x6, 0x1, 0x838, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x7, 0x8}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={<r4=>0x0, @empty, @remote}, &(0x7f00000003c0)=0xc)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000400)={@local, <r5=>0x0}, &(0x7f0000000440)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000480)={'ip_vti0\x00', <r6=>0x0, 0x700, 0x7, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@end]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x62, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@RTM_NEWMDB={0xf8, 0x54, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x2, 0x3, 0x2, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x6}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x1a}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x2, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x3, {@ip4=@private=0xa010100, 0x436e}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000980)="43b19e9a9700ab2bb6513813c57b5fa08a99fbbbd14d25823ddc9bcb12e7537a93396f9533b9612b16a16d75fcdfb76b738a75e7520fd4dc71a3e695171a19557ef7dd2dbb179579d13ea95c802db66ed598b490be87c7836d08923c9133ed5dbf8ab1ee80fd0b8edcf4a719a502f5a891")
r8 = syz_open_dev$ublk_chdev(&(0x7f0000000a00), 0x0, 0x180)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000a40)=0x4bc4)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b40)={'gre0\x00', <r11=>r6, 0x86, 0x80, 0x7, 0x37, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x65, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x8, 0x5b, 0x0, 0x5, [0x12ab]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xb3, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x99, 0x3, 0xd, [{@loopback, 0x5}, {@remote, 0x20000000}, {@broadcast, 0x1b}, {@local}, {@empty, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', <r12=>0x0})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000c80)={<r13=>0x0, @remote, @empty}, &(0x7f0000000cc0)=0xc)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001500)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000014c0)={&(0x7f0000000d00)={0x7b4, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x190, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x4, 0x7, 0xd00}, {0xe, 0xfe, 0x80, 0x9}, {0x9, 0x0, 0x7, 0xd0}, {0xf99a, 0x1, 0xea, 0x3ff}, {0x1, 0x8, 0xff, 0x1}, {0xa5c2, 0xb, 0x8, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0xbc, 0xe, 0x8001}]}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9e3}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x840}, 0x10)
mkdirat(r0, &(0x7f0000001540)='./file0\x00', 0x80)
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f00000015c0), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r14, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x687}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0)
sendmsg$NL80211_CMD_SET_BSS(r15, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, r16, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xc4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x81}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000001880)={<r17=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f00000018c0)={<r18=>0x41424344}, 0x9, 0x3ff)
write$tun(r0, &(0x7f0000001980)={@val={0x0, 0xf9}, @void, @mpls={[{0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x100}, {0x7}, {0x9}, {0x7}], @ipv6=@esp={0x4, 0x6, "66888d", 0xc98, 0x32, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x2c, 0x14, 0x4, 0xa, 0x98, 0x28, 0x10, [@remote, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x5}, @private2, @mcast1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, @local]}, @srh={0x87, 0x8, 0x4, 0x4, 0x9, 0x78, 0x1, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, @loopback, @private1, @empty]}, @hopopts={0x2b, 0x6, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x200, [0x60, 0x401, 0x4, 0x3]}}, @pad1, @pad1]}], {0x4d4, 0x6, @basic={0x0, 0x0, 0x8, [@ipv6=@icmpv6={0xe, 0x6, "682992", 0x28d, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x87, 0xb, '\x00', [@generic={0xf9, 0x50, "12af82edc51139a36561a13ca1a7c54c0f6dd40bbdb8fd7b071110d81f91f2428cbca6e03576b247b73185f276874547d4d981627daa620c22769ebec3d2a6e5b248997119dbfd39e777b54f2dad89ad"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7f}]}, @fragment={0xff, 0x0, 0x4, 0x1, 0x0, 0x5, 0x68}, @routing={0x2f, 0xe, 0x2, 0x23, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @srh={0x2f, 0x6, 0x4, 0x3, 0x1, 0x50, 0x8, [@remote, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0xc22866fc43304a5c, 0x4, 0x4, 0x2, 0x3, 0x0, 0x2, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x8e, 0x0, 0x7, 0x1, 0x0, 0x9, 0x68}, @fragment={0x2c, 0x0, 0x6, 0x0, 0x0, 0x3, 0x64}, @fragment={0x1d, 0x0, 0x9b, 0x1, 0x0, 0x1d, 0x67}, @srh={0xff, 0xe, 0x4, 0x7, 0x8, 0x0, 0x8, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0xe}]}], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, "17acc0", 0xd, 0x3c, 0x1, @private0, @private0, [@routing={0x87, 0x2, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00']}, @fragment={0x6, 0x0, 0x4, 0x1, 0x0, 0xe, 0x64}], "8115d2681816a875dc52c73914f65745e647e5888b8ba5fba9ef5df4f3ef77dcd5328c81ead3d08ace29196731b2a0376941a10dfeebc804869b60123dbf8829fa2ec2271f8278ce0b338ee350b740ae8791e81950edf8bd614b41cf9f72983dfa287ef28a"}}}}, @runt="b0df15c48f1fef841ed49c5d41f06b97316dac12d1cd31d19b3c", @ipv4=@udp={{0x5, 0x4, 0x2, 0xb, 0xb0, 0x65, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x4e24, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "b66d917c34a059e30ff9cf0d2e084fc2c34dc7bb57ad0a9c57ddc574a7e34021", "8c151f2bd4acf927d8f0c08eef735d03d62bed2c5856ff674725cd6e1e3285be52dfa1ec97e8927de343b342aeb3707b", "981580f8ec175275cdc243f3537de4c11884cad3a0dc56f6be0764ab", {"d65779efcf7658e3b2c3c8fbd68750ba", "19d3b8fe304c82b1dc0f4cd46b44c3bd"}}}}, @runt="4b2cae17c62fd9a5a1319e98bb06a4a1a51d3214425c5e28013029633697b243bded574058e6a329b4d722fff6c57a6d43af8cb804a0d9919d54861218a8a313", @ipv6=@gre_packet={0x8, 0x6, "d1b18d", 0x419, 0x2f, 0x1, @mcast2, @local, {[@routing={0x16, 0x8, 0x4ca7017543f09691, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @hopopts={0x11, 0x8, '\x00', [@generic={0x6, 0x42, "967310b721fe1e609fea409f0ce750ee6c52ffe6a43c594bb19cb4173499bfd95140f9b3fbde544a090b2660810cd6fea03546847594551561bd00000f8b1fea36f4"}]}, @routing={0x87, 0xc, 0x2, 0x97, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast1]}, @fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x17, 0x66}, @fragment={0x67, 0x0, 0xd, 0x0, 0x0, 0x4, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xfc, 0x0, [0x1, 0x2af9], "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"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "81faa26f1afef358eeb7049148a774fab2c2a49b8e5d7de31090c223fd709ab19cdafadc4e34348299c34c7df57ab55d13c83d578f4ccc50252cf2293f99cbfa5138be0457836c8dea353dddd10d00cdb8398470d5736bdcd6550c78738655a221ab025b733434a38b8ec9a2ea5249f6129f87f49573829ed8790d7940048a6ddca4beac1572a92ee4a9f94f66e9334f5ae2f856a9e016e7045f37e8b2d1cfab7c375fdc7847ec6b4b5f258298598f5c30929d092f47a1df130af2e724ee578089097ba405ad34b5a874f8e4dfc9ceb4"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x6, 0x3], "74e4afe78eff9c75f4ef155f7c5fe5d771f60a92b4a20765217ca03ba3a8bb7b214437e94105262c29b4374ef3f57e62efd48ba34dcf886aec23b79c2d6e7c3f1acfd9ecee2bf8ab9c4f1994a3ac507e86e69cdc3d761866190bdde3097724f6a31fa8b55313fc91"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x8, 0x3, 0x1, 0x2, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x25, 0x0, 0x0, 0x1, 0x3, 0x40}, 0x2, {0x1, 0x1, 0x2, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "81d9c4d4b4903f1b8f0b8dfad0354490cd03fd791d93c04b456abe11e72b50b716eaa52624ddabf7a0216f92c0df6bc98f2241d102210e1d9c6dde7db84dd4c913c2338c3a09e3fa6db9e0aedfa93aa5e2c8e3ac52c3242e31245cfde5456ad89c6e913fe49ea30711442beb24b312271c78081e3f886158daf91e981239a6a9ab02b395dc9d288f2e"}}}}, @runt="fffe14", @ipv4=@tcp={{0x16, 0x4, 0x1, 0x2e, 0xd6, 0x66, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x17, 0x36, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @loopback, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x24, 0x69, 0x3, 0x8, [{@rand_addr=0x64010102, 0x1}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x100}]}, @end]}}, {{0x4e24, 0x4e22, r17, r18, 0x1, 0x0, 0x7, 0x20, 0x5, 0x0, 0x3, {[@generic={0x5, 0x7, "adcdd36975"}]}}, {"8054441a02ece8b521f6b667b52f819a85bf7b2b0914561b63d0fc7aaccfd82b68cd2b911d0e91af16e5a54cce9c20dd8665e35a5d33515e6d2c16aadeb9832a7ab9c69658467b5baee2a832be12c5928f063d502bca29b794f42a79e96557704510"}}}, @runt="475c398f8c7717285f539c2c4155272b8aa169e5fd3f0f4d301b6b646e60914edc20e8631694c90786", @ipv6=@tcp={0xa, 0x6, "815812", 0x237, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x5e, 0xd, '\x00', [@generic={0x3, 0x6a, "ec5d47c70a5b4121cd7ec9b998df57c15e98e4ed372d3ec31e1ce66cd235329d9f88a017e5e7f526b97cefc08b170090ed2bab1604b77bf4a1f72202b1bc24aa806dfe84ea541a38865e003bbb245c7b75016180f7d770539ca7cd98c777f2d4d3b0a4c68e6f03646571"}]}, @routing={0x62, 0x6, 0x1, 0x5d, 0x0, [@mcast1, @remote, @loopback]}, @routing={0x87, 0x14, 0x2, 0xe3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x87, 0xe, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x2, 0x1ff, 0x0, 0x7, {[@mptcp=@mp_join={0x1e, 0x3, 0xc}]}}, {"47b13b8e01fe306eaa097d93ab6912f78f636214b2f6e074ef150a6cbd9893f5e4a615f7d3c8a91ae42fe7b6dc78241ad1fd1286006459afcb1653345eba9151935d36c9aaffd0d1a1a34d4272aa81"}}}}]}, "c6", 0x1}}}}}, 0xce0)

1.821032781s ago: executing program 8 (id=3852):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000140)={[{@workdir}]})
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18, 0x1000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

1.820533528s ago: executing program 5 (id=3853):
unshare(0x6a060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
socket(0x400000000010, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x6a060000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async)
socket(0x400000000010, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)

1.732084802s ago: executing program 8 (id=3854):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x8001]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7b3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8810) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=<r3=>0x0) (async)
r4 = getuid() (async)
r5 = gettid()
sendmsg$nl_generic(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x370, 0x23, 0x400, 0x70bd2b, 0x25dfdbfe, {0x10}, [@generic="989327953915dbb792f7cca84481602b1039b17b652d94f04acfb2fd4093da25911004313d00538ede187132d4e5404ad112bc9a38c271181cadfa58362650ea59bc64a79e3842b02ff99f55953227", @nested={0x9b, 0xd8, 0x0, 0x1, [@generic="ae16484850496d6d172b164fec25ef282e431a9cef2cd6aaa065faafa6d04cd6158336ac038d125a151b405c855d1426739842254a0c21bb224172a5cc94f849fc5ca397a84e220df23042a45979421f378e2e09d06ff4585953cd8a0615d587fed22f705ea6283a07a9076248e99539ca25f9b929b92d521cc2838b9a760c2661074d1c926f796a2ec8011853275c79cc38b0", @nested={0x4, 0x3}]}, @typed={0x8, 0x11e, 0x0, 0x0, @uid=r3}, @nested={0x1ad, 0x3f, 0x0, 0x1, [@generic="e65799c9c20b7b423ace480884", @nested={0x4, 0x10e}, @nested={0x4, 0x14e}, @nested={0x4, 0xd9}, @generic="f60b16753362967ab8769ffc42cabebd8b049541408fb2701951c6375159557f02e47573e3f9afa93f5c856736aec289caae745f2a0c0650ba3ff8708eec4cd34b455cb6fa97f1a1cc857e19048460a7a97d1ee6c2e497080182519c7d99a47bd8eabcb5a64d4e897544aa7dd8b97238d18c31c3c578b7b7091d7ae02618452fcb4886e49618031ae3608e45bb772e19f58e65feac1f6bf4a8daac", @generic="cc7a8202875d8304253051a537224b6bf07717b6dc89742824af8f12569fded74251ec9b59055431b5fb0c3c252568b45095fcf26d0d2887295780adab5bd6e1fc4300b99d5a7d40826bc290e735602e8f2edcef18ae28aa27e69684ef97527320484e1155f95c85716ad9305e482389a5d5348a33acaf493e4d0caf434741c42beacec4b510a66e24a2bbe803c478e4337b1013e8a7b0e44c", @generic="cdb83c1bef0d5bdc6a0f98ed7e1e6c673a51a7b43c372d07aa035433daa2d0c625d3af36ac4c3a74fe5ea7bd8a1862943067e4c6e9eee84502e7cbf53a74789e72ed9775a99f0e7c2d97be751f8704df32fd17d21cd24126", @nested={0x4, 0x6d}]}, @generic="7051ec00edf1d6093ae3411b9d8ff5b79f275e9f7371ddc651543b606b70102f56fe2e3a84161128cf4e35e87a27a2020db7799e9045074a1e21de0ac34e0e3091b422a064a60eb3a9f3746cbd6ae7655c9594aac83c5c1fe5e52293af7d3806a74d6e3dce7cef0bb8d752b3672a650cdbae4ce59eedf01ed5e957798cee8793d0b3df84a545f2d105d3d21241678e771c22b05e7104f18861c87cee933bcdba1e8d3d3d731e", @typed={0x8, 0x11e, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xc4, 0x0, 0x0, @pid=r5}]}, 0x370}, 0x1, 0x0, 0x0, 0xc000}, 0x4004014) (async)
rt_sigqueueinfo(r5, 0x8, &(0x7f0000000680)={0x31, 0x5, 0x55c}) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000700)={0x8, 'erspan0\x00', {'nicvf0\x00'}, 0xfff9})
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r2)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x248, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc4a, @mcast2, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1bc6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc0000000, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}}}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x2}, 0x40) (async)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x0, 0x588c, 0x1000, 0x3, 0x13c}, &(0x7f0000000b40)=[{0x0, 0x0, <r8=>0xffffffffffffffff, {0x0, 0xac46, 0x40, 0x2, 0x50, 0x0, r6}, <r9=>0xffffffffffffffff, 0x0, <r10=>0x0, <r11=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d11, 0x0, 0x3, 0x1dc}, <r12=>0xffffffffffffffff}, {0x0, 0x0, <r13=>0xffffffffffffffff, {0x0, 0x8a1f, 0x20, 0x0, 0xa}, <r14=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22c7, 0x800, 0x1, 0x70}, <r15=>0xffffffffffffffff, 0x0, <r16=>0x0, <r17=>0x0}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, <r18=>0x0, '\x00', {0x0, 0xeac, 0x0, &(0x7f0000000dc0)=@buf_1k="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"}}, &(0x7f0000001e40))
io_uring_enter(r12, 0x3ebd, 0x1f6e, 0x10, &(0x7f0000001e80)={[0x7]}, 0x8) (async)
r19 = syz_ublk_setup_io_uring(0x1934, &(0x7f0000001ec0)={0x0, 0xb2cb, 0x2000, 0x0, 0x217, 0x0, r9}, &(0x7f0000001f40)=<r20=>0x0, &(0x7f0000001f80), &(0x7f0000001fc0))
r21 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002000), 0x2000, 0x0)
syz_io_uring_submit(r20, r16, r17, &(0x7f0000002080)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x2, &(0x7f0000002040)=[r13, r14, r6, r21, r15, r13, 0xffffffffffffffff, r0], 0x8, 0x0, 0x1, {0x0, r18}}) (async)
r22 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), r2) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002180)={@remote, <r23=>0x0}, &(0x7f00000021c0)=0x14)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000002340)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xe4, r22, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3c}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r23}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24008050}, 0x20004014) (async)
r24 = syz_ublk_setup_io_uring(0x521d, &(0x7f0000002380)={0x0, 0x1531, 0x20, 0x1, 0x319, 0x0, r14}, &(0x7f0000002400), &(0x7f0000002440), &(0x7f0000002480))
syz_ublk_setup_queues(r13, 0x0, &(0x7f00000024c0)={0x0, 0x28af, 0x4000, 0x3, 0x37c, 0x0, r9}, &(0x7f0000002540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58f4, 0x100, 0x0, 0x272}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa11d, 0x2, 0x2, 0x38c, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2709, 0x200, 0x1, 0x2a7, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd996, 0x4000, 0x3, 0x246, 0x0, r19}, 0xffffffffffffffff, 0x0, 0x0, <r25=>0x0}], 0x4, &(0x7f00000037c0)={0x2e, 0x42, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xca49}, 0x0, r18, '\x00', {0x4, 0x6fd, 0x0, &(0x7f00000027c0)=@buf_512="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"}}, &(0x7f0000003840)) (async)
syz_ublk_add_dev(0xffffffffffffffff, r20, r16, r11, &(0x7f00000038c0)={0x2e, 0x10, 0x0, <r26=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003880)=@new_dev={0x4, 0x309, 0x0, 0x0, 0x1000, 0xffffffff, r5}}}, &(0x7f0000003940)) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003980)={<r27=>0x0}, &(0x7f00000039c0)=0xc)
syz_ublk_add_dev(r24, r20, r10, r25, &(0x7f0000003a40)={0x2e, 0x60, 0x0, r26, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xbd, 0x0, r18, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003a00)=@new_dev={0x1, 0xdca, 0x0, 0x0, 0x1000, 0xffffffff, r27, 0x0, 0x40}}}, &(0x7f0000003ac0)) (async)
r28 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003b00), 0x10000, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000003b40)={0xc, 0x0, <r29=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r28, 0x3b85, &(0x7f0000003b80)={0x28, 0xc, r29, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8001020}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

