last executing test programs:

1m6.510481967s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000780)="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")
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r4}}, 0x18)
ptrace(0x10, r2)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(r1, 0x400c0930, 0x0)
ioctl(r1, 0x932, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x20})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newchain={0x6c4, 0x64, 0x624, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {0xd, 0xfff1}, {0x6, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4000}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x688, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_U32_SEL={0x1c4, 0x5, {0xa, 0x5, 0x3, 0x45, 0x8, 0x7, 0x7, 0x3, [{0x4, 0xb, 0xc, 0x200}, {0x13, 0x0, 0xff, 0xfffffff7}, {0x6, 0x80000001, 0x6, 0x1}, {0x0, 0xe, 0x7, 0xfffffffc}, {0x2f, 0x5, 0x8000, 0x6}, {0x1, 0x9, 0xe0000000, 0x6}, {0x8, 0x9, 0x2, 0x4e0c}, {0x1, 0x0, 0xa, 0xb}, {0x18000000, 0xffffff05, 0x6, 0x800}, {0x451, 0x2, 0x5, 0x6}, {0x7, 0x2, 0x81, 0x3}, {0xef, 0x0, 0x257, 0x6}, {0x3, 0x3, 0xd, 0x3ff}, {0x2, 0xde82, 0x4, 0x4}, {0x5, 0x5, 0x8, 0xfff}, {0x8, 0x78, 0x3, 0x2}, {0xfff, 0x4, 0x0, 0x1}, {0x4, 0xb, 0x80000001, 0x2}, {0xfffffff8, 0x830, 0x5, 0x7}, {0xcff4, 0x9e1, 0xffffffff, 0xa9}, {0x629, 0xfffffffa, 0xe, 0x5}, {0xffffffff, 0xfffffff7, 0xff}, {0x8, 0x3ff, 0xfffffff2, 0x3}, {0x1, 0xffff339b, 0x10000, 0x6}, {0x40, 0x6, 0x1ff, 0x4}, {0x9, 0x6d, 0x6, 0xfffffff9}, {0x69, 0x9, 0x3, 0xfffffffd}]}}, @TCA_U32_INDEV={0x14, 0x8, 'bridge_slave_0\x00'}, @TCA_U32_POLICE={0x4a4, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xfffffffd, 0x401, 0x8, 0xf, 0x80, 0x200, 0x0, 0x8, 0x6, 0x57, 0x1, 0xae, 0x81, 0x7, 0x3, 0x5, 0x6, 0x6, 0x1, 0x5, 0x3, 0xd966, 0x2, 0x9, 0x3, 0x1, 0x9, 0x4, 0x8, 0x7, 0x8, 0x7, 0x5, 0x3, 0x6, 0xb, 0x7, 0x0, 0x8, 0x4, 0x7, 0x8, 0x2, 0x18b000, 0x18000, 0xfffffffc, 0x52a1, 0x4, 0x2, 0x4000, 0x9, 0x2, 0x2, 0xfff, 0x0, 0x1, 0x2b3, 0x2, 0x8, 0x101, 0x1, 0xdc87, 0x3, 0x5943979c, 0x10001, 0x7ff, 0x9, 0x10, 0x7, 0x6, 0x9, 0x6, 0x4, 0x3, 0x6, 0x8, 0x9, 0xb, 0x3, 0xfffff309, 0x81, 0x7, 0x7d, 0x0, 0x48, 0xac30, 0xd, 0x8, 0x7, 0x3, 0xe455, 0x2478, 0xd7c, 0x2, 0x5, 0x4, 0x9, 0x1, 0x400, 0x0, 0x0, 0x2, 0x1f, 0x100, 0x3, 0x7, 0x12000000, 0x5, 0x1000, 0x372b, 0x2, 0x6, 0x80000001, 0xffff, 0x6, 0x100, 0x9, 0x3, 0x62dd, 0x4, 0x64, 0x3, 0x10, 0x2, 0xf, 0x7, 0x1, 0xd15, 0x9, 0x3cc7, 0x80000000, 0x0, 0x5, 0x3, 0x8001, 0x7, 0x5, 0x80, 0x2, 0x4, 0x7, 0x7fffffff, 0x2, 0xfffffff7, 0xa, 0x7, 0x101, 0x5, 0x0, 0x5, 0x5, 0xff, 0x6, 0xa, 0x823, 0x5, 0x0, 0x6, 0xfffffff9, 0x400, 0x9, 0x9, 0x8, 0x9e, 0x4007584, 0x4, 0x4, 0x81, 0x5, 0x1, 0x3, 0x9, 0x5, 0x5, 0x9, 0xf, 0x401, 0x9, 0x400, 0x7ff, 0x85, 0x1ff, 0x4, 0x8, 0x6, 0x0, 0x8, 0x6, 0xa, 0x37, 0x3, 0x6, 0x472e, 0xffffffff, 