1.73181882s ago: executing program 9 (id=3855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000100007800c000180abd3a489a62d415405000500020000000500010006"], 0x5c}}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x7, @sliced={0xfff3, [0x4, 0x5, 0xfffb, 0x6, 0x1, 0x9, 0x7, 0x0, 0x3, 0x9, 0x2, 0x0, 0x0, 0x3, 0x6d00, 0x1ca0, 0x7ff, 0x101, 0x6, 0x9, 0x9, 0x45e5, 0x2, 0x1, 0x3, 0x10, 0x2, 0xf001, 0x9, 0xab, 0xb7, 0x2, 0x5, 0xfff, 0x7, 0x9434, 0xffff, 0xfc00, 0xb8, 0xada4, 0x101, 0x5070, 0x8, 0x8, 0x7f, 0x5, 0x7, 0x8]}})

1.59266262s ago: executing program 9 (id=3856):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r1, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0) (async)
ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000140)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='smb3\x00', 0x2000000, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0/0.1,port=20000,nodfs,username=root,passworD=root\x00') (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (async, rerun: 64)
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async, rerun: 64)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

814.53288ms ago: executing program 8 (id=3857):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x20000, 0x92, 0x2}, 0x18)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000030428bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008080)

675.016412ms ago: executing program 9 (id=3858):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1, <r0=>0x0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
close(r1)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="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", 0x1d8, 0xffffffffffffffff) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) (async)
ioctl$TUNGETVNETLE(r2, 0x8004745a, &(0x7f0000000180)) (async)
r3 = open(&(0x7f00009e1000)='./file1\x00', 0x8160, 0x0)
fcntl$setlease(r3, 0x400, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x560, 0xf0, 0x600, 0x448, 0xf0, 0x210, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, 0x0, {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xff], [0x0, 0xff, 0x0, 0xff000000], 'tunl0\x00', 'vcan0\x00', {0xff}, {}, 0x73, 0xe9, 0x7}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 'tunl0\x00', {0x71}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff0000ff], [0xff000000, 0xff000000, 0xff000000], 'wlan0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x1, 0x1, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3d, 0x1, 0x4}}}, {{@ipv6={@private2, @private0, [0xffffffff, 0xffffffff, 0x0, 0xff], [0x0, 0x0, 0xff000000, 0xff], 'macvlan1\x00', 'ip6gre0\x00', {}, {}, 0x32, 0x9e, 0x2, 0x50}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@empty, 0x23, 0x31, 0x48}}}, {{@ipv6={@mcast1, @mcast1, [0xff000000, 0xff, 0xffffff00, 0xff], [0x0, 0x0, 0xffffffff], 'ip6_vti0\x00', 'pim6reg1\x00', {}, {0xff}, 0x87, 0xca, 0x4, 0x60}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x28}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3a, 0x32, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1240, 0x0) (async)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap$snddsp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x4010, r3, 0xb000) (async)
ioctl$KDGKBDIACR(r4, 0x4bfb, &(0x7f0000000640)=""/4096)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async)
r5 = add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) (async, rerun: 32)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r5) (rerun: 32)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r5) (async)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
getpriority(0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

512.702323ms ago: executing program 7 (id=3859):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

512.352027ms ago: executing program 8 (id=3860):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f0000000080)={0x7, 0x0, 0x4f, &(0x7f0000000000)="1f31a676f270479c09c6e73b612f6c582436010a05ec250dbe0a6932fe411816d5eeb38e956d0f349c5c2b5afe9ab7068533b6da069c01a935b9ad817e75e5cb4042333fe455d3e3db8cc27e1357f1"})
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x67, 0x0, 0x4d, 0x5f})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async)
ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f0000000080)={0x7, 0x0, 0x4f, &(0x7f0000000000)="1f31a676f270479c09c6e73b612f6c582436010a05ec250dbe0a6932fe411816d5eeb38e956d0f349c5c2b5afe9ab7068533b6da069c01a935b9ad817e75e5cb4042333fe455d3e3db8cc27e1357f1"}) (async)
syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x67, 0x0, 0x4d, 0x5f}) (async)

444.632574ms ago: executing program 8 (id=3861):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async, rerun: 64)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) (async, rerun: 64)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) (rerun: 64)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x100, r3}, 0x0) (async, rerun: 64)
close(r3) (async, rerun: 64)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x1a8, 0x440, 0x0, 0x1a8, 0x288, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @loopback, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) (async, rerun: 32)
close(r2) (rerun: 32)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x202, 0x6a) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, 0x0, 0x0)

292.53406ms ago: executing program 7 (id=3862):
fsopen(&(0x7f0000000580)='debugfs\x00', 0x1) (async)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) (async)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000340)={0x23, 0x1, 0xc, 0x87}) (async, rerun: 32)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000000c0))

292.244612ms ago: executing program 7 (id=3863):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'\x00', {0x2, 0x0, @local}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x715801, 0x1c0, 0x22}, 0x18)
symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00')

206.494607ms ago: executing program 5 (id=3864):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

206.200745ms ago: executing program 7 (id=3865):
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl(r3, 0xae60, 0x0)
r4 = eventfd(0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xfffb, 0x9, 0x6, 0x8000}, {0x7fff, 0xc3, 0x1, 0x4}]}, 0x10)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000001200)={r0, 0x4, 0x2, r4})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x2d0, 0x1007, 0x7, 0x142}})
close_range(r6, 0xffffffffffffffff, 0x0)

130.481349ms ago: executing program 5 (id=3866):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000000)='./config/cluster/mycluster/node/mynode/local\x00', 0xdf) (async)
mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode\x00', 0x101000, 0x0)
unlink(&(0x7f0000000080)='./config/cluster/mycluster/node/mynode\x00')

74.492758ms ago: executing program 7 (id=3867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004885)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f0001"], 0x90}}, 0x4)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbdc, {0x0, 0x0, 0x0, 0x0, 0x418, 0x1400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x20000000)

72.771084ms ago: executing program 5 (id=3868):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000010"], 0x1c}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000010"], 0x1c}}, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10)
sendmsg$xdp(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x0, 0x4, 0xb69, 0x6, 0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000000)

9.183601ms ago: executing program 5 (id=3869):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc646, 0x1b6)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x33, 0xaa840)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2c7, 0x0, 0x0, 0x0, 0x1, "00000000000000000000000000000000000000000012000000000000007f00", "00000000000000000000000000000000000000000000000000000000000000000000f9ffffff000000000000000000000000000000000000dfffffff00", "00800000001e00000000000000000000000000000000002fb900", [0x4]})

8.847986ms ago: executing program 7 (id=3870):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400090000bd7000fcdbdb25021f00ff", @ANYRES32, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) (async)
write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17) (async)
close(r0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) (async)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400090000bd7000fcdbdb25021f00ff", @ANYRES32, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async)

231.086µs ago: executing program 9 (id=3871):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
creat(0x0, 0x104)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)

0s ago: executing program 5 (id=3872):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'trylock', ' ', 'mem'}, 0xc)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="28e3ff000c0601010000000000000000010000000000797a3100"/40], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80800)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

  419.009277][T19270] macvlan2: entered promiscuous mode
[  419.009292][T19270] macvlan2: entered allmulticast mode
[  419.009813][T19270] bond3: entered promiscuous mode
[  419.010164][T19270] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  419.021373][T19270] bond3: left promiscuous mode
[  419.270746][T19280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  419.270967][T19280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.314909][ T5824] cp2112 0003:10C4:EA90.0004: hidraw1: USB HID v0.00 Device [syz0] on syz0
[  419.371886][T19288] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3391'.
[  419.403094][T19292] fuse: fd is not a fuse device
[  419.504993][   T43] audit: type=1400 audit(1789776886.599:41382): avc:  denied  { create } for  pid=19276 comm="syz.1.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  419.506691][T19299] fuse: fd is not a fuse device
[  419.522430][ T5824] cp2112 0003:10C4:EA90.0004: error requesting version
[  419.524391][ T5824] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -5
[  419.729683][T19316] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  419.823162][T19323] ip6t_frag: unknown flags 6
[  419.979748][T19331] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  420.108326][T19337] netlink: 'syz.5.3404': attribute type 39 has an invalid length.
[  420.135317][T19342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3405'.
[  420.161074][T19344] netlink: 'syz.5.3404': attribute type 39 has an invalid length.
[  420.209201][T19347] ip_tables: iptables: counters copy to user failed while replacing table
[  420.283560][T19351] netlink: 'syz.5.3409': attribute type 10 has an invalid length.
[  420.283712][T19351] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.286182][T19351] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.286500][T19352] netlink: 'syz.5.3409': attribute type 10 has an invalid length.
[  420.419158][T19358] binder: BINDER_SET_CONTEXT_MGR already set
[  420.419174][T19358] binder: 19357:19358 ioctl 40046207 0 returned -16
[  420.597764][T19370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3417'.
[  420.597789][T19370] openvswitch: netlink: Key type 263 is out of range max 32
[  420.637646][   T43] audit: type=1400 audit(1789776887.729:41383): avc:  denied  { append } for  pid=19371 comm="syz.3.3418" name="video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  420.672723][ T8682] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  420.733119][T19381] overlayfs: missing 'lowerdir'
[  420.818457][T19391] 9pnet_virtio: no channels available for device syz
[  420.831323][ T8682] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  420.832131][ T8682] usb 6-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  420.832154][ T8682] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  420.833783][ T8682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.833797][ T8682] usb 6-1: Product: syz
[  420.833806][ T8682] usb 6-1: Manufacturer: syz
[  420.833814][ T8682] usb 6-1: SerialNumber: syz
[  421.010856][ T1481] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  421.041583][ T8682] usb 6-1: USB disconnect, device number 37
[  421.503283][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3427'.
[  421.503298][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'.
[  421.503313][T19398] netlink: 'syz.3.3427': attribute type 20 has an invalid length.
[  421.509423][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3427'.
[  421.509436][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'.
[  421.509450][T19398] netlink: 'syz.3.3427': attribute type 20 has an invalid length.
[  421.635776][T19408] syzkaller0: entered promiscuous mode
[  421.635839][T19408] syzkaller0: entered allmulticast mode
[  421.637341][T19408] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  421.699929][T19419] loop5: detected capacity change from 0 to 7
[  421.703496][T19419] Dev loop5: unable to read RDB block 7
[  421.703527][T19419]  loop5: unable to read partition table
[  421.703676][T19419] loop5: partition table beyond EOD, truncated
[  421.703692][T19419] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  421.787452][   T43] audit: type=1400 audit(1789776888.879:41384): avc:  denied  { write } for  pid=15155 comm="syz-executor" name="413" dev="tmpfs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  421.787505][   T43] audit: type=1400 audit(1789776888.879:41385): avc:  denied  { write } for  pid=15155 comm="syz-executor" name="413" dev="tmpfs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  421.787547][   T43] audit: type=1400 audit(1789776888.879:41386): avc:  denied  { write } for  pid=15155 comm="syz-executor" name="413" dev="tmpfs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  421.787588][   T43] audit: type=1400 audit(1789776888.879:41387): avc:  denied  { write } for  pid=15155 comm="syz-executor" name="413" dev="tmpfs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  421.835085][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3436'.
[  421.844164][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3436'.
[  421.964277][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.964346][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.964400][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.964447][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.964496][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.965128][T19437] 9pnet_virtio: no channels available for device syz
[  421.967663][T19435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.967931][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.968081][T19435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.974799][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.974850][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.974880][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.974909][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.974939][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.974966][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975007][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975056][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975105][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975159][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975210][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975263][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975314][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975367][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975419][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975473][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975524][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975574][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975628][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975683][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.975752][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.985804][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.985864][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.985919][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.985971][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986022][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986074][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986130][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986177][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986228][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986274][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986302][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986329][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986356][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986383][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986409][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986436][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986462][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986488][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986514][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986541][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986567][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986593][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986618][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986644][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986671][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986702][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986729][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986766][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986792][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986817][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986844][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986870][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986897][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986923][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.986964][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.987011][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.987063][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.987099][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.987126][ T5092] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  422.016992][T19443] binder: BINDER_SET_CONTEXT_MGR already set
[  422.017007][T19443] binder: 19442:19443 ioctl 40046207 0 returned -16
[  422.026709][T19444] netlink: 'syz.1.3437': attribute type 1 has an invalid length.
[  422.066914][T19441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.067287][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.075258][T19444] bond8: entered promiscuous mode
[  422.075669][T19444] 8021q: adding VLAN 0 to HW filter on device bond8
[  422.290822][ T8682] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  422.370344][   T43] audit: type=1400 audit(1789776889.459:41388): avc:  denied  { getattr } for  pid=19463 comm="syz.3.3447" name="/" dev="failfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  422.472458][ T8682] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  422.473937][ T8682] usb 5-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  422.473968][ T8682] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  422.475921][ T8682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.475935][ T8682] usb 5-1: Product: syz
[  422.475943][ T8682] usb 5-1: Manufacturer: syz
[  422.475951][ T8682] usb 5-1: SerialNumber: syz
[  422.684835][ T8682] usb 5-1: USB disconnect, device number 47
[  422.899821][   T43] audit: type=1400 audit(1789776889.989:41389): avc:  denied  { accept } for  pid=19496 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  422.924186][   T43] audit: type=1400 audit(1789776890.019:41390): avc:  denied  { write } for  pid=19495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.160806][T19516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  423.160823][T19516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  423.161304][T19516] vhci_hcd vhci_hcd.0: Device attached
[  423.184176][ T5092] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  423.225277][T19519] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0
[  423.228385][ T6167] vhci_hcd vhci_hcd.1: stop threads
[  423.228398][ T6167] vhci_hcd vhci_hcd.1: release socket
[  423.228409][ T6167] vhci_hcd vhci_hcd.1: disconnect device
[  423.340994][T19532] wg2 speed is unknown, defaulting to 1000
[  423.391137][T10506] net_ratelimit: 2 callbacks suppressed
[  423.391153][T10506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.393599][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.834032][T19551] binder: BINDER_SET_CONTEXT_MGR already set
[  423.834045][T19551] binder: 19550:19551 ioctl 40046207 0 returned -16
[  423.884302][   T43] kauditd_printk_skb: 2 callbacks suppressed
[  423.884316][   T43] audit: type=1400 audit(1789776890.969:41393): avc:  denied  { write } for  pid=19543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.993966][   T43] audit: type=1400 audit(1789776891.089:41394): avc:  denied  { write } for  pid=19559 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.092912][T13358] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  424.100618][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'.
[  424.103852][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.103864][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.117992][   T43] audit: type=1400 audit(1789776891.209:41395): avc:  denied  { write } for  pid=19565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.172621][   T43] audit: type=1400 audit(1789776891.269:41396): avc:  denied  { write } for  pid=19573 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.246252][T13358] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  424.248739][T13358] usb 5-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  424.249105][T13358] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  424.256723][T19581] netlink: 'syz.1.3474': attribute type 39 has an invalid length.
[  424.266975][T13358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.267000][T13358] usb 5-1: Product: syz
[  424.267015][T13358] usb 5-1: Manufacturer: syz
[  424.267029][T13358] usb 5-1: SerialNumber: syz
[  424.341849][T19592] overlayfs: failed to clone upperpath
[  424.346682][T19592] overlayfs: failed to clone upperpath
[  424.442802][T19598] binder: 19597:19598 ioctl c0306201 200000000080 returned -14
[  424.443935][T19598] binder: 19597:19598 ioctl c0306201 2000000003c0 returned -14
[  424.447860][   T43] audit: type=1400 audit(1789776891.539:41397): avc:  denied  { firmware_load } for  pid=19597 comm="syz.3.3480" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  424.487928][   T58] usb 5-1: USB disconnect, device number 48
[  424.553369][   T43] audit: type=1400 audit(1789776891.649:41398): avc:  denied  { write } for  pid=19603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.597489][   T43] audit: type=1400 audit(1789776891.689:41399): avc:  denied  { write } for  pid=19608 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.857873][T19613] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP)
[  425.382846][   T43] audit: type=1400 audit(1789776892.479:41400): avc:  denied  { getopt } for  pid=19648 comm="syz.5.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  425.568915][T19661] binder: BINDER_SET_CONTEXT_MGR already set
[  425.568932][T19661] binder: 19660:19661 ioctl 40046207 0 returned -16
[  425.634634][T19668] xt_hashlimit: size too large, truncated to 1048576
[  425.674500][T19672] FAULT_INJECTION: forcing a failure.
[  425.674500][T19672] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  425.674525][T19672] CPU: 3 UID: 0 PID: 19672 Comm: syz.0.3503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.674541][T19672] Tainted: [L]=SOFTLOCKUP
[  425.674546][T19672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  425.674554][T19672] Call Trace:
[  425.674558][T19672]  <TASK>
[  425.674563][T19672]  dump_stack_lvl+0x100/0x190
[  425.674600][T19672]  should_fail_ex.cold+0x5/0xa
[  425.674615][T19672]  ? prepare_alloc_pages+0x16d/0x5b0
[  425.674635][T19672]  should_fail_alloc_page+0xeb/0x140
[  425.674652][T19672]  prepare_alloc_pages+0x1f0/0x5b0
[  425.674672][T19672]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  425.674687][T19672]  ? lock_acquire+0x1d1/0x380
[  425.674699][T19672]  ? page_table_check_set+0x11d/0x580
[  425.674716][T19672]  ? find_held_lock+0x2b/0x80
[  425.674732][T19672]  ? page_table_check_set+0x30f/0x580
[  425.674747][T19672]  ? page_table_check_set+0x30f/0x580
[  425.674764][T19672]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  425.674776][T19672]  ? page_table_check_set+0x31e/0x580
[  425.674794][T19672]  ? __page_table_check_ptes_set+0x1d5/0x530
[  425.674811][T19672]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  425.674828][T19672]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  425.674846][T19672]  ? xas_find+0x32c/0x8e0
[  425.674869][T19672]  ? find_held_lock+0x2b/0x80
[  425.674885][T19672]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  425.674900][T19672]  ? policy_nodemask+0xed/0x4f0
[  425.674918][T19672]  alloc_pages_mpol+0x201/0x550
[  425.674935][T19672]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  425.674964][T19672]  folio_alloc_mpol_noprof+0x36/0x260
[  425.674996][T19672]  vma_alloc_folio_noprof+0xed/0x1d0
[  425.675020][T19672]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  425.675051][T19672]  do_anonymous_page+0xac9/0x2050
[  425.675084][T19672]  ? __pfx_do_anonymous_page+0x10/0x10
[  425.675106][T19672]  ? rcu_read_unlock+0x2d/0xb0
[  425.675129][T19672]  ? rcu_read_unlock+0x2d/0xb0
[  425.675156][T19672]  ? __pte_offset_map+0x179/0x310
[  425.675185][T19672]  __handle_mm_fault+0x1ff3/0x2f60
[  425.675216][T19672]  ? lock_vma_under_rcu+0x11d/0x590
[  425.675242][T19672]  ? __pfx___handle_mm_fault+0x10/0x10
[  425.675273][T19672]  ? lock_vma_under_rcu+0x17c/0x590
[  425.675308][T19672]  handle_mm_fault+0x363/0xa20
[  425.675359][T19672]  do_user_addr_fault+0x59c/0x12f0
[  425.675388][T19672]  exc_page_fault+0x6f/0xd0
[  425.675413][T19672]  asm_exc_page_fault+0x26/0x30
[  425.675433][T19672] RIP: 0033:0x7fe1ee65f6cb
[  425.675448][T19672] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  425.675465][T19672] RSP: 002b:00007fe1ef6a9fa0 EFLAGS: 00010206
[  425.675480][T19672] RAX: 0000000000000000 RBX: 00007fe1eea25fa0 RCX: 0000000000000000
[  425.675493][T19672] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000000c0
[  425.675505][T19672] RBP: 00007fe1ef6ab090 R08: 0000000000000000 R09: 0000000000000000
[  425.675518][T19672] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001
[  425.675529][T19672] R13: 00007fe1eea26038 R14: 00007fe1eea25fa0 R15: 00007fff36a6c048
[  425.675550][T19672]  </TASK>
[  425.675562][T19672] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  425.845297][   T43] audit: type=1400 audit(1789776892.939:41401): avc:  denied  { mounton } for  pid=19676 comm="syz.0.3505" path="/" dev="tmpfs" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  425.983613][T19691] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3509'.
[  426.144551][T19702] FAULT_INJECTION: forcing a failure.
[  426.144551][T19702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.144615][T19702] CPU: 3 UID: 0 PID: 19702 Comm: syz.1.3514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.144632][T19702] Tainted: [L]=SOFTLOCKUP
[  426.144636][T19702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  426.144644][T19702] Call Trace:
[  426.144648][T19702]  <TASK>
[  426.144653][T19702]  dump_stack_lvl+0x100/0x190
[  426.144675][T19702]  should_fail_ex.cold+0x5/0xa
[  426.144691][T19702]  _copy_from_user+0x2e/0xd0
[  426.144705][T19702]  move_addr_to_kernel+0x65/0x170
[  426.144730][T19702]  __sys_sendto+0x1b8/0x4e0
[  426.144744][T19702]  ? __pfx___sys_sendto+0x10/0x10
[  426.144759][T19702]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  426.144783][T19702]  __x64_sys_sendto+0xe0/0x1c0
[  426.144795][T19702]  ? do_syscall_64+0xae/0x790
[  426.144811][T19702]  ? lockdep_hardirqs_on+0x7d/0x110
[  426.144828][T19702]  do_syscall_64+0x123/0x790
[  426.144845][T19702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.144857][T19702] RIP: 0033:0x7fbe6eb5e98e
[  426.144867][T19702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  426.144879][T19702] RSP: 002b:00007fbe6fa90e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  426.144891][T19702] RAX: ffffffffffffffda RBX: 00007fbe6fa926c0 RCX: 00007fbe6eb5e98e
[  426.144899][T19702] RDX: 0000000000000020 RSI: 00007fbe6fa91000 RDI: 0000000000000003
[  426.144906][T19702] RBP: 0000000000000000 R08: 00007fbe6fa90f04 R09: 000000000000000c
[  426.144913][T19702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  426.144920][T19702] R13: 00007fbe6fa90f58 R14: 00007fbe6fa91000 R15: 0000000000000000
[  426.144934][T19702]  </TASK>
[  426.228263][T19701] veth1_virt_wifi: entered promiscuous mode
[  426.228286][T19701] veth1_virt_wifi: entered allmulticast mode
[  426.450320][T19717] /dev/sg0: Can't lookup blockdev
[  426.450631][T19715] /dev/sg0: Can't lookup blockdev
[  426.659867][T19729] FAULT_INJECTION: forcing a failure.
[  426.659867][T19729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.659902][T19729] CPU: 2 UID: 0 PID: 19729 Comm: syz.0.3522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.659928][T19729] Tainted: [L]=SOFTLOCKUP
[  426.659935][T19729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  426.659945][T19729] Call Trace:
[  426.659950][T19729]  <TASK>
[  426.659955][T19729]  dump_stack_lvl+0x100/0x190
[  426.659976][T19729]  should_fail_ex.cold+0x5/0xa
[  426.660015][T19729]  _copy_from_user+0x2e/0xd0
[  426.660029][T19729]  load_msg+0x253/0x4a0
[  426.660046][T19729]  do_msgsnd+0x1ad/0x1790
[  426.660062][T19729]  ? clockevents_program_event+0x1ef/0x820
[  426.660082][T19729]  ? __pfx_do_msgsnd+0x10/0x10
[  426.660111][T19729]  ? find_held_lock+0x2b/0x80
[  426.660127][T19729]  ? __might_fault+0xc5/0x140
[  426.660143][T19729]  ? __might_fault+0xc5/0x140
[  426.660170][T19729]  ? __x64_sys_msgsnd+0xe5/0x130
[  426.660192][T19729]  __x64_sys_msgsnd+0xe5/0x130
[  426.660219][T19729]  do_syscall_64+0x123/0x790
[  426.660250][T19729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.660271][T19729] RIP: 0033:0x7fe1ee79e159
[  426.660286][T19729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.660303][T19729] RSP: 002b:00007fe1ef6ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  426.660323][T19729] RAX: ffffffffffffffda RBX: 00007fe1eea25fa0 RCX: 00007fe1ee79e159
[  426.660336][T19729] RDX: 0000000000002000 RSI: 0000200000000940 RDI: 0000000000000000
[  426.660347][T19729] RBP: 00007fe1ee83506b R08: 0000000000000000 R09: 0000000000000000
[  426.660355][T19729] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000
[  426.660362][T19729] R13: 00007fe1eea26038 R14: 00007fe1eea25fa0 R15: 00007fff36a6c048
[  426.660377][T19729]  </TASK>
[  426.953978][T19744] 9pnet_virtio: no channels available for device syz
[  427.069584][  T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.826770][T19755] CIFS: enabling forcegid mount option implicitly because gid= option is specified
[  427.826813][T19755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  427.986980][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'.
[  427.987004][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'.
[  428.013626][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013691][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013730][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013769][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013807][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013852][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013891][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013931][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.013969][T19764] netlink: 'syz.5.3534': attribute type 3 has an invalid length.
[  428.196037][T10522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.305385][T19787] loop0: detected capacity change from 0 to 1
[  428.379292][T19787] ldm_validate_privheads(): Disk read failed.
[  428.379357][T19787]  loop0:
[  428.379381][T19787] loop0: partition table partially beyond EOD, truncated
[  428.429876][T19790] tipc: Cannot configure node identity twice
[  428.431270][T19791] tipc: Cannot configure node identity twice
[  428.550132][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3544'.
[  428.680579][   T43] audit: type=1400 audit(1789776895.769:41402): avc:  denied  { ioctl } for  pid=19799 comm="syz.5.3544" path="socket:[100205]" dev="sockfs" ino=100205 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  428.687359][T19812] FAULT_INJECTION: forcing a failure.
[  428.687359][T19812] name failslab, interval 1, probability 0, space 0, times 0
[  428.687397][T19812] CPU: 0 UID: 0 PID: 19812 Comm: syz.1.3545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  428.687427][T19812] Tainted: [L]=SOFTLOCKUP
[  428.687435][T19812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  428.687447][T19812] Call Trace:
[  428.687455][T19812]  <TASK>
[  428.687462][T19812]  dump_stack_lvl+0x100/0x190
[  428.687499][T19812]  should_fail_ex.cold+0x5/0xa
[  428.687528][T19812]  should_failslab+0xc2/0x120
[  428.687558][T19812]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  428.687584][T19812]  ? kstrdup_const+0x63/0x80
[  428.687616][T19812]  kstrdup+0x51/0xe0
[  428.687647][T19812]  kstrdup_const+0x63/0x80
[  428.687677][T19812]  kvasprintf_const+0x10f/0x1a0
[  428.687703][T19812]  kobject_set_name_vargs+0x5a/0x140
[  428.687729][T19812]  dev_set_name+0xc7/0x100
[  428.687758][T19812]  ? __pfx_dev_set_name+0x10/0x10
[  428.687785][T19812]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  428.687809][T19812]  ? lockdep_init_map_type+0x5c/0x250
[  428.687830][T19812]  ? __init_waitqueue_head+0xca/0x150
[  428.687856][T19812]  netdev_register_kobject+0xc5/0x410
[  428.687890][T19812]  register_netdevice+0x15b6/0x25a0
[  428.687919][T19812]  ? __pfx_register_netdevice+0x10/0x10
[  428.687974][T19812]  ip6_mroute_setsockopt+0x69e/0x35b0
[  428.688035][T19812]  ? find_held_lock+0x2b/0x80
[  428.688067][T19812]  ? __pfx_ip6_mroute_setsockopt+0x10/0x10
[  428.688092][T19812]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  428.688121][T19812]  ? __lock_acquire+0x5c0/0x1f40
[  428.688142][T19812]  ? trace_sched_exit_tp+0x120/0x160
[  428.688171][T19812]  ? __lock_acquire+0x5c0/0x1f40
[  428.688207][T19812]  ? __might_fault+0xc5/0x140
[  428.688244][T19812]  ? do_ipv6_setsockopt+0x543/0x44a0
[  428.688267][T19812]  do_ipv6_setsockopt+0x543/0x44a0
[  428.688297][T19812]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  428.688320][T19812]  ? avc_has_perm_noaudit+0x56/0x3b0
[  428.688349][T19812]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  428.688374][T19812]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  428.688405][T19812]  ? avc_has_perm_noaudit+0x145/0x3b0
[  428.688434][T19812]  ? avc_has_perm+0x135/0x1e0
[  428.688460][T19812]  ? __pfx_avc_has_perm+0x10/0x10
[  428.688489][T19812]  ? futex_wait+0x11e/0x370
[  428.688512][T19812]  ? sock_has_perm+0x25a/0x2f0
[  428.688542][T19812]  ? __pfx_sock_has_perm+0x10/0x10
[  428.688575][T19812]  ? ipv6_setsockopt+0xcb/0x170
[  428.688597][T19812]  ipv6_setsockopt+0xcb/0x170
[  428.688622][T19812]  rawv6_setsockopt+0xee/0x5a0
[  428.688642][T19812]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  428.688664][T19812]  ? selinux_socket_setsockopt+0x6a/0x80
[  428.688682][T19812]  ? sock_common_setsockopt+0x2e/0xf0
[  428.688707][T19812]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  428.688733][T19812]  do_sock_setsockopt+0xf3/0x1d0
[  428.688762][T19812]  __sys_setsockopt+0x195/0x220
[  428.688790][T19812]  __x64_sys_setsockopt+0xbd/0x160
[  428.688812][T19812]  ? do_syscall_64+0xae/0x790
[  428.688841][T19812]  ? lockdep_hardirqs_on+0x7d/0x110
[  428.688868][T19812]  do_syscall_64+0x123/0x790
[  428.688898][T19812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.688920][T19812] RIP: 0033:0x7fbe6eb9e159
[  428.688939][T19812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.688959][T19812] RSP: 002b:00007fbe6fa92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  428.688981][T19812] RAX: ffffffffffffffda RBX: 00007fbe6ee25fa0 RCX: 00007fbe6eb9e159
[  428.688996][T19812] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000007
[  428.689009][T19812] RBP: 00007fbe6ec3506b R08: 000000000000000c R09: 0000000000000000
[  428.689022][T19812] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  428.689036][T19812] R13: 00007fbe6ee26038 R14: 00007fbe6ee25fa0 R15: 00007ffe7d65a958
[  428.689065][T19812]  </TASK>
[  428.895875][T19825] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1
[  428.895895][T19825] Unsupported pkey algo: 106
[  428.905416][T19825] syzkaller1: entered promiscuous mode
[  428.905439][T19825] syzkaller1: entered allmulticast mode
[  429.051612][T19834] fuse: fd is not a fuse device
[  429.142724][T10519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.335897][T19850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  429.361509][T19852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  429.629075][T19862] dvmrp6: entered allmulticast mode
[  429.673722][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.739561][T19866] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.739616][T19866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.739852][T19866] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.739941][T19866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.747845][T19866] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.796530][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.805479][T19872] program syz.1.3565 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  429.805541][T19872] ata1.00: invalid command format 9
[  429.805859][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3566'.
[  429.808933][T19872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3565'.
[  429.813506][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.823030][T19866] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.828498][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.831268][T19866] 8021q: adding VLAN 0 to HW filter on device bond3
[  429.837167][T19866] 8021q: adding VLAN 0 to HW filter on device bond4
[  429.846556][T19866] 8021q: adding VLAN 0 to HW filter on device bond5
[  429.849369][T19866] 8021q: adding VLAN 0 to HW filter on device bond6
[  429.859369][T19874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'.
[  429.907135][T19870] team0: left allmulticast mode
[  429.907152][T19870] team_slave_0: left allmulticast mode
[  429.907162][T19870] team_slave_1: left allmulticast mode
[  429.912362][T19870] veth0_to_bond: left allmulticast mode
[  429.964046][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.966806][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.031661][T19879] overlay: Unknown parameter 'userxattr:/'
[  430.059510][   T43] kauditd_printk_skb: 2 callbacks suppressed
[  430.059523][   T43] audit: type=1400 audit(1789776897.149:41405): avc:  denied  { read } for  pid=12332 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059551][   T43] audit: type=1400 audit(1789776897.149:41406): avc:  denied  { open } for  pid=12332 comm="syz-executor" path="/487/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059573][   T43] audit: type=1400 audit(1789776897.149:41407): avc:  denied  { read } for  pid=12332 comm="syz-executor" name="instances" dev="tracefs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059596][   T43] audit: type=1400 audit(1789776897.149:41408): avc:  denied  { write } for  pid=12332 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059617][   T43] audit: type=1400 audit(1789776897.149:41409): avc:  denied  { read } for  pid=12332 comm="syz-executor" name="instances" dev="tracefs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059641][   T43] audit: type=1400 audit(1789776897.149:41410): avc:  denied  { setattr } for  pid=12332 comm="syz-executor" path="/487/trace/instances" dev="tracefs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059663][   T43] audit: type=1400 audit(1789776897.149:41411): avc:  denied  { write } for  pid=12332 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.059684][   T43] audit: type=1400 audit(1789776897.149:41412): avc:  denied  { read } for  pid=12332 comm="syz-executor" name="instances" dev="tracefs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.062337][   T43] audit: type=1400 audit(1789776897.159:41413): avc:  denied  { write } for  pid=12332 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.062495][   T43] audit: type=1400 audit(1789776897.159:41414): avc:  denied  { read } for  pid=12332 comm="syz-executor" name="instances" dev="tracefs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  430.081633][ T1481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.171188][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.421823][T10519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.515467][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  430.525260][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  430.526959][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  430.528409][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  430.528999][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  430.853979][T19889] wg2 speed is unknown, defaulting to 1000
[  430.987828][T19916] fuse: fd is not a fuse device
[  431.110517][T19889] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.110600][T19889] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.117314][T19889] bridge_slave_0: entered allmulticast mode
[  431.118190][T19889] bridge_slave_0: entered promiscuous mode
[  431.120036][T19889] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.120098][T19889] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.120158][T19889] bridge_slave_1: entered allmulticast mode
[  431.121187][T19889] bridge_slave_1: entered promiscuous mode
[  431.135777][T19889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.137263][T19889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.153574][T19889] team0: Port device team_slave_0 added
[  431.154997][T19889] team0: Port device team_slave_1 added
[  431.166548][T19889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.166559][T19889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.166573][T19889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.170111][T19889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.170124][T19889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.170146][T19889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.195866][T19889] hsr_slave_0: entered promiscuous mode
[  431.196348][T19889] hsr_slave_1: entered promiscuous mode
[  431.354493][T19931] syz.3.3583: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  431.354544][T19931] CPU: 0 UID: 0 PID: 19931 Comm: syz.3.3583 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  431.354561][T19931] Tainted: [L]=SOFTLOCKUP
[  431.354566][T19931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  431.354574][T19931] Call Trace:
[  431.354579][T19931]  <TASK>
[  431.354584][T19931]  dump_stack_lvl+0x100/0x190
[  431.354606][T19931]  warn_alloc.cold+0x9e/0xb2
[  431.354619][T19931]  ? __pfx_warn_alloc+0x10/0x10
[  431.354640][T19931]  ? policy_nodemask+0xed/0x4f0
[  431.354658][T19931]  ? alloc_pages_mpol+0x260/0x550
[  431.354674][T19931]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  431.354689][T19931]  ? find_held_lock+0x2b/0x80
[  431.354706][T19931]  ? rcu_read_unlock+0x17/0x60
[  431.354726][T19931]  __vmalloc_node_range_noprof+0x111c/0x1420
[  431.354747][T19931]  ? kvm_dev_ioctl+0x154/0x1b50
[  431.354762][T19931]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  431.354778][T19931]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.354793][T19931]  ? lock_acquire+0x1d1/0x380
[  431.354806][T19931]  ? rcu_is_watching+0x13/0xc0
[  431.354825][T19931]  __kvmalloc_node_noprof+0x3da/0x9b0
[  431.354838][T19931]  ? kvm_dev_ioctl+0x154/0x1b50
[  431.354851][T19931]  ? alloc_fd+0x471/0x7a0
[  431.354866][T19931]  ? kvm_dev_ioctl+0x154/0x1b50
[  431.354881][T19931]  kvm_dev_ioctl+0x154/0x1b50
[  431.354896][T19931]  ? __fget_files+0x34/0x3d0
[  431.354912][T19931]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  431.354928][T19931]  ? selinux_file_ioctl+0x13b/0x290
[  431.354941][T19931]  ? selinux_file_ioctl+0xb6/0x290
[  431.354954][T19931]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  431.354969][T19931]  __x64_sys_ioctl+0x18e/0x210
[  431.354981][T19931]  do_syscall_64+0x123/0x790
[  431.355001][T19931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.355013][T19931] RIP: 0033:0x7f3d61b9e159
[  431.355024][T19931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.355041][T19931] RSP: 002b:00007f3d62993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  431.355053][T19931] RAX: ffffffffffffffda RBX: 00007f3d61e25fa0 RCX: 00007f3d61b9e159
[  431.355061][T19931] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[  431.355069][T19931] RBP: 00007f3d61c3506b R08: 0000000000000000 R09: 0000000000000000
[  431.355077][T19931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.355084][T19931] R13: 00007f3d61e26038 R14: 00007f3d61e25fa0 R15: 00007ffe548cb1e8
[  431.355100][T19931]  </TASK>
[  431.355105][T19931] Mem-Info:
[  431.355111][T19931] active_anon:33381 inactive_anon:8335 isolated_anon:0
[  431.355111][T19931]  active_file:488 inactive_file:42236 isolated_file:0
[  431.355111][T19931]  unevictable:0 dirty:140 writeback:0
[  431.355111][T19931]  slab_reclaimable:9207 slab_unreclaimable:96298
[  431.355111][T19931]  mapped:25184 shmem:31704 pagetables:4281
[  431.355111][T19931]  sec_pagetables:307 bounce:0
[  431.355111][T19931]  kernel_misc_reclaimable:0
[  431.355111][T19931]  free:379087 free_pcp:16448 free_cma:0
[  431.355136][T19889] netdevsim netdevsim6 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.355141][T19931] Node 0 active_anon:131904kB inactive_anon:33340kB active_file:1952kB inactive_file:168688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43360kB dirty:520kB writeback:0kB shmem:125200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19560kB pagetables:14984kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  431.355170][T19931] Node 1 active_anon:1620kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57376kB dirty:40kB writeback:0kB shmem:1616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:2140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  431.355198][T19931] Node 0 DMA free:5668kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9332kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:56kB free_cma:0kB
[  431.355228][T19931] lowmem_reserve[]: 0 1223 1223 1223 1223
[  431.355248][T19931] Node 0 DMA32 free:65328kB boost:24576kB min:51932kB low:58768kB high:65604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:122552kB inactive_anon:33340kB active_file:1952kB inactive_file:168688kB unevictable:0kB writepending:520kB zspages:2860kB present:2080628kB managed:1253264kB mlocked:0kB bounce:0kB free_pcp:49824kB local_pcp:17412kB free_cma:0kB
[  431.355283][T19931] lowmem_reserve[]: 0 0 0 0 0
[  431.355303][T19931] Node 1 Normal free:1445352kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1620kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:40kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:15744kB local_pcp:13008kB free_cma:0kB
[  431.355334][T19931] lowmem_reserve[]: 0 0 0 0 0
[  431.355353][T19931] Node 0 DMA: 11*4kB (UM) 15*8kB (UM) 9*16kB (UM) 9*32kB (UM) 9*64kB (UM) 7*128kB (UM) 4*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 5652kB
[  431.355432][T19931] Node 0 DMA32: 326*4kB (ME) 333*8kB (UME) 275*16kB (UME) 244*32kB (UM) 42*64kB (UME) 21*128kB (UME) 17*256kB (ME) 21*512kB (UME) 26*1024kB (UM) 1*2048kB (M) 0*4096kB = 65328kB
[  431.355517][T19931] Node 1 Normal: 6*4kB (UME) 18*8kB (UE) 236*16kB (UME) 266*32kB (UME) 237*64kB (UE) 210*128kB (UME) 189*256kB (U) 166*512kB (UM) 134*1024kB (UME) 7*2048kB (UME) 270*4096kB (UM) = 1445352kB
[  431.355607][T19931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  431.355616][T19931] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  431.355625][T19931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  431.355634][T19931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  431.355642][T19931] 74424 total pagecache pages
[  431.355647][T19931] 0 pages in swap cache
[  431.355651][T19931] Free swap  = 99280kB
[  431.355655][T19931] Total swap = 124996kB
[  431.355659][T19931] 1048443 pages RAM
[  431.355663][T19931] 0 pages HighMem/MovableOnly
[  431.355667][T19931] 285817 pages reserved
[  431.355671][T19931] 0 pages cma reserved
[  431.597383][T19889] netdevsim netdevsim6 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.634147][T19938] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3585'.
[  431.738719][T19889] netdevsim netdevsim6 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.874481][T19889] netdevsim netdevsim6 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.892073][T19958] validate_nla: 27 callbacks suppressed
[  431.892088][T19958] netlink: 'syz.3.3589': attribute type 2 has an invalid length.
[  432.065450][T19889] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  432.073990][T19889] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  432.074646][T19889] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  432.082159][T19889] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  432.082883][T19889] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  432.092138][T19889] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  432.094149][T19889] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  432.103399][T19889] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.206264][T19889] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.216010][T19889] 8021q: adding VLAN 0 to HW filter on device team0