0x100, 0x0, 0x4, 0x9ccb, 0x9, 0x6, 0xe69, 0x8, 0x8, 0x0, 0x100000, 0xffffff01, 0x9, 0xfffff4c5, 0x5, 0x5, 0x5, 0xfffffffa, 0x10001, 0x7fffffff, 0xb, 0x3, 0x6dd7, 0x5, 0x7fff, 0x8, 0x2, 0x0, 0x2, 0x8, 0x8, 0x5, 0x40, 0x1, 0x4, 0x1d, 0xffff, 0x8, 0x4, 0x2c27, 0x6, 0x8, 0xfffffe01, 0x5, 0x8, 0x7, 0x3b0f2caa, 0x2, 0x9f, 0x1, 0x7fffffff, 0x5, 0x7fffffff, 0xdc, 0x174, 0x1, 0x5, 0x6, 0x4, 0x3, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffcffffff5, 0x6, 0x1, 0x2, {0x1, 0x2, 0x3, 0x1ff, 0x3, 0x9}, {0x0, 0x2, 0x3ff, 0x9, 0x0, 0x2}, 0x3, 0xfa4, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x6, 0x3, 0x7, {0x9, 0x2, 0xfffe, 0x2, 0x0, 0x4}, {0x6, 0x1, 0x2, 0x4, 0x0, 0x2}, 0x6, 0x3, 0x122f410e}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4f2}]}]}}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x2c008890}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x3, 0x3}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x3ff, "f088f667e42e493fdad352b4b6d63e7f"}}}, @TCA_RATE={0x6, 0x5, {0x94, 0x66}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/pool_threads\x00', 0x1, 0x0)
write(r9, 0x0, 0x0)

1m5.999257972s ago: executing program 0 (id=14):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10380300000100002800128008000100677470001c00028008000100", @ANYRES32=r2], 0x50}}, 0x24000840)
ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x1, 0x8, 0x73e8c85})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x1, 0x1, 0x3, 0x1})

1m5.015204873s ago: executing program 0 (id=20):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1m4.979004285s ago: executing program 32 (id=20):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1m1.341877628s ago: executing program 3 (id=66):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))

1m1.237879862s ago: executing program 3 (id=69):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'pim6reg0\x00', @ifru_mtu=0x8})
ioctl$sock_netdev_private(r0, 0x8947, &(0x7f0000000000))
setns(0xc9, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014)

1m1.191545148s ago: executing program 3 (id=70):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000200)=0x68)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x3, 0xff, @generic=0xa7, 0x0, 0x4})
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0x505, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delrule={0x30, 0x21, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x30}}, 0x0)

1m1.182457005s ago: executing program 3 (id=71):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800090400000000000000000a002000000000000000000008001e000100"], 0x38}}, 0x0)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000083, 0x10001}}], 0x20})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x2, 0x5, 0x0, 0x5}, 0x20)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