[  432.219111][T10506] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.219178][T10506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.228457][T10519] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.228553][T10519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.582453][ T5092] Bluetooth: hci0: command tx timeout
[  432.584041][T19989] fuse: fd is not a fuse device
[  432.684948][T19889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.960534][T19889] veth0_vlan: entered promiscuous mode
[  432.967441][T19889] veth1_vlan: entered promiscuous mode
[  433.004409][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'.
[  433.005400][T19889] veth0_macvtap: entered promiscuous mode
[  433.013221][T19889] veth1_macvtap: entered promiscuous mode
[  433.028737][T19889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.032744][T19889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.092378][ T6168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.092407][ T6168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.092425][ T6168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.105142][ T5810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.257432][T10506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.257450][T10506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.367832][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.367854][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.673091][T20051] fuse: fd is not a fuse device
[  433.767856][T20045] Bluetooth: MGMT ver 1.23
[  433.865790][T20059] IPVS: set_ctl: invalid protocol: 51 172.30.1.7:20001
[  433.915576][T20065] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  433.918401][T20065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.918418][T20065] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.926106][T20065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.926123][T20065] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.969371][T20068] fuse: Bad value for 'user_id'
[  433.969384][T20068] fuse: Bad value for 'user_id'
[  434.416914][T20087] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  434.416928][T20087] overlayfs: missing 'lowerdir'
[  434.478519][T20092] net_ratelimit: 1 callbacks suppressed
[  434.478538][T20092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.628160][T20098] ADFS-fs (nbd3): error: unable to read block 3, try 0
[  434.635064][T20098] loop5: detected capacity change from 0 to 7
[  434.636025][T20098] Dev loop5: unable to read RDB block 7
[  434.636067][T20098]  loop5: unable to read partition table
[  434.636262][T20098] loop5: partition table beyond EOD, truncated
[  434.636284][T20098] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  434.661241][ T5740] Bluetooth: hci0: command tx timeout
[  434.798859][T20108] binder: BINDER_SET_CONTEXT_MGR already set
[  434.798869][T20108] binder: 20107:20108 ioctl 40046207 0 returned -16
[  434.799342][T20108] fuse: Unknown parameter 'group_i00000000000000000000'
[  434.833710][T20110] openvswitch: netlink: IPv6 tunnel dst address is zero
[  434.849750][T20110] wg2 speed is unknown, defaulting to 1000
[  434.903224][T10522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.916478][  T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.389868][T20124] loop2: detected capacity change from 0 to 7
[  435.394151][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3618'.
[  435.415129][T20124] Dev loop2: unable to read RDB block 7
[  435.415167][T20124]  loop2: unable to read partition table
[  435.415335][T20124] loop2: partition table beyond EOD, truncated
[  435.415386][T20124] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  435.940931][ T5740] Bluetooth: hci2: command 0x0401 tx timeout
[  435.948944][ T5092] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  436.397239][   T43] kauditd_printk_skb: 224 callbacks suppressed
[  436.397252][   T43] audit: type=1400 audit(1789776903.489:41639): avc:  denied  { map } for  pid=20129 comm="syz.6.3619" path="/proc/35/task" dev="proc" ino=103900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  436.482728][T20138] overlayfs: failed to resolve './proc/thread-self/fail-nth': -2
[  436.485239][T20138] FAULT_INJECTION: forcing a failure.
[  436.485239][T20138] name failslab, interval 1, probability 0, space 0, times 0
[  436.485262][T20138] CPU: 3 UID: 0 PID: 20138 Comm: syz.6.3621 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.485280][T20138] Tainted: [L]=SOFTLOCKUP
[  436.485284][T20138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  436.485293][T20138] Call Trace:
[  436.485298][T20138]  <TASK>
[  436.485303][T20138]  dump_stack_lvl+0x100/0x190
[  436.485326][T20138]  should_fail_ex.cold+0x5/0xa
[  436.485344][T20138]  should_failslab+0xc2/0x120
[  436.485363][T20138]  __kmalloc_cache_noprof+0x91/0x6d0
[  436.485384][T20138]  ? snd_seq_pool_new+0x44/0x230
[  436.485403][T20138]  ? __pfx_snd_seq_open+0x10/0x10
[  436.485418][T20138]  snd_seq_pool_new+0x44/0x230
[  436.485435][T20138]  snd_seq_fifo_new+0x5a/0x270
[  436.485447][T20138]  snd_seq_open+0x144/0x530
[  436.485461][T20138]  ? __pfx_snd_seq_open+0x10/0x10
[  436.485475][T20138]  snd_open+0x201/0x450
[  436.485491][T20138]  ? __pfx_snd_open+0x10/0x10
[  436.485506][T20138]  chrdev_open+0x234/0x6a0
[  436.485521][T20138]  ? __pfx_chrdev_open+0x10/0x10
[  436.485537][T20138]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  436.485559][T20138]  do_dentry_open+0x6ab/0x14d0
[  436.485572][T20138]  ? __pfx_chrdev_open+0x10/0x10
[  436.485590][T20138]  vfs_open+0x82/0x3f0
[  436.485607][T20138]  path_openat+0x19fa/0x2440
[  436.485625][T20138]  ? __pfx_path_openat+0x10/0x10
[  436.485644][T20138]  do_file_open+0x20e/0x430
[  436.485660][T20138]  ? __pfx_do_file_open+0x10/0x10
[  436.485687][T20138]  ? _raw_spin_unlock+0x28/0x50
[  436.485702][T20138]  ? alloc_fd+0x471/0x7a0
[  436.485722][T20138]  do_sys_openat2+0x10f/0x1e0
[  436.485738][T20138]  ? __pfx_do_sys_openat2+0x10/0x10
[  436.485760][T20138]  __x64_sys_openat+0x12d/0x210
[  436.485777][T20138]  ? __pfx___x64_sys_openat+0x10/0x10
[  436.485802][T20138]  do_syscall_64+0x123/0x790
[  436.485822][T20138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.485835][T20138] RIP: 0033:0x7fa41439e159
[  436.485846][T20138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.485858][T20138] RSP: 002b:00007fa4151ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  436.485871][T20138] RAX: ffffffffffffffda RBX: 00007fa414625fa0 RCX: 00007fa41439e159
[  436.485879][T20138] RDX: 0000000000060240 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  436.485886][T20138] RBP: 00007fa41443506b R08: 0000000000000000 R09: 0000000000000000
[  436.485893][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  436.485900][T20138] R13: 00007fa414626038 R14: 00007fa414625fa0 R15: 00007ffd1fc2eb48
[  436.485916][T20138]  </TASK>
[  436.487800][T20138] fuse: fd is not a fuse device
[  436.740999][ T5740] Bluetooth: hci0: command tx timeout
[  436.782827][T20149] FAULT_INJECTION: forcing a failure.
[  436.782827][T20149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.782851][T20149] CPU: 3 UID: 0 PID: 20149 Comm: syz.6.3626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.782867][T20149] Tainted: [L]=SOFTLOCKUP
[  436.782871][T20149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  436.782878][T20149] Call Trace:
[  436.782883][T20149]  <TASK>
[  436.782888][T20149]  dump_stack_lvl+0x100/0x190
[  436.782908][T20149]  should_fail_ex.cold+0x5/0xa
[  436.782924][T20149]  _copy_from_iter+0x1f4/0x1690
[  436.782939][T20149]  ? __asan_memset+0x23/0x50
[  436.782951][T20149]  ? __pfx__copy_from_iter+0x10/0x10
[  436.782963][T20149]  ? __pfx___alloc_skb+0x10/0x10
[  436.782976][T20149]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  436.782988][T20149]  ? sock_has_perm+0x25a/0x2f0
[  436.783005][T20149]  ? __pfx_sock_has_perm+0x10/0x10
[  436.783025][T20149]  netlink_sendmsg+0x808/0xda0
[  436.783041][T20149]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.783054][T20149]  ? selinux_socket_sendmsg+0x198/0x2f0
[  436.783068][T20149]  ____sys_sendmsg+0xa4d/0xbe0
[  436.783085][T20149]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.783098][T20149]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.783118][T20149]  ? lock_acquire+0x1d1/0x380
[  436.783130][T20149]  ? get_pid_task+0x2a/0x250
[  436.783148][T20149]  ___sys_sendmsg+0x190/0x1e0
[  436.783166][T20149]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.783184][T20149]  ? get_pid_task+0x106/0x250
[  436.783204][T20149]  ? find_held_lock+0x2b/0x80
[  436.783228][T20149]  __sys_sendmsg+0x160/0x210
[  436.783242][T20149]  ? __pfx___sys_sendmsg+0x10/0x10
[  436.783263][T20149]  do_syscall_64+0x123/0x790
[  436.783281][T20149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.783293][T20149] RIP: 0033:0x7fa41439e159
[  436.783303][T20149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.783313][T20149] RSP: 002b:00007fa4151ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.783325][T20149] RAX: ffffffffffffffda RBX: 00007fa414625fa0 RCX: 00007fa41439e159
[  436.783332][T20149] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  436.783339][T20149] RBP: 00007fa4151ef090 R08: 0000000000000000 R09: 0000000000000000
[  436.783345][T20149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.783352][T20149] R13: 00007fa414626038 R14: 00007fa414625fa0 R15: 00007ffd1fc2eb48
[  436.783366][T20149]  </TASK>
[  436.877816][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3627'.
[  437.032948][T20156] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
usb_generic_handle_packet: ctrl buffer too small (16384 > 4096)
[  438.037555][T20207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.098475][T20213] FAULT_INJECTION: forcing a failure.
[  438.098475][T20213] name failslab, interval 1, probability 0, space 0, times 0
[  438.098507][T20213] CPU: 3 UID: 0 PID: 20213 Comm: syz.6.3647 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.098532][T20213] Tainted: [L]=SOFTLOCKUP
[  438.098538][T20213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  438.098548][T20213] Call Trace:
[  438.098554][T20213]  <TASK>
[  438.098561][T20213]  dump_stack_lvl+0x100/0x190
[  438.098590][T20213]  should_fail_ex.cold+0x5/0xa
[  438.098617][T20213]  should_failslab+0xc2/0x120
[  438.098640][T20213]  __kvmalloc_node_noprof+0x113/0x9b0
[  438.098661][T20213]  ? do_raw_spin_lock+0x128/0x260
[  438.098681][T20213]  ? alloc_fdtable+0x17f/0x2d0
[  438.098705][T20213]  alloc_fdtable+0x17f/0x2d0
[  438.098725][T20213]  dup_fd+0x995/0xd10
[  438.098747][T20213]  ? do_raw_spin_unlock+0x145/0x1e0
[  438.098768][T20213]  ? _raw_spin_unlock+0x28/0x50
[  438.098791][T20213]  ? copy_fs_struct+0x2a0/0x340
[  438.098811][T20213]  ksys_unshare+0x7c7/0xa70
[  438.098833][T20213]  ? __pfx_ksys_unshare+0x10/0x10
[  438.098862][T20213]  __x64_sys_unshare+0x31/0x40
[  438.098882][T20213]  do_syscall_64+0x123/0x790
[  438.098908][T20213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.098926][T20213] RIP: 0033:0x7fa41439e159
[  438.098939][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.098956][T20213] RSP: 002b:00007fa4151ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  438.098974][T20213] RAX: ffffffffffffffda RBX: 00007fa414625fa0 RCX: 00007fa41439e159
[  438.098996][T20213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[  438.099008][T20213] RBP: 00007fa41443506b R08: 0000000000000000 R09: 0000000000000000
[  438.099020][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.099031][T20213] R13: 00007fa414626038 R14: 00007fa414625fa0 R15: 00007ffd1fc2eb48
[  438.099054][T20213]  </TASK>
[  438.099819][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3647'.
[  438.150418][T20213] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.831219][ T5740] Bluetooth: hci0: command tx timeout
[  438.858515][T20217] binder: BINDER_SET_CONTEXT_MGR already set
[  438.858530][T20217] binder: 20216:20217 ioctl 40046207 0 returned -16
[  438.859356][T20217] fuse: Unknown parameter 'group_i00000000000000000000'
[  438.916719][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  438.937731][T20223] syzkaller0: entered promiscuous mode
[  438.937746][T20223] syzkaller0: entered allmulticast mode
[  438.947330][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3649'.
[  438.963991][T20223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.965326][T20222] tipc: Resetting bearer <eth:syzkaller0>
[  438.985851][T20222] tipc: Disabling bearer <eth:syzkaller0>
[  439.075322][   T43] audit: type=1400 audit(1789776906.169:41640): avc:  denied  { bind } for  pid=20230 comm="syz.5.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  439.111163][   T58] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  439.117165][   T43] audit: type=1400 audit(1789776906.209:41641): avc:  denied  { setattr } for  pid=20234 comm="syz.5.3652" path="socket:[102779]" dev="sockfs" ino=102779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  439.117479][T20235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3652'.
[  439.261753][   T58] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  439.262707][   T58] usb 11-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  439.262733][   T58] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.264633][   T58] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.264652][   T58] usb 11-1: Product: syz
[  439.264664][   T58] usb 11-1: Manufacturer: syz
[  439.264673][   T58] usb 11-1: SerialNumber: syz
[  439.445156][   T43] audit: type=1400 audit(1789776906.539:41642): avc:  denied  { read } for  pid=20250 comm="syz.5.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  439.469634][   T58] usb 11-1: USB disconnect, device number 10
[  439.594535][T20256] FAULT_INJECTION: forcing a failure.
[  439.594535][T20256] name failslab, interval 1, probability 0, space 0, times 0
[  439.594558][T20256] CPU: 0 UID: 0 PID: 20256 Comm: syz.3.3659 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  439.594574][T20256] Tainted: [L]=SOFTLOCKUP
[  439.594579][T20256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  439.594586][T20256] Call Trace:
[  439.594590][T20256]  <TASK>
[  439.594595][T20256]  dump_stack_lvl+0x100/0x190
[  439.594628][T20256]  should_fail_ex.cold+0x5/0xa
[  439.594645][T20256]  should_failslab+0xc2/0x120
[  439.594662][T20256]  __kmalloc_noprof+0xfc/0x840
[  439.594675][T20256]  ? nft_trans_alloc+0x1d/0x2d0
[  439.594691][T20256]  nft_trans_alloc+0x1d/0x2d0
[  439.594704][T20256]  nft_add_set_elem+0x302a/0x4280
[  439.594725][T20256]  ? __pfx_nft_add_set_elem+0x10/0x10
[  439.594739][T20256]  ? is_bpf_text_address+0x94/0x1a0
[  439.594756][T20256]  ? kernel_text_address+0x8d/0x100
[  439.594775][T20256]  ? __kernel_text_address+0xd/0x30
[  439.594794][T20256]  ? unwind_get_return_address+0x59/0xa0
[  439.594834][T20256]  ? __pfx_stack_trace_save+0x10/0x10
[  439.594847][T20256]  ? unwind_get_return_address+0x59/0xa0
[  439.594865][T20256]  ? stack_depot_save_flags+0x27/0x9f0
[  439.594888][T20256]  ? __nla_validate_parse+0x1e7/0x28b0
[  439.594915][T20256]  ? nla_strcmp+0xff/0x130
[  439.594934][T20256]  ? nft_set_lookup_global+0x163/0x390
[  439.594955][T20256]  nf_tables_newsetelem+0x721/0xa60
[  439.594975][T20256]  ? __pfx_nf_tables_newsetelem+0x10/0x10
[  439.594988][T20256]  ? net_generic+0x25/0x2a0
[  439.595007][T20256]  ? __nla_parse+0x40/0x60
[  439.595027][T20256]  nfnetlink_rcv_batch+0x1410/0x2880
[  439.595052][T20256]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  439.595071][T20256]  ? lock_acquire+0x1d1/0x380
[  439.595084][T20256]  ? avc_has_perm_noaudit+0x56/0x3b0
[  439.595106][T20256]  ? avc_has_perm_noaudit+0x145/0x3b0
[  439.595138][T20256]  ? __nla_parse+0x40/0x60
[  439.595156][T20256]  nfnetlink_rcv+0x3bd/0x440
[  439.595172][T20256]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  439.595191][T20256]  netlink_unicast+0x585/0x850
[  439.595206][T20256]  ? __pfx_netlink_unicast+0x10/0x10
[  439.595219][T20256]  ? __pfx_sock_has_perm+0x10/0x10
[  439.595239][T20256]  netlink_sendmsg+0x8b0/0xda0
[  439.595254][T20256]  ? __pfx_netlink_sendmsg+0x10/0x10
[  439.595268][T20256]  ? selinux_socket_sendmsg+0x198/0x2f0
[  439.595282][T20256]  ____sys_sendmsg+0xa4d/0xbe0
[  439.595299][T20256]  ? __pfx_netlink_sendmsg+0x10/0x10
[  439.595312][T20256]  ? __pfx_____sys_sendmsg+0x10/0x10
[  439.595332][T20256]  ? lock_acquire+0x1d1/0x380
[  439.595344][T20256]  ? get_pid_task+0x2a/0x250
[  439.595360][T20256]  ___sys_sendmsg+0x190/0x1e0
[  439.595378][T20256]  ? __pfx____sys_sendmsg+0x10/0x10
[  439.595396][T20256]  ? get_pid_task+0x106/0x250
[  439.595416][T20256]  ? find_held_lock+0x2b/0x80
[  439.595441][T20256]  __sys_sendmsg+0x160/0x210
[  439.595455][T20256]  ? __pfx___sys_sendmsg+0x10/0x10
[  439.595476][T20256]  do_syscall_64+0x123/0x790
[  439.595494][T20256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.595506][T20256] RIP: 0033:0x7f3d61b9e159
[  439.595516][T20256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.595527][T20256] RSP: 002b:00007f3d62993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  439.595539][T20256] RAX: ffffffffffffffda RBX: 00007f3d61e25fa0 RCX: 00007f3d61b9e159
[  439.595546][T20256] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  439.595552][T20256] RBP: 00007f3d62993090 R08: 0000000000000000 R09: 0000000000000000
[  439.595559][T20256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.595566][T20256] R13: 00007f3d61e26038 R14: 00007f3d61e25fa0 R15: 00007ffe548cb1e8
[  439.595580][T20256]  </TASK>
[  439.633464][T20258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3660'.
[  439.637582][T20261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3660'.
[  439.983646][T20268] openvswitch: netlink: Duplicate key (type 0).
[  440.024562][ T8208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.026177][T20268]   extrace-0138 ex_trace_point        : Method Begin [\_SB.PCI0._PRT] execution.
[  440.067643][T20268]   extrace-0138 ex_trace_point        : Method End [\_SB.PCI0._PRT] execution.
[  440.076475][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3665'.
[  440.186059][T20268] pci_bus 0000:01: busn_res: [bus 01] is released
[  440.283398][   T43] audit: type=1400 audit(1789776907.379:41643): avc:  denied  { setopt } for  pid=20274 comm="syz.6.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  440.312756][T20280] xt_IDLETIMER: label is empty or not nul-terminated
[  440.417153][T20289] binder: BINDER_SET_CONTEXT_MGR already set
[  440.417164][T20289] binder: 20288:20289 ioctl 40046207 0 returned -16
[  440.417733][T20289] fuse: Unknown parameter 'group_i00000000000000000000'
[  440.507957][   T43] audit: type=1400 audit(1789776907.599:41644): avc:  denied  { bind } for  pid=20292 comm="syz.5.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  440.566342][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3675'.
[  440.619460][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.652131][ T8682] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  440.822214][ T8682] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  440.823825][ T8682] usb 11-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  440.823872][ T8682] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  440.828522][ T8682] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.828544][ T8682] usb 11-1: Product: syz
[  440.828558][ T8682] usb 11-1: Manufacturer: syz
[  440.828570][ T8682] usb 11-1: SerialNumber: syz
[  441.043625][ T5881] usb 11-1: USB disconnect, device number 11
[  441.729689][   T43] audit: type=1400 audit(1789776908.819:41645): avc:  denied  { write } for  pid=20310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  441.821085][   T43] audit: type=1400 audit(1789776908.919:41646): avc:  denied  { write } for  pid=20314 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  441.973757][ T5092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  441.977716][ T5092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  441.979996][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  442.000632][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  442.003651][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  442.103990][T20328] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3683'.
[  442.177879][T20336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.181208][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.251634][T20321] wg2 speed is unknown, defaulting to 1000
[  442.474814][ T5810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.576336][ T5810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.666942][ T5810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.707264][T20351] binder: BINDER_SET_CONTEXT_MGR already set