write(r1, &(0x7f0000000200)="090a0b0c0405060708090a0b0c0d0e3a80111213141516175c78", 0x1a)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r10, 0x0)

1m1.016785353s ago: executing program 3 (id=72):
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(r0, 0x0, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94)
setns(0xc9, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r4, 0x5)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x452, 0x0, 0x1}, 0x14)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {}, 0x400, "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"}, 0x418, 0x7fffffff})
r8 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r9=>0x0}, &(0x7f0000000200)=0x5)
setresuid(0x0, r9, r9)

1m0.755285312s ago: executing program 3 (id=74):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0xfffffffb, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1020, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000005ad98151dc188b593112000500000a34000000060a010400000000000000000a00ffff0900010073797a300000000008000940000000000c0006400000000000000005140000001100010000000000009d4b079500000ac5ec2e4afe949dad4c1551edd5b2ad32b9ac09044a3115e7ac10fc31397235e5048ecc64357691db8c22f482bd4e3c1d81c4c4845fe2af7ab6f2eff90b733845d600a42908b15d17cebfdd3f8af57b6680d3e715ef7cc7db3b731e132a871fc63ab44fa7a1c961743dacb680634969459fee3cef1fc41b6b6a9bc9a1f07559947354bb4b8787c637e56132a1f086e59b995f", @ANYRESOCT=r1, @ANYRESHEX=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008086)

1m0.708274028s ago: executing program 33 (id=74):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0xfffffffb, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1020, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000005ad98151dc188b593112000500000a34000000060a010400000000000000000a00ffff0900010073797a300000000008000940000000000c0006400000000000000005140000001100010000000000009d4b079500000ac5ec2e4afe949dad4c1551edd5b2ad32b9ac09044a3115e7ac10fc31397235e5048ecc64357691db8c22f482bd4e3c1d81c4c4845fe2af7ab6f2eff90b733845d600a42908b15d17cebfdd3f8af57b6680d3e715ef7cc7db3b731e132a871fc63ab44fa7a1c961743dacb680634969459fee3cef1fc41b6b6a9bc9a1f07559947354bb4b8787c637e56132a1f086e59b995f", @ANYRESOCT=r1, @ANYRESHEX=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008086)

36.287602218s ago: executing program 4 (id=387):
r0 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0)
flock(r0, 0x1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103)
r1 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0)
ioctl$FITRIM(r2, 0xff0a, 0x0) (async)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async)
stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e27, 0x8, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, r4}, {0x3, 0x1, 0x8, 0x2, 0x9, 0xd, 0x9, 0x5}, {0x3, 0x3, 0x1, 0xfffffffd}, 0x0, 0x7fff, 0x1, 0x1}, {{@in=@private=0xa010100, 0x4d4, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x5, 0x2, 0x4, 0x1df8, 0x6, 0x75d}}, 0xe8) (async)