[  442.707281][T20351] binder: 20350:20351 ioctl 40046207 0 returned -16
[  442.708264][T20351] fuse: Unknown parameter 'group_id00000000000000000000'
[  442.712567][T20321] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.712656][T20321] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.712735][T20321] bridge_slave_0: entered allmulticast mode
[  442.714247][T20321] bridge_slave_0: entered promiscuous mode
[  442.715810][T20321] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.715892][T20321] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.715994][T20321] bridge_slave_1: entered allmulticast mode
[  442.716890][T20321] bridge_slave_1: entered promiscuous mode
[  442.733476][T20321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.735316][T20321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.750003][T20321] team0: Port device team_slave_0 added
[  442.753248][T20321] team0: Port device team_slave_1 added
[  442.795875][ T5810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.809846][T20321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.809858][T20321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.809873][T20321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.811783][T20321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.811793][T20321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.811807][T20321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.844926][T20321] hsr_slave_0: entered promiscuous mode
[  442.845412][T20321] hsr_slave_1: entered promiscuous mode
[  442.845718][T20321] debugfs: 'hsr0' already exists in 'hsr'
[  442.845730][T20321] Cannot create hsr debugfs directory
[  442.981334][ T5786] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  442.997444][T11352] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  443.100152][   T43] audit: type=1400 audit(1789776910.189:41647): avc:  denied  { write } for  pid=20353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  443.112565][T20321] netdevsim netdevsim7 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.165668][T11352] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  443.170904][T11352] usb 11-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  443.170933][T11352] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  443.180031][T11352] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.180048][T11352] usb 11-1: Product: syz
[  443.180055][T11352] usb 11-1: Manufacturer: syz
[  443.180063][T11352] usb 11-1: SerialNumber: syz
[  443.183962][   T43] audit: type=1400 audit(1789776910.269:41648): avc:  denied  { write } for  pid=20360 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  443.401986][T11352] usb 11-1: USB disconnect, device number 12
[  443.416265][ T5810] bond2 (unregistering): (slave geneve2): Releasing active interface
[  443.448389][ T5810] bond1 (unregistering): Released all slaves
[  443.459534][ T5810] bond2 (unregistering): Released all slaves
[  443.469130][ T5810] bond0 (unregistering): Released all slaves
[  443.479893][ T5810] bond3 (unregistering): Released all slaves
[  443.526931][ T5786] bond0: (slave netdevsim1): link status definitely down, disabling slave
[  443.537036][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10
[  443.544248][ T6168] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  443.544275][ T6168] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  443.544293][ T6168] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  443.612660][ T5810] tipc: Disabling bearer <udp:syz0>
[  443.618853][ T5810] tipc: Left network mode
[  443.726884][T20386] fuse: Bad value for 'fd'
[  443.804275][   T43] audit: type=1400 audit(1789776910.889:41649): avc:  denied  { write } for  pid=20384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  443.810157][T20390] kAFS: No cell specified
[  443.864957][  T141] rpcbind: server 127.0.0.1 not responding, timed out
[  443.881174][   T43] audit: type=1400 audit(1789776910.979:41650): avc:  denied  { write } for  pid=20392 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.019631][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11
[  444.100955][ T5740] Bluetooth: hci3: command tx timeout
[  444.225448][ T5810] hsr_slave_0: left promiscuous mode
[  444.227877][ T5810] hsr_slave_1: left promiscuous mode
[  444.284615][   T43] audit: type=1400 audit(1789776911.379:41651): avc:  denied  { write } for  pid=20401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.308816][ T5810] veth1_macvtap: left promiscuous mode
[  444.308856][ T5810] veth0_macvtap: left promiscuous mode
[  444.308972][ T5810] veth1_vlan: left promiscuous mode
[  444.309028][ T5810] veth0_vlan: left promiscuous mode
[  444.372983][   T43] audit: type=1400 audit(1789776911.469:41652): avc:  denied  { write } for  pid=20406 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.523979][T20411] XFS (nbd6): SB validate failed with error -5.
[  444.650869][T20411] XFS (nbd6): io_pages changed from 0 to 1024, not restoring.
[  444.650889][T20411] XFS (nbd6): ra_pages changed from 0 to 64, not restoring.
[  444.780684][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12
[  444.891530][   T43] audit: type=1400 audit(1789776911.989:41653): avc:  denied  { write } for  pid=20421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.954327][   T43] audit: type=1400 audit(1789776912.039:41654): avc:  denied  { write } for  pid=20432 comm="syz.6.3703" name="nullb" dev="configfs" ino=6288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  445.032766][T20433] could not open pipe file descriptor
[  445.066425][ T5810] IPVS: stop unused estimator thread 0...
[  445.104104][T20446] fuse: fd is not a fuse device
[  445.120315][T20445] warn_alloc: 1 callbacks suppressed
[  445.120333][T20445] syz.6.3705: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  445.120390][T20445] CPU: 0 UID: 0 PID: 20445 Comm: syz.6.3705 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  445.120413][T20445] Tainted: [L]=SOFTLOCKUP
[  445.120420][T20445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  445.120430][T20445] Call Trace:
[  445.120436][T20445]  <TASK>
[  445.120450][T20445]  dump_stack_lvl+0x100/0x190
[  445.120479][T20445]  warn_alloc.cold+0x9e/0xb2
[  445.120498][T20445]  ? __pfx_warn_alloc+0x10/0x10
[  445.120523][T20445]  ? policy_nodemask+0xed/0x4f0
[  445.120544][T20445]  ? alloc_pages_mpol+0x260/0x550
[  445.120564][T20445]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  445.120584][T20445]  ? find_held_lock+0x2b/0x80
[  445.120606][T20445]  ? rcu_read_unlock+0x17/0x60
[  445.120631][T20445]  __vmalloc_node_range_noprof+0x111c/0x1420
[  445.120659][T20445]  ? kvm_dev_ioctl+0x154/0x1b50
[  445.120678][T20445]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  445.120718][T20445]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  445.120740][T20445]  ? lock_acquire+0x1d1/0x380
[  445.120759][T20445]  ? rcu_is_watching+0x13/0xc0
[  445.120785][T20445]  __kvmalloc_node_noprof+0x3da/0x9b0
[  445.120802][T20445]  ? kvm_dev_ioctl+0x154/0x1b50
[  445.120818][T20445]  ? alloc_fd+0x471/0x7a0
[  445.120838][T20445]  ? kvm_dev_ioctl+0x154/0x1b50
[  445.120860][T20445]  kvm_dev_ioctl+0x154/0x1b50
[  445.120875][T20445]  ? __fget_files+0x34/0x3d0
[  445.120891][T20445]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  445.120907][T20445]  ? selinux_file_ioctl+0x13b/0x290
[  445.120919][T20445]  ? selinux_file_ioctl+0xb6/0x290
[  445.120933][T20445]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  445.120947][T20445]  __x64_sys_ioctl+0x18e/0x210
[  445.120960][T20445]  do_syscall_64+0x123/0x790
[  445.120979][T20445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.120991][T20445] RIP: 0033:0x7fa41439e159
[  445.121001][T20445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.121012][T20445] RSP: 002b:00007fa4151ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.121025][T20445] RAX: ffffffffffffffda RBX: 00007fa414625fa0 RCX: 00007fa41439e159
[  445.121033][T20445] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[  445.121041][T20445] RBP: 00007fa41443506b R08: 0000000000000000 R09: 0000000000000000
[  445.121048][T20445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.121055][T20445] R13: 00007fa414626038 R14: 00007fa414625fa0 R15: 00007ffd1fc2eb48
[  445.121070][T20445]  </TASK>
[  445.121342][T20445] Mem-Info:
[  445.121351][T20445] active_anon:16545 inactive_anon:16966 isolated_anon:0
[  445.121351][T20445]  active_file:2560 inactive_file:40617 isolated_file:0
[  445.121351][T20445]  unevictable:0 dirty:148 writeback:0
[  445.121351][T20445]  slab_reclaimable:9257 slab_unreclaimable:97732
[  445.121351][T20445]  mapped:25088 shmem:23861 pagetables:4200
[  445.121351][T20445]  sec_pagetables:307 bounce:0
[  445.121351][T20445]  kernel_misc_reclaimable:0
[  445.121351][T20445]  free:386154 free_pcp:15985 free_cma:0
[  445.121382][T20445] Node 0 active_anon:64564kB inactive_anon:67864kB active_file:10240kB inactive_file:162212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:42976kB dirty:588kB writeback:0kB shmem:93828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19312kB pagetables:14660kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  445.121414][T20445] Node 1 active_anon:1616kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57376kB dirty:4kB writeback:0kB shmem:1616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:2140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  445.121448][T20445] Node 0 DMA free:5812kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9332kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:56kB free_cma:0kB
[  445.121483][T20445] lowmem_reserve[]: 0 1223 1223 1223 1223
[  445.121504][T20445] Node 0 DMA32 free:96316kB boost:24576kB min:51932kB low:58768kB high:65604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:55232kB inactive_anon:67864kB active_file:10240kB inactive_file:162212kB unevictable:0kB writepending:588kB zspages:3256kB present:2080628kB managed:1253264kB mlocked:0kB bounce:0kB free_pcp:49276kB local_pcp:16720kB free_cma:0kB
[  445.121538][T20445] lowmem_reserve[]: 0 0 0 0 0
[  445.121559][T20445] Node 1 Normal free:1442488kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1616kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:14564kB local_pcp:12788kB free_cma:0kB
[  445.121594][T20445] lowmem_reserve[]: 0 0 0 0 0
[  445.121614][T20445] Node 0 DMA: 15*4kB (UM) 19*8kB (UM) 12*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 5812kB
[  445.121700][T20445] Node 0 DMA32: 267*4kB (UME) 309*8kB (UME) 411*16kB (UM) 416*32kB (UME) 174*64kB (UME) 47*128kB (UME) 32*256kB (UME) 23*512kB (UME) 27*1024kB (UM) 4*2048kB (UM) 0*4096kB = 96388kB
[  445.121783][T20445] Node 1 Normal: 50*4kB (UME) 54*8kB (UME) 238*16kB (UME) 273*32kB (UME) 245*64kB (UME) 210*128kB (UME) 189*256kB (U) 166*512kB (UM) 134*1024kB (UME) 7*2048kB (UME) 269*4096kB (UM) = 1442488kB
[  445.121869][T20445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  445.121878][T20445] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  445.121887][T20445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  445.121895][T20445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  445.121903][T20445] 67034 total pagecache pages
[  445.121908][T20445] 0 pages in swap cache
[  445.121912][T20445] Free swap  = 67800kB
[  445.121915][T20445] Total swap = 124996kB
[  445.121920][T20445] 1048443 pages RAM
[  445.121924][T20445] 0 pages HighMem/MovableOnly
[  445.121927][T20445] 285817 pages reserved
[  445.121931][T20445] 0 pages cma reserved
[  445.151671][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.159868][T10519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.160413][T10519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.214519][T20450] fuse: Bad value for 'fd'
[  445.425066][T20321] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.604965][T20321] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.692889][T20474] netlink: 'syz.5.3711': attribute type 1 has an invalid length.
[  445.719834][T20321] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.754495][T20474] 8021q: adding VLAN 0 to HW filter on device bond7
[  445.786927][T20477] bond7: (slave veth3): Enslaving as a backup interface with a down link
[  445.808190][T20474] bond2: (slave dummy0): Releasing active interface
[  445.816234][T20474] bond7: (slave dummy0): Enslaving as a backup interface with an up link
[  445.818922][T20474] netlink: 'syz.5.3711': attribute type 10 has an invalid length.
[  445.818941][T20474] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3711'.
[  445.823197][T20474] dummy0: entered promiscuous mode
[  445.841276][T20474] bond7: (slave dummy0): Releasing backup interface
[  445.841543][T13358] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  445.881835][T20486] dummy0: left promiscuous mode
[  445.881839][T20483] netlink: 'syz.5.3711': attribute type 1 has an invalid length.
[  445.883313][T20482] netlink: 'syz.5.3711': attribute type 10 has an invalid length.
[  445.883327][T20482] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3711'.
[  445.884788][T20486] bond7: (slave dummy0): Enslaving as a backup interface with an up link
[  445.912697][T20477] bond7: (slave veth5): Enslaving as a backup interface with a down link
[  445.917991][T20482] dummy0: entered promiscuous mode
[  445.919084][T20482] bond7: (slave dummy0): Releasing backup interface
[  445.932095][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13
[  445.991157][T13358] usb 11-1: Using ep0 maxpacket: 8
[  445.991649][T13358] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  445.993149][T13358] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  445.993164][T13358] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  445.993176][T13358] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  445.993188][T13358] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  445.993208][T13358] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.117628][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3712'.
[  446.181044][ T5740] Bluetooth: hci3: command tx timeout
[  446.204871][T13358] usb 11-1: GET_CAPABILITIES returned 0
[  446.204911][T13358] usbtmc 11-1:16.0: can't read capabilities
[  446.231408][T20321] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  446.236691][T20321] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  446.237398][T20321] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  446.239260][T20321] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  446.239763][T20321] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  446.249083][T20321] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  446.259964][T20321] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  446.265837][T20321] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  446.366880][T20321] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.383780][T20321] 8021q: adding VLAN 0 to HW filter on device team0
[  446.399339][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.399388][ T6458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.400487][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.400531][ T6458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.414828][T20469] overlay: Unknown parameter 'fowner<00000000000000000000'
[  446.619452][ T8682] usb 11-1: USB disconnect, device number 13
[  446.800509][   T43] kauditd_printk_skb: 15 callbacks suppressed
[  446.800529][   T43] audit: type=1400 audit(1789776913.889:41670): avc:  denied  { write } for  pid=20545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.820002][T20321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.886489][   T43] audit: type=1400 audit(1789776913.979:41671): avc:  denied  { write } for  pid=20551 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.971436][   T43] audit: type=1400 audit(1789776914.059:41672): avc:  denied  { write } for  pid=20556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.008326][T20321] veth0_vlan: entered promiscuous mode
[  447.013521][T20321] veth1_vlan: entered promiscuous mode
[  447.029774][T20321] veth0_macvtap: entered promiscuous mode
[  447.036116][T20321] veth1_macvtap: entered promiscuous mode
[  447.044235][T20321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.050209][T20321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.052246][   T43] audit: type=1400 audit(1789776914.149:41673): avc:  denied  { write } for  pid=20560 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.129124][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.129163][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.129183][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.129202][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.135099][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.135113][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.191272][   T43] audit: type=1400 audit(1789776914.289:41674): avc:  denied  { write } for  pid=20562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.241167][   T43] audit: type=1400 audit(1789776914.329:41675): avc:  denied  { write } for  pid=20565 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.241575][T10519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.241585][T10519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.326173][T20573] fuse: fd is not a fuse device
[  447.359940][   T43] audit: type=1400 audit(1789776914.449:41676): avc:  denied  { write } for  pid=20569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.412614][   T43] audit: type=1400 audit(1789776914.509:41677): avc:  denied  { write } for  pid=20580 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.444120][T20587] iommufd_mock iommufd_mock0: Adding to iommu group 4
[  447.498790][   T43] audit: type=1400 audit(1789776914.589:41678): avc:  denied  { write } for  pid=20588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.503304][T20592] lo: entered allmulticast mode
[  447.506259][T20592] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  447.506274][T20592] mroute: pending queue full, dropping entries
[  447.509212][T20592] lo: left allmulticast mode
[  447.564225][   T43] audit: type=1400 audit(1789776914.659:41679): avc:  denied  { write } for  pid=20596 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.606975][T20599] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3724'.
[  447.718424][T20606] wg2 speed is unknown, defaulting to 1000
[  447.942803][ T5740] Bluetooth: hci1: unexpected event for opcode 0x0809
[  448.049415][T20630] jffs2: notice: (20630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (3 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found.
[  448.260976][ T5740] Bluetooth: hci3: command tx timeout
[  448.433290][   T10] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  448.590853][   T10] usb 12-1: Using ep0 maxpacket: 32
[  448.591656][   T10] usb 12-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  448.593701][   T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11
[  448.593719][   T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  448.593731][   T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  448.595616][   T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.595635][   T10] usb 12-1: Product: syz
[  448.595647][   T10] usb 12-1: Manufacturer: syz
[  448.595658][   T10] usb 12-1: SerialNumber: syz
[  448.598833][   T10] usb 12-1: config 0 descriptor??
[  448.635338][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input39
[  448.636343][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.641005][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.658769][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.659660][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.705398][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.721606][T18937] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.729459][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.748584][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.761788][ T5128] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.803656][T20640] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  448.813218][T20677] netlink: 'syz.6.3746': attribute type 30 has an invalid length.
[  448.830536][   T10] usb 12-1: USB disconnect, device number 11
[  448.949360][T20686] netlink: 'syz.3.3752': attribute type 4 has an invalid length.
[  448.949375][T20686] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3752'.
[  448.954998][T20687] netlink: 'syz.3.3752': attribute type 4 has an invalid length.
[  448.955011][T20687] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3752'.
[  448.967233][T20686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  448.967439][T20687] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  448.968308][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3752'.
[  448.968321][T20687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'.
[  448.968336][T20687] netlink: 'syz.3.3752': attribute type 7 has an invalid length.
[  449.238219][T20711] 9pnet_virtio: no channels available for device syz
[  449.318038][T20717] overlayfs: failed to clone upperpath
[  449.416573][T20734] team0 (unregistering): Port device team_slave_0 removed
[  449.419481][T20734] team0 (unregistering): Port device team_slave_1 removed
[  449.423398][T20737] fuse: Unknown parameter ''
[  449.631105][   T58] usb 11-1: new high-speed USB device number 14 using dummy_hcd
[  449.782394][   T58] usb 11-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  449.783692][   T58] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11
[  449.783720][   T58] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024
[  449.785816][   T58] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.785837][   T58] usb 11-1: Product: syz
[  449.785850][   T58] usb 11-1: Manufacturer: syz
[  449.785863][   T58] usb 11-1: SerialNumber: syz
[  449.791458][   T58] symbolserial 11-1:1.0: symbol converter detected
[  449.794288][   T58] usb 11-1: symbol converter now attached to ttyUSB0
[  450.031395][T20732] sl0: header compression turned on
[  450.044849][ T1481] usb 11-1: USB disconnect, device number 14
[  450.058593][ T1481] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  450.059032][ T1481] symbolserial 11-1:1.0: device disconnected
[  450.166785][T20759] netlink: 'syz.3.3770': attribute type 2 has an invalid length.
[  450.186423][T10506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.193983][T20759] vcan1: entered allmulticast mode
[  450.262129][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.311532][T20770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.331845][T20769] netlink: 'syz.5.3772': attribute type 1 has an invalid length.
[  450.332106][T20770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20770 comm=syz.5.3772
[  450.332272][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3772'.
[  450.332396][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3772'.
[  450.341123][ T5740] Bluetooth: hci3: command tx timeout
[  450.356959][T20769] bond8: entered promiscuous mode
[  450.357259][T20769] 8021q: adding VLAN 0 to HW filter on device bond8
[  450.362279][T20773] ip6gre2: entered allmulticast mode
[  450.833118][T20804] __nla_validate_parse: 65 callbacks suppressed
[  450.833131][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3777'.
[  450.833148][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3777'.
[  450.840868][ T6168] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.840899][ T6168] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.840917][ T6168] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.840935][ T6168] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.901968][T10522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.110822][ T1481] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  451.281255][ T1481] usb 12-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  451.283329][ T1481] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  451.283357][ T1481] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  451.283370][ T1481] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.286643][ T1481] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  451.286657][ T1481] usb 12-1: Product: syz
[  451.286665][ T1481] usb 12-1: Manufacturer: syz
[  451.288650][T20808] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  451.293182][ T1481] garmin_gps 12-1:1.0: Garmin GPS usb/tty converter detected
[  451.300249][ T1481] usb 12-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  451.386609][T20827] 9pnet_virtio: no channels available for device syz
[  451.422928][T20822] pimreg3: entered allmulticast mode
[  451.458773][T20827] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3784'.
[  451.460059][T20827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=20827 comm=syz.3.3784
[  451.497729][ T5824] usb 12-1: USB disconnect, device number 12
[  451.514449][ T5824] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  451.514789][ T5824] garmin_gps 12-1:1.0: device disconnected
[  451.527427][T20834] program syz.3.3787 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  451.545941][T20840] 9pnet_virtio: no channels available for device syz
[  451.647485][T20845] autofs: Bad value for 'fd'
[  451.648965][T20845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.075971][   T43] kauditd_printk_skb: 20 callbacks suppressed
[  452.075988][   T43] audit: type=1326 audit(1789776919.169:41700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.7.3795" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc19899e159 code=0x0
[  452.131698][T20859] batman_adv: batadv0: Adding interface: syzkaller0
[  452.131711][T20859] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.131730][T20859] batman_adv: batadv0: Interface activated: syzkaller0
[  452.258810][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.258833][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.354188][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  452.363069][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  452.395131][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  452.398143][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  452.399963][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  452.402182][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.402211][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.508815][T20866] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3798'.
[  452.548531][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.548553][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.670161][   T12] netdevsim netdevsim3 ªªªªª» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.670187][   T12] netdevsim netdevsim3 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.704980][T20879] kAFS: unable to lookup cell 'syz0'
[  452.789471][T20861] wg2 speed is unknown, defaulting to 1000
[  453.016948][T20857] batman_adv: batadv0: Interface deactivated: syzkaller0
[  453.018296][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'.
[  453.018316][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3803'.
[  453.042195][T20857] batman_adv: batadv0: Removing interface: syzkaller0
[  453.190355][   T43] audit: type=1400 audit(1789776920.279:41701): avc:  denied  { mounton } for  pid=20905 comm="syz.6.3805" path="/74/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  453.228959][T20908] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  453.228981][T20908] Error validating options; rc = [-22]
[  453.240495][   T12] bridge_slave_1: left allmulticast mode
[  453.240513][   T12] bridge_slave_1: left promiscuous mode
[  453.240656][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.255634][   T12] bridge_slave_0: left allmulticast mode
[  453.255652][   T12] bridge_slave_0: left promiscuous mode
[  453.257890][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.516720][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.518131][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.518933][   T12] bond0 (unregistering): Released all slaves
[  453.525596][   T12] bond1 (unregistering): Released all slaves
[  453.535433][   T12] bond2 (unregistering): Released all slaves
[  453.540363][   T12] bond3 (unregistering): Released all slaves
[  453.640059][   T12] tipc: Left network mode
[  453.642079][   T12] IPVS: stopping backup sync thread 16479 ...
[  453.730835][ T6167] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  453.730871][ T6167] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  453.730889][ T6167] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  453.730906][ T6167] netdevsim netdevsim3 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  453.800915][   T43] audit: type=1400 audit(1789776920.889:41702): avc:  denied  { write } for  pid=20924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  453.861550][   T43] audit: type=1400 audit(1789776920.959:41703): avc:  denied  { write } for  pid=20928 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  453.898455][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14
[  453.898789][T20861] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.898873][T20861] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.898949][T20861] bridge_slave_0: entered allmulticast mode
[  453.899808][T20861] bridge_slave_0: entered promiscuous mode
[  453.902803][T20861] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.902872][T20861] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.902938][T20861] bridge_slave_1: entered allmulticast mode
[  453.905215][T20861] bridge_slave_1: entered promiscuous mode
[  454.001749][   T43] audit: type=1400 audit(1789776921.099:41704): avc:  denied  { append } for  pid=20937 comm="syz.7.3813" name="pfkey" dev="proc" ino=4026534858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  454.003476][T20861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.008381][T20861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.066424][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.081981][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  454.084539][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  454.085531][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  454.086034][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  454.107054][T20861] team0: Port device team_slave_0 added
[  454.134407][   T43] audit: type=1400 audit(1789776921.229:41705): avc:  denied  { write } for  pid=20944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  454.136491][T20861] team0: Port device team_slave_1 added
[  454.254863][T20861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.254875][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.254889][T20861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.256588][T20861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.256597][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.256611][T20861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.311850][   T43] audit: type=1400 audit(1789776921.409:41706): avc:  denied  { write } for  pid=20956 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  454.403050][T20861] hsr_slave_0: entered promiscuous mode
[  454.403981][T20861] hsr_slave_1: entered promiscuous mode
[  454.412190][T20861] debugfs: 'hsr0' already exists in 'hsr'
[  454.412213][T20861] Cannot create hsr debugfs directory
[  454.413891][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15
[  454.472692][   T12] hsr_slave_0: left promiscuous mode
[  454.473475][   T12] hsr_slave_1: left promiscuous mode
[  454.474177][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.474196][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.492934][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.492953][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.503304][ T5740] Bluetooth: hci2: command tx timeout
[  454.514636][   T12] veth1_macvtap: left promiscuous mode
[  454.514668][   T12] veth0_macvtap: left promiscuous mode
[  454.514716][   T12] veth1_vlan: left promiscuous mode
[  454.514734][   T12] veth0_vlan: left promiscuous mode
[  454.733959][   T12] team0 (unregistering): Port device team_slave_1 removed
[  454.738926][   T12] team0 (unregistering): Port device team_slave_0 removed
[  454.906300][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3820'.
[  454.906348][T20980] veth1: Caught tx_queue_len zero misconfig
[  454.943295][T20940] wg2 speed is unknown, defaulting to 1000
[  455.017889][   T43] audit: type=1400 audit(1789776922.109:41707): avc:  denied  { name_bind } for  pid=20979 comm="syz.5.3820" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  455.078532][   T43] audit: type=1400 audit(1789776922.169:41708): avc:  denied  { write } for  pid=20983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.205707][   T43] audit: type=1400 audit(1789776922.299:41709): avc:  denied  { write } for  pid=20990 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.225580][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.249752][T20861] netdevsim netdevsim9 eth25 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.288051][T20992] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3822'.
[  455.292654][T20992] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3822'.
[  455.292671][T20992] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3822'.
[  455.293587][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16
[  455.367531][T20861] netdevsim netdevsim9 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.388831][T20996] xt_socket: unknown flags 0x4c
[  455.390002][T20996] netlink: 'syz.5.3823': attribute type 39 has an invalid length.
[  455.404844][T20996] hsr_slave_0 (unregistering): left promiscuous mode
[  455.492545][T20861] netdevsim netdevsim9 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.610514][T20861] netdevsim netdevsim9 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.632060][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17
[  455.644717][T20940] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.644796][T20940] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.644857][T20940] bridge_slave_0: entered allmulticast mode
[  455.645567][T20940] bridge_slave_0: entered promiscuous mode
[  455.646938][T20940] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.646998][T20940] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.647055][T20940] bridge_slave_1: entered allmulticast mode
[  455.647789][T20940] bridge_slave_1: entered promiscuous mode
[  455.674031][T21018] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[  455.685406][T20940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.687615][T20940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.703387][T20940] team0: Port device team_slave_0 added
[  455.704982][T20940] team0: Port device team_slave_1 added
[  455.732760][T20940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.732778][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.732799][T20940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.734225][T20940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.734236][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.734255][T20940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.783582][T20940] hsr_slave_0: entered promiscuous mode
[  455.784323][T20940] hsr_slave_1: entered promiscuous mode
[  455.784759][T20940] debugfs: 'hsr0' already exists in 'hsr'
[  455.784774][T20940] Cannot create hsr debugfs directory
[  455.855970][T21026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.022929][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.100431][T20861] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  456.185828][ T5740] Bluetooth: hci0: command tx timeout
[  456.257631][T20861] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  456.265963][T20861] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  456.272937][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.380121][T20861] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  456.491832][T21053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.580933][ T5740] Bluetooth: hci2: command tx timeout
[  456.597006][T20940] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.644418][T20861] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  456.646298][T20861] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  456.647456][T20861] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  456.649266][T20861] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  456.662300][T10525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.680326][T21058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21058 comm=syz.5.3833
[  456.770470][T20940] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.813978][T20861] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.824023][T20861] 8021q: adding VLAN 0 to HW filter on device team0
[  456.828437][T10525] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.828518][T10525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.849179][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.849263][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.889371][T20940] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.964494][T20940] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.097020][   T43] kauditd_printk_skb: 12 callbacks suppressed
[  457.097044][   T43] audit: type=1400 audit(1789776924.189:41722): avc:  denied  { write } for  pid=21088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.142118][T20940] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  457.146116][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  457.146935][T20940] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  457.149555][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  457.150043][T20940] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  457.162631][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  457.163285][T20940] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  457.167895][T20940] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.190473][   T43] audit: type=1400 audit(1789776924.279:41723): avc:  denied  { write } for  pid=21094 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.227358][T20940] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.238830][T20940] 8021q: adding VLAN 0 to HW filter on device team0
[  457.242925][T10506] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.242971][T10506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.255883][T10506] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.255980][T10506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.297154][T20861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.301011][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.409934][   T43] audit: type=1400 audit(1789776924.499:41724): avc:  denied  { write } for  pid=21111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.500026][   T43] audit: type=1400 audit(1789776924.589:41725): avc:  denied  { write } for  pid=21120 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.614394][T20861] veth0_vlan: entered promiscuous mode
[  457.625748][T20940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.657759][T20861] veth1_vlan: entered promiscuous mode
[  457.736796][   T43] audit: type=1400 audit(1789776924.819:41726): avc:  denied  { write } for  pid=21130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.755642][T21141] netlink: 'syz.5.3839': attribute type 13 has an invalid length.
[  457.756971][T20861] veth0_macvtap: entered promiscuous mode
[  457.759255][T21141] __nla_validate_parse: 2 callbacks suppressed
[  457.759268][T21141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3839'.
[  457.774234][T20861] veth1_macvtap: entered promiscuous mode
[  457.812013][T20861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.827131][T21148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3840'.
[  457.827729][T20861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.884869][ T5810] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.890291][   T43] audit: type=1400 audit(1789776924.979:41727): avc:  denied  { write } for  pid=21149 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.913503][ T5810] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.026071][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.026086][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.033486][ T5740] Bluetooth: hci1: unexpected event for opcode 0x2010
[  458.072457][   T43] audit: type=1400 audit(1789776925.169:41728): avc:  denied  { write } for  pid=21159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  458.076061][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.076085][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.112381][ T6169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.120439][T20940] veth0_vlan: entered promiscuous mode
[  458.130930][ T5810] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.137684][T20940] veth1_vlan: entered promiscuous mode
[  458.177730][T20940] veth0_macvtap: entered promiscuous mode
[  458.180442][T20940] veth1_macvtap: entered promiscuous mode