r5 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r5, &(0x7f00000007c0)={&(0x7f0000000180)=@phonet={0x23, 0xda, 0x5, 0x9}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="75ef3478800e951a4d579d1133a0b0c7b73e58bd9e8e68bdb1c28c0b2fe3ea768504c052561370bf719451e6412b225d09909542babbd7327642aeb00a2aba1aad37e13a249112440098c396986919b08dc69dd38b", 0x55}, {&(0x7f0000000280)="aab53263e11b54f7940c4db960dcfe99347c8eb37c7c9523461fb5fbc1f6806df5504a2391ea4463c58f7f56212e35f85e12c94b7b01955070a46c", 0x3b}], 0x2, &(0x7f0000000340)=[{0xf0, 0x115, 0x4f73, "c34e4c618f254fd23a74bbde8d2ea7b1ea8513886e6381a7816d80db8a0bd21461e9eb5054705758deafbe0b8f9692f44c078c3a093e43179af250263af4666f2128bbcee3c99a25e69612e878f0e7655d2ad021ad4899199f5164c10424e999881c819d21ac1a65bde4c3c18a95f7b7330a7c8f0b77d285486c4aab5528f0877715c012ff495851555df5ce264c6c0a869a9a4c951a9f06b90159455b992b6e158e1df24a61ffcb557846e3b3b920848dc6e5d260395af58e9912d346564eb7178be5f703f19566399b8bf4b0f9cc3716958a564f4c5a7e4c9bc304d2"}, {0x100, 0x6, 0x7fffffff, "1a30ccfb64926f7083167b1eac94708197f859b404fec65ccb5093ae2dd605a9d2da11938deadd05a7cdee0f9215ffaaabb7d22addf614522332e27b2cad74089b921b3c3396da9bbcb1cf88dc6559bd117274fe5b405d3166e47f3e3e28119f21fb3d895eee08e0a80aa3d3e4bfe49c07d5d456ca65b0ab2f8204654853e6158c4a25f92a0d490dba892efac330067234e86b344371a07692a4fd7f26bb5de4b8d25406a3d81d010283e1d6caa1e810d0a86757cc5ad9d5bd6b95cd2bbef7112e7750f61e409c2801b5f14c30b2565378cebbd3e831a19323e1332afd4b8e963e60c9129e14ed467f4897ba8f"}, {0x100, 0x117, 0xd9b00000, "a0339ba96ff8cd956796c8bd5bf12b78727034e4a735de03dc9eb70183c71613e2422cda9b47852052d88ae43d06fb48e190b820fdc96f1ee1474bba0440016a9d45927b40cffdf1e0d8b70bd3902832c54f3f5e4dff57abbc8ab709d0b50fe15228e05b5261e3186a1a56d15f9f5620f4b6a894d4957ff5b83cb2562c0a9ac923b7f95857e66303fe7c5035bfb7f168e7f0d4539568d531cb3e6e33f90ade9f521c0eb6313f7701c638bda703cdad3bc23d555035de0d496c12fa46bdd167aa71ef877f22b921573e32b704a6df18dd67445e4976f07b74dfb8c8b8aa9ed69d6795703b17395851caa0"}, {0xc8, 0x111, 0x0, "f103258b02069148e013e053233ef2385d657bd1bde5d3e9168aa7ec9d03b45466c0d5ab57da4e3b8d783dc5ad2a8be89824612c7de756274f6ed7d0c6ec6e8ddc6f09ef15ca350aedde47ca53abf27a68ea185ee0445a8f4ec41c912d3f44a150ffe15c76c00953e85d7f3d5a8f19fabc3d2cfb3b1f4cd3bb76c3aa7854ac16e81731772222f24e83f7fa5f7a6ee5290ddf964259231b192cdf2261a50f291140f912cf7367a1331d155cf970e5b1a509c8a5d92b"}, {0xb8, 0x108, 0x3, "3ed2412469238c820bec63d4dd764b73676c3875f2a25060a44b69558c8f54f710ecbdeedde787aa4561304e5aeb949ce9a58229c58242d89999ce6d08a523826d9cc36b17f7500d3212665a684bcd35f059ca20278e86e7681281fcf124cca64904b73f518f287aa014d581b91b1454ab73a65cfdac0ccc9a6b40cf913d7be65ed1c9c5f4505f1a80259bfc6d0f26b5812cf15c506e5e61f099eaa490ee65bcebeab40e62e5"}], 0x470}, 0x0) (async)