[  458.195694][T20940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.198872][T20940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.214577][   T43] audit: type=1400 audit(1789776925.309:41729): avc:  denied  { write } for  pid=21166 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  458.252078][T21171] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(16)
[  458.252098][T21171] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  458.252226][T21171] vhci_hcd vhci_hcd.0: Device attached
[  458.261365][ T5740] Bluetooth: hci0: command tx timeout
[  458.295443][ T5786] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.296393][ T5786] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.297150][   T43] audit: type=1400 audit(1789776925.389:41730): avc:  denied  { lock } for  pid=21170 comm="syz.9.3846" path="socket:[108969]" dev="sockfs" ino=108969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  458.335937][ T5786] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.341707][ T5810] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.407160][T21172] vhci_hcd: connection closed
[  458.407398][ T5786] vhci_hcd vhci_hcd.9: stop threads
[  458.407422][ T5786] vhci_hcd vhci_hcd.9: release socket
[  458.422976][ T5786] vhci_hcd vhci_hcd.9: disconnect device
[  458.485413][T21181] overlay: Unknown parameter 'smackfshat'
[  458.494373][T10525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.494387][T10525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.497738][   T43] audit: type=1400 audit(1789776925.589:41731): avc:  denied  { write } for  pid=21178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  458.561529][T21181] bond1 (unregistering): Released all slaves
[  458.597281][T21186] Bluetooth: MGMT ver 1.23
[  458.597308][T21186] Bluetooth: hci0: unsupported parameter 5161
[  458.597319][T21186] Bluetooth: hci0: unsupported parameter 8192
[  458.597330][T21186] Bluetooth: hci0: unsupported parameter 5161
[  458.597340][T21186] Bluetooth: hci0: unsupported parameter 8192
[  458.614775][T10525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.614796][T10525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.662320][ T5740] Bluetooth: hci2: command tx timeout
[  458.886571][T21211] overlay: Bad value for 'workdir'
[  458.903590][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.978027][T21209] wg2 speed is unknown, defaulting to 1000
[  459.045745][    T9] usb usb56-port1: attempt power cycle
[  459.055207][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3855'.
[  459.373190][T21214] wg2 speed is unknown, defaulting to 1000
[  459.623249][    T9] usb usb56-port1: unable to enumerate USB device
[  459.940934][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.148737][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3857'.
[  460.149133][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3857'.
[  460.266198][T21279] Cannot find add_set index 0 as target
[  460.266278][T21279] Cannot find add_set index 0 as target
[  460.266338][T21279] Cannot find add_set index 0 as target
[  460.266414][T21279] Cannot find add_set index 0 as target
[  460.266472][T21279] Cannot find add_set index 0 as target
[  460.266531][T21279] Cannot find add_set index 0 as target
[  460.266597][T21279] Cannot find add_set index 0 as target
[  460.266656][T21279] Cannot find add_set index 0 as target
[  460.266714][T21279] Cannot find add_set index 0 as target
[  460.266772][T21279] Cannot find add_set index 0 as target
[  460.341420][ T5740] Bluetooth: hci0: command tx timeout
[  460.440371][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3863'.
[  460.459646][T21293] 8021q: adding VLAN 0 to HW filter on device bond1
[  460.480161][T21293] bond1: (slave hsr0): The slave device specified does not support setting the MAC address
[  460.480650][T21293] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  460.480664][T21293] bond1: (slave hsr0): Error -22 calling dev_set_mtu
[  460.491072][  T852] usb 13-1: new high-speed USB device number 21 using dummy_hcd
[  460.631286][  T852] usb 13-1: device descriptor read/64, error -71
[  460.721138][T21313] ima: policy update completed
[  460.732479][T21313] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3870'.
[  460.741034][ T5740] Bluetooth: hci2: command tx timeout
[  460.743368][T21321] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3870'.
[  460.743894][T21311] ima: policy update failed
[  460.764153][ T5143] 
[  460.764973][ T5143] ======================================================
[  460.767172][ T5143] WARNING: possible circular locking dependency detected
[  460.769330][ T5143] syzkaller #0 Tainted: G             L     
[  460.771594][ T5143] ------------------------------------------------------
[  460.774405][ T5143] udevd/5143 is trying to acquire lock:
[  460.776345][ T5143] ffff88806027f838 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[  460.779090][ T5143] 
[  460.779090][ T5143] but task is already holding lock:
[  460.781454][ T5143] ffff888028f0a168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  460.784766][ T5143] 
[  460.784766][ T5143] which lock already depends on the new lock.
[  460.784766][ T5143] 
[  460.788391][ T5143] 
[  460.788391][ T5143] the existing dependency chain (in reverse order) is:
[  460.791167][ T5143] 
[  460.791167][ T5143] -> #5 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  460.793856][ T5143]        lock_acquire+0x1d1/0x380
[  460.795543][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  460.797426][ T5143]        process_measurement+0x5ab/0x2350
[  460.799814][ T5143]        ima_file_check+0xc3/0x110
[  460.801918][ T5143]        security_file_post_open+0xc4/0x210
[  460.804424][ T5143]        path_openat+0x5cd/0x2440
[  460.806558][ T5143]        do_file_open+0x20e/0x430
[  460.808705][ T5143]        file_open_name+0x1c3/0x3e0
[  460.810914][ T5143]        filp_open+0x2e/0x50
[  460.812920][ T5143]        kernel_read_file_from_path_initns+0xec/0x240
[  460.815757][ T5143]        _request_firmware+0x733/0x13c0
[  460.818084][ T5143]        request_firmware+0x35/0x50
[  460.820008][ T5143]        reg_reload_regdb+0x85/0x460
[  460.821820][ T5143]        genl_family_rcv_msg_doit+0x214/0x300
[  460.824027][ T5143]        genl_rcv_msg+0x560/0x800
[  460.826119][ T5143]        netlink_rcv_skb+0x159/0x420
[  460.828119][ T5143]        genl_rcv+0x28/0x40
[  460.829953][ T5143]        netlink_unicast+0x585/0x850
[  460.832125][ T5143]        netlink_sendmsg+0x8b0/0xda0
[  460.834271][ T5143]        ____sys_sendmsg+0xa4d/0xbe0
[  460.836354][ T5143]        ___sys_sendmsg+0x190/0x1e0
[  460.838153][ T5143]        __sys_sendmsg+0x160/0x210
[  460.840044][ T5143]        do_syscall_64+0x123/0x790
[  460.841688][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.843735][ T5143] 
[  460.843735][ T5143] -> #4 (cb_lock){++++}-{4:4}:
[  460.846441][ T5143]        lock_acquire+0x1d1/0x380
[  460.848413][ T5143]        down_read+0x99/0x4c0
[  460.850307][ T5143]        genl_rcv+0x19/0x40
[  460.852287][ T5143]        netlink_unicast+0x585/0x850
[  460.854339][ T5143]        netlink_sendmsg+0x8b0/0xda0
[  460.856917][ T5143]        sock_sendmsg+0x394/0x410
[  460.859139][ T5143]        splice_to_socket+0xb3c/0x11a0
[  460.861865][ T5143]        do_splice+0x109c/0x1fa0
[  460.864029][ T5143]        __do_splice+0x33b/0x370
[  460.865985][ T5143]        __x64_sys_splice+0x187/0x250
[  460.868073][ T5143]        do_syscall_64+0x123/0x790
[  460.869970][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.872160][ T5143] 
[  460.872160][ T5143] -> #3 (&pipe->mutex){+.+.}-{4:4}:
[  460.874904][ T5143]        lock_acquire+0x1d1/0x380
[  460.876935][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  460.879008][ T5143]        anon_pipe_prefill_and_lock+0x16c/0x580
[  460.881562][ T5143]        anon_pipe_write+0x164/0x1b50
[  460.883863][ T5143]        __kernel_write_iter+0x6bb/0x930
[  460.886225][ T5143]        __kernel_write+0xf6/0x140
[  460.888432][ T5143]        autofs_notify_daemon+0x50d/0xd90
[  460.890807][ T5143]        autofs_wait+0x10fd/0x1b50
[  460.892901][ T5143]        autofs_mount_wait+0x132/0x3b0
[  460.895169][ T5143]        autofs_d_automount+0x490/0x950
[  460.897500][ T5143]        __traverse_mounts+0x1b9/0x8a0
[  460.899817][ T5143]        step_into_slowpath+0xb7e/0xf90
[  460.902079][ T5143]        path_openat+0xfab/0x2440
[  460.904156][ T5143]        do_file_open+0x20e/0x430
[  460.906330][ T5143]        do_sys_openat2+0x10f/0x1e0
[  460.909142][ T5143]        __x64_sys_openat+0x12d/0x210
[  460.911575][ T5143]        do_syscall_64+0x123/0x790
[  460.913725][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.916334][ T5143] 
[  460.916334][ T5143] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  460.919352][ T5143]        lock_acquire+0x1d1/0x380
[  460.921418][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  460.923550][ T5143]        autofs_notify_daemon+0x4f8/0xd90
[  460.925866][ T5143]        autofs_wait+0x10fd/0x1b50
[  460.927965][ T5143]        autofs_mount_wait+0x132/0x3b0
[  460.930314][ T5143]        autofs_d_automount+0x490/0x950
[  460.932777][ T5143]        __traverse_mounts+0x1b9/0x8a0
[  460.935136][ T5143]        step_into_slowpath+0xb7e/0xf90
[  460.937495][ T5143]        path_lookupat+0x58b/0xc40
[  460.939593][ T5143]        filename_lookup+0x202/0x590
[  460.941792][ T5143]        kern_path+0x37/0x50
[  460.943664][ T5143]        lookup_bdev+0xd8/0x2a0
[  460.945643][ T5143]        resume_store+0x1d6/0x460
[  460.947726][ T5143]        kobj_attr_store+0x58/0x80
[  460.949786][ T5143]        sysfs_kf_write+0xf2/0x150
[  460.951970][ T5143]        kernfs_fop_write_iter+0x3e0/0x5f0
[  460.954579][ T5143]        vfs_write+0x6af/0x1050
[  460.956715][ T5143]        ksys_write+0x12a/0x250
[  460.958256][ T5143]        do_syscall_64+0x123/0x790
[  460.960211][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.962529][ T5143] 
[  460.962529][ T5143] -> #1 (&of->mutex){+.+.}-{4:4}:
[  460.965486][ T5143]        lock_acquire+0x1d1/0x380
[  460.967553][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  460.969618][ T5143]        kernfs_seq_start+0x4f/0x2a0
[  460.971771][ T5143]        traverse.part.0.constprop.0+0xaf/0x650
[  460.974429][ T5143]        seq_read_iter+0x93f/0x1270
[  460.976689][ T5143]        kernfs_fop_read_iter+0x46c/0x610
[  460.979081][ T5143]        vfs_read+0x82e/0xb40
[  460.980829][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.984385][ T5143]        ksys_read+0x12a/0x250
[  460.986299][ T5143]        do_syscall_64+0x123/0x790
[  460.988350][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.990851][ T5143] 
[  460.990851][ T5143] -> #0 (&p->lock){+.+.}-{4:4}:
[  460.993712][ T5143]        check_prev_add+0xeb/0xe60
[  460.996146][ T5143]        __lock_acquire+0x1528/0x1f40
[  460.998585][ T5143]        lock_acquire+0x1d1/0x380
[  461.000809][ T5143]        __mutex_lock+0x1a4/0x1bd0
[  461.003012][ T5143]        seq_read_iter+0xe1/0x1270
[  461.005317][ T5143]        kernfs_fop_read_iter+0x46c/0x610
[  461.007588][ T5143]        __kernel_read+0x397/0xad0
[  461.009611][ T5143]        integrity_kernel_read+0x7e/0xb0
[  461.011850][ T5143]        ima_calc_file_hash_tfm+0x25e/0x350
[  461.014201][ T5143]        ima_calc_file_hash+0x1e3/0x380
[  461.016371][ T5143]        ima_collect_measurement+0x94f/0xb30
[  461.018704][ T5143]        process_measurement+0xdfe/0x2350
[  461.020920][ T5143]        ima_file_check+0xc3/0x110
[  461.023006][ T5143]        security_file_post_open+0xc4/0x210
[  461.025392][ T5143]        path_openat+0x5cd/0x2440
[  461.027452][ T5143]        do_file_open+0x20e/0x430
[  461.029511][ T5143]        do_sys_openat2+0x10f/0x1e0
[  461.031584][ T5143]        __x64_sys_openat+0x12d/0x210
[  461.033771][ T5143]        do_syscall_64+0x123/0x790
[  461.035814][ T5143]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.038495][ T5143] 
[  461.038495][ T5143] other info that might help us debug this:
[  461.038495][ T5143] 
[  461.042836][ T5143] Chain exists of:
[  461.042836][ T5143]   &p->lock --> cb_lock --> &ima_iint_mutex_key[depth]
[  461.042836][ T5143] 
[  461.048154][ T5143]  Possible unsafe locking scenario:
[  461.048154][ T5143] 
[  461.051004][ T5143]        CPU0                    CPU1
[  461.053109][ T5143]        ----                    ----
[  461.055235][ T5143]   lock(&ima_iint_mutex_key[depth]);
[  461.057133][ T5143]                                lock(cb_lock);
[  461.059300][ T5143]                                lock(&ima_iint_mutex_key[depth]);
[  461.062172][ T5143]   lock(&p->lock);
[  461.063536][ T5143] 
[  461.063536][ T5143]  *** DEADLOCK ***
[  461.063536][ T5143] 
[  461.066127][ T5143] locks held by udevd/5143: 1, last CPU#0:
[  461.068367][ T5143]  #0: ffff888028f0a168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  461.072447][ T5143] 
[  461.072447][ T5143] stack backtrace:
[  461.074478][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.077904][ T5143] Tainted: [L]=SOFTLOCKUP
[  461.079293][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  461.082299][ T5143] Call Trace:
[  461.083329][ T5143]  <TASK>
[  461.084303][ T5143]  dump_stack_lvl+0x100/0x190
[  461.085797][ T5143]  print_circular_bug.cold+0x178/0x1be
[  461.087458][ T5143]  check_noncircular+0x146/0x160
[  461.089040][ T5143]  ? find_held_lock+0x2b/0x80
[  461.090478][ T5143]  check_prev_add+0xeb/0xe60
[  461.091910][ T5143]  __lock_acquire+0x1528/0x1f40
[  461.093510][ T5143]  ? unwind_next_frame+0xbd/0x2090
[  461.095408][ T5143]  lock_acquire+0x1d1/0x380
[  461.096893][ T5143]  ? seq_read_iter+0xe1/0x1270
[  461.098361][ T5143]  ? __pfx___might_resched+0x10/0x10
[  461.100024][ T5143]  ? is_bpf_text_address+0x8a/0x1a0
[  461.101619][ T5143]  ? is_bpf_text_address+0x8a/0x1a0
[  461.103165][ T5143]  __mutex_lock+0x1a4/0x1bd0
[  461.104715][ T5143]  ? seq_read_iter+0xe1/0x1270
[  461.106186][ T5143]  ? seq_read_iter+0xe1/0x1270
[  461.107684][ T5143]  ? kernel_text_address+0x8d/0x100
[  461.109393][ T5143]  ? __kernel_text_address+0xd/0x30
[  461.111029][ T5143]  ? unwind_get_return_address+0x59/0xa0
[  461.112816][ T5143]  ? __pfx___mutex_lock+0x10/0x10
[  461.114499][ T5143]  ? stack_trace_save+0x8e/0xc0
[  461.116056][ T5143]  ? __pfx_stack_trace_save+0x10/0x10
[  461.117746][ T5143]  ? seq_read_iter+0xe1/0x1270
[  461.119319][ T5143]  seq_read_iter+0xe1/0x1270
[  461.120819][ T5143]  ? kasan_save_stack+0x30/0x50
[  461.122339][ T5143]  ? kasan_save_track+0x14/0x30
[  461.123890][ T5143]  ? __kasan_kmalloc+0xaa/0xb0
[  461.125418][ T5143]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  461.127162][ T5143]  ? ima_calc_file_hash_tfm+0x236/0x350
[  461.128930][ T5143]  ? ima_collect_measurement+0x94f/0xb30
[  461.130718][ T5143]  ? ima_file_check+0xc3/0x110
[  461.132238][ T5143]  ? security_file_post_open+0xc4/0x210
[  461.133998][ T5143]  ? do_file_open+0x20e/0x430
[  461.135527][ T5143]  ? do_sys_openat2+0x10f/0x1e0
[  461.137093][ T5143]  kernfs_fop_read_iter+0x46c/0x610
[  461.138849][ T5143]  __kernel_read+0x397/0xad0
[  461.140351][ T5143]  ? __pfx___kernel_read+0x10/0x10
[  461.141953][ T5143]  integrity_kernel_read+0x7e/0xb0
[  461.143571][ T5143]  ? __pfx_integrity_kernel_read+0x10/0x10
[  461.145817][ T5143]  ? ima_calc_file_hash_tfm+0x236/0x350
[  461.147724][ T5143]  ima_calc_file_hash_tfm+0x25e/0x350
[  461.149419][ T5143]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  461.151314][ T5143]  ? ima_alloc_tfm+0x21a/0x2e0
[  461.152841][ T5143]  ? kernfs_iop_getattr+0xc4/0xf0
[  461.154467][ T5143]  ima_calc_file_hash+0x1e3/0x380
[  461.156056][ T5143]  ima_collect_measurement+0x94f/0xb30
[  461.157763][ T5143]  ? __pfx_ima_collect_measurement+0x10/0x10
[  461.159637][ T5143]  ? vfs_getxattr_alloc+0xec/0x350
[  461.161496][ T5143]  ? ima_get_hash_algo+0x241/0x400
[  461.163131][ T5143]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  461.164899][ T5143]  ? process_measurement+0xdfe/0x2350
[  461.166606][ T5143]  process_measurement+0xdfe/0x2350
[  461.168246][ T5143]  ? __pfx_process_measurement+0x10/0x10
[  461.170020][ T5143]  ? find_held_lock+0x2b/0x80
[  461.171536][ T5143]  ? kernfs_fop_open+0x887/0xd50
[  461.173099][ T5143]  ? kernfs_fop_open+0x887/0xd50
[  461.174793][ T5143]  ? kernfs_put_active+0x93/0xe0
[  461.176888][ T5143]  ? kernfs_fop_open+0x3da/0xd50
[  461.178951][ T5143]  ima_file_check+0xc3/0x110
[  461.180862][ T5143]  ? __pfx_ima_file_check+0x10/0x10
[  461.182952][ T5143]  security_file_post_open+0xc4/0x210
[  461.184959][ T5143]  path_openat+0x5cd/0x2440
[  461.186559][ T5143]  ? __pfx_path_openat+0x10/0x10
[  461.188622][ T5143]  do_file_open+0x20e/0x430
[  461.190238][ T5143]  ? __pfx_do_file_open+0x10/0x10
[  461.191970][ T5143]  ? _raw_spin_unlock+0x28/0x50
[  461.193522][ T5143]  ? alloc_fd+0x471/0x7a0
[  461.195173][ T5143]  do_sys_openat2+0x10f/0x1e0
[  461.197111][ T5143]  ? __pfx_do_sys_openat2+0x10/0x10
[  461.198797][ T5143]  __x64_sys_openat+0x12d/0x210
[  461.200373][ T5143]  ? __pfx___x64_sys_openat+0x10/0x10
[  461.202088][ T5143]  do_syscall_64+0x123/0x790
[  461.203578][ T5143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.205777][ T5143] RIP: 0033:0x7f300eca7407
[  461.207325][ T5143] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  461.213568][ T5143] RSP: 002b:00007fffa2fd52c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  461.216213][ T5143] RAX: ffffffffffffffda RBX: 00007f300f383880 RCX: 00007f300eca7407
[  461.219090][ T5143] RDX: 0000000000080000 RSI: 00007fffa2fd5440 RDI: ffffffffffffff9c
[  461.222137][ T5143] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[  461.224835][ T5143] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b2372da7f5
[  461.227387][ T5143] R13: 000055b2372da7f5 R14: 0000000000000001 R15: 00007fffa2fd9a90
[  461.229850][ T5143]  </TASK>
[  461.258996][T21329] device-mapper: ioctl: populate_table: target parameters not NUL-terminated
[  461.300781][  T852] usb 13-1: new high-speed USB device number 22 using dummy_hcd
[  461.440909][  T852] usb 13-1: device descriptor read/64, error -71
[  461.562142][  T852] usb usb13-port1: attempt power cycle
[  461.920886][  T852] usb 13-1: new high-speed USB device number 23 using dummy_hcd
[  461.951367][  T852] usb 13-1: device descriptor read/8, error -71
[  462.021069][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.190801][  T852] usb 13-1: new high-speed USB device number 24 using dummy_hcd
[  462.211214][  T852] usb 13-1: device descriptor read/8, error -71
[  462.321244][  T852] usb usb13-port1: unable to enumerate USB device
[  462.421386][ T5740] Bluetooth: hci0: command tx timeout
[  463.061332][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.269506][   T43] kauditd_printk_skb: 29 callbacks suppressed
[  463.269517][   T43] audit: type=1800 audit(1789776930.359:41761): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35238 res=0 errno=0
[  463.270202][   T43] audit: type=1800 audit(1789776930.359:41762): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35261 res=0 errno=0
[  463.321386][   T43] audit: type=1800 audit(1789776930.419:41763): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16786 res=0 errno=0
[  463.324820][   T43] audit: type=1800 audit(1789776930.419:41764): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16786 res=0 errno=0
[  464.100834][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.141091][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.180829][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.220904][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.019725][   T43] audit: type=1400 audit(1789776935.109:41765): avc:  denied  { write } for  pid=21337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.060078][   T43] audit: type=1400 audit(1789776935.149:41766): avc:  denied  { write } for  pid=21340 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.161565][   T43] audit: type=1400 audit(1789776935.259:41767): avc:  denied  { write } for  pid=21343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.199843][   T43] audit: type=1400 audit(1789776935.289:41768): avc:  denied  { write } for  pid=21346 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.260998][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.300934][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.340903][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.620120][   T43] audit: type=1400 audit(1789776937.709:41769): avc:  denied  { write } for  pid=21350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  470.659413][   T43] audit: type=1400 audit(1789776937.749:41770): avc:  denied  { write } for  pid=21353 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1