r6 = socket$kcm(0xf, 0x3, 0x2)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) (async)
unshare(0x2c020400) (async)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

36.207352343s ago: executing program 4 (id=391):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
r4 = syz_open_dev$dri(&(0x7f00000020c0), 0x4, 0x88000)
mmap$panthor(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r4, 0x3)
fstat(r4, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$fuseblk(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x42040, &(0x7f0000002240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}], [{@obj_role={'obj_role', 0x3d, '/dev/uinput\x00'}}, {@appraise}, {@uid_gt={'uid>', r5}}, {@smackfshat={'smackfshat', 0x3d, '+!'}}, {@uid_lt={'uid<', r2}}, {@euid_gt={'euid>', r2}}]}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x78, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x78}}, 0x40)
openat$binderfs(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0)
r7 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
setsockopt$packet_buf(r7, 0x107, 0x1, &(0x7f0000002540)="9f3651a91524c1224197871377d89949b784eaa851b251c397a6b4a9ffca61cea35da4524c9b97c2eca2356d62", 0x2d)
r8 = dup(r1)
ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000002580)=@vmx={0x3, 0x0, 0x2080, {0x41000, 0x1, {}, 0x1, 0x3}, {"f7736e0fc923f976b5231dd330edde39b5e20a4d8e24ba43bacdfc1e2f46ce87159723ed2dcb1c0ca876141334b98e162f44d62b56248d802290edea1a624a1c0f386369f6e741fb46bc7ac6c2563ef94e77ec3fe2f107dadf5ced6ef90128edc45dab3f916d0e703ca0afd2cab12c36cd71db07e00ecba725c91a9f7d390b08f003219ca56884d4c53c1a441a5a08f406144a033ae0553f331f3558bbe3492666403ab25ce2fd03fbd33758e4a2abafd0b7f081f82c42ff0d8d2d4755a3f582336cc2cc80e5894df79ac62245a73b049eaa2c313f2cda9cc9fcfe4a58a1303c1a6bbb3fc42846b13ea413f116f11f60f58ee44a64a29ada821cd7bfcbafe93b009fa4ede8f3f052a488443849cdce703e57cd7b0c7ee50a468d1175b4ff38d63ce515ae2684ae60e9668cf8d9904dbcfb9ccd5f5d9b4b402b23463559844b7ec724daaf8befdd12b8950e5233ec83f49a13df62929f5079ed98e95e153a0ed15089e85d832270bdb625459632ede764a2ea8e4447cb1f18d1457ee954d3d1a7f49a6ee8100a3b34e16eda06b4e527adf8791ff8472c12bfc638877ddbe0227ea6f5463d09687d9c4ae488a3d7d4a8cc5c8226becceb3e6a0fad9b36d47d8c3daf9085c69329f45706fae29f54e244816b75f3620d0a3da4bfe0d450406fafc597cb496383e841fe5eeb3d96d26c1808d6642240296d7af902023bb9a5c0f1e9c2c33242efb7ef357145087af538113ad45eae0a7d714fdf14b68ee313ca0aa5895d57976882fb75d403a2d55eec2458e9b96fc2e779cc093221f789fad970cea77d069d3befe5bacecb504a101cf0a60e5c51f9a82dcffe8fc54802f849ae7a680823a8868b15059d0b6b194cf474c3b35bd677823e662b8ab34474dd0175fcfbc6d8bc0f63d7c88ee558b3a3e3ea00eccbc6c50d9d8a5ec5cf58f568fe0136e65be315e08928597c40ff49d31ada70f69235282e10435cf8375282a400c16d2a08c1b82cdb5b7a0bbe7f66e701b45aaf8b9766d55ed11a21209a60d95feb34848c1298cb91de02e0d924efab4863b5d9e1ce8444d927751e9343f9791c927f4911167f22277075cc395b1f5c516fc1a0b3442a6e31b7fdc29e8d5e1debbb45a7962a2eef07be4779dad9d38a4ecfa94fb68e96c3421ec472d34dfb778f293ec3a4f934eb2d2a0aae45120d7a193a655d8bc86b40d5c968d6a68b1bfafa58f046b24a39ed997f7487d3fd91cfc6b9edd236832f276b965c93ae80201885cab0a9c809fdfb309f4f9217ac1d052bbe7098c92635585aa402ebd51bb138ee61b125c67a52b4eab043f3d3218ce1ecf39b4ac5be75b4310215f1669f1484e1eb2afadff0b94b9fcdfa823ece85708b646458b84c08834cf32dc08aa8d43ab9a8a8f51e73a8701092b388fb264e45000de4aea4845ac5de51a53b6756ffcfcdc70aaa1f1ed8ecc1757159a6371bcd21e8ef026fd0e36b6091802268702f9de98e1f522679d7546389bdf7a53ee141616c26bb9bf937392dab7d274e2b1942391466749919127e05417cb0b0692067909700a2e6e523a165262d0deaffb8ce6c03fc288fcdb8232f0a3baddf2080540c342d4ef4bdc8aa3d78942a15b6115cda6b434a29cdecb122e16b5f3684df0c3ddeb36a198bf076c73ad27089a0a6f775fa65ee9f6661253e1572ce3c202bce2894700e77c0227f84e840093cd519d590675ba46d6e4501ca369f205d7fec08f8a59f85d05672f7b1cb58adc6b3ac86e588602a30755c6c5b158212183d4bb724ba9573bbe38046fb6e5882e0f08f4c4737f33f91b965e3ed37cde53bb02a19aa3dbe9cdf484de82f1e6da9ac29dc1b8f8f12f7c328fcbfc7db9d3fa2ce583151433daaea8c4e36257daade910518402c96f1b2cd34c4c918308b574c3dd662a6eeed48431d5eeba67b5f10f3a9e23cfa10e011b965074a11dbf367680a5b093d2da4b06cba3ceada2ccdda3a3e3e6c1051dcc37922adcf6984f26e03e940602b83bbfad9bf902ed0e7533eac31fb6e357ca258634d761ea1d1e91883971bc031da57f1b70ba736eea6eb1959581a252719db2259b1adbbfff8701307cea5e08f7d3991279c96b09726ca4ea17d9871d3a94f688fce51a397005d6f59e4b8d8455620295166cdb7115e00572dca753a19d6e05bee0d986bf73f622ba46dd27c40e381b9fe076e96e5032933854f350c04d5379e8c9993edb529a1ac7831996880f4e7cb44ccab49b3f49c27e7760811dafa385c1d92fd5fc9d905a605df4b184d1144953727f9a21abd6cf3ae4b0da329b0990d661b09206118d506470f770424ea1250e29dd068dc92fe5bd798a745985c80ca29440e9f73982372181b7fa0d9360d77bdb05cda7be7ac409a1d2c7a7492f75413eb3e96704c9704a8cd988b06361f883d86eedc45cfdfd3173c6587c42e03e6be6f2ed6412a54cb39daac265a5468cfdf215cea33932385ca182a804cd2c7625f134eb992028600d2818ad64f861369f37f4519de6971e61000db2dd3aa45c090b28b0bcc842c3d7759989ecf89e5571c118d1c5437489f01bd4262e39b87ee28430838cd852386b371582db1a45a08f4ff9044b80dd7675f25b87ff0e01f1740a138075e3506b464332d2dcc6f6ef33f9ed9f9ce215ce696942c924f4150d64f9d0be6d9e7a2a7a4d865b8e1e84d7956b403393ecec28130242a069437e2d578df5c974379d1a0292fc9f888d6076a57787b341d1e76b578315cac36cae9daab817a740a073ff87e707fd26962da3b7272d7e511d05d8bad8b09939ce647d9ee44d100b8383648dd7345a2b568de70a0fb5909030f048f097746bc783718e1f28cf1c56f2602276e0b78560307cca022f0421ea0e6413331cdf0c052f2df77b66a9ee7ebc781f47d2bc00d082a9bfccb37e97ab2b89d8695917ec0b8aaab3e08c9cc8d15c44b506da69dd1df1c2dae8bbef49f5f97d3c5044ce22bd6010ce9d746a22845167d314c17fefdd6110a707e0e584a655f8c347eda6e4603adcb5c01d70ad038314d005368106c76d1fa4fddbd33f0e9021b28f6d9e4698d1986da12eaa2b963df7a3bb2c98caafa7b0226a124280f8bdfa0b9163241a4f3c13225fc55d7440d23c47b94c449aabd7b602102a524943177faed448b14a883036f41567b9238fde6d7a59a258f2d7dae372976beacad92b6940de184b8ddff353308b5af9acda127821cab89171ff385aed5924e676cad1c669c449b86ede8fb5ce08c6186b36b37eae900ca59f6f6717a1dfda547e3b6ca9a9930e3b2843b0b115a6cfa0e2ba40683d66042b8d914207a8b6065b40021384915689727eaa4a77f8cc2d97786a2e597a6468e2232b2ea6a00691c5f8091b6fd8d312744d1a81bd19a22091924ce919c038e17783dd0e804e76d8ef35e0781d04ebd96cbf407fdbf2292e5f601750d89ce994f06960ee7227bd9a32f5bc73b47d9606a497c8b199342c8da2b8745929405ed445f0d1361b571c4d64ea56669095b10c15699eb0e52afbe0d8bfe7cd41e9ec5a943f591d07cc5f55ab5d007c06707c9c42b23655f84b008d356f0276456bd3dab7d41b4069f8a8030e3b8ec17dcfa4e07364eeadd605a570cc37274ec15e40dc36def4fc336ce5263469883c8c39875095ef5dd3e4b6962cea6ff1bec12780c768568ed197cb255c603113aa8968d4ea7ff30102d016c18512a23272360b821e1ee2af17148a17c04f7176de418c974374e75259261216a07044a4813ab7bb8f2344dfb43179cd20c83ccdc6c1832950cd730e87c270db03a1c092253d13df55b68aa1035ac4ae18785559849d28d1a7c7bdd971ad1f9c27ccb7471446c93f15f681f8d95891150202490e6d1c713df5b8b62badfbeb649cea687d6b36a5dc4212dcc6ae65d2f6df2fe750097fc1577aa13d10f17ab8fb0971319b081fb1ad1556f269f678625d431e3e2d0c81d6cf07e4f7102e62b9ce05875f1dbb19371be97b2f3ca4bfe63ff7ba0f4e96eda5970216cf1f2be048d4ae59b447e5a6e5dbd0437dba41567c1280e7c39b5affaf4fdc554859d20223161f093a438bcc5411666c7f2b5bf0294bb7fbed83f8dc0a453a7ced6264e52d40303b8634f57ce1893cd2d45e6a0af5fc7b2ebba15e3acdc5e6b7770590d9e8396e03728d3604379744de6eb5162078772643b3d416c693ad51c450d5190c16e23580e283b2fef191c3cae2ec8021a3b1621fd5d2b6fd29ebb3530103a5e30ac1b6a45f32283d5552a58995b4bbfc62c453d2cae08a70127f38f1535ca2a09f01563f374828a6595647e4021b831928533dff2db54f85b5c851ad2fa4033aa4e0000b8287565cd0bb14f8b62d2b757f0722efedc5be50ca43215319d021cfbbd718b791dc9070da002b417fdc26f84fae700b6a204e6623722e8289c3b28c570957effa39d0b6d379f7b06088c3daba26245a880bc15b713484cb5b2cf16195aa07ff232c55472ce68c1971e995d1ca537499b3b2b12ef4322f1c30b833209112e6db107a7285bb852e4d3648ad5bff44a9af271d069ed9120737ef61853cf20d99d886261a1248a1cc447377e9a323e731b707b0c54f863506ab1d3c0292485431a6c4571d6ea8a91f0822c5452fb02b89f36225f3bb66b62018981d772cd776661464e01dae5f7835b3a266a7674eb779bb98bbd55178011e05cd83c8a2b5401ff536420c18c4dbbed395f90ca44fb6f25919ffa3c78ad663cb24641916ea0be19b5d48fc542d0c55fe29c845f4c68af6f007ab4c51d854a168526156dff3491fb1966240001338d920fc803c24e99a27961d06bbb785db5eeec08eeb7d98bfbd7368431508676abfa4080fdce7919d54173dba19faee3f0d5b38add9eea678ad38d1a969a6fac4859cd6720ebf43120aaa666b7a11c587ea6697085ac0720e4de3e2a2e95aa04f8e86533b61be78ba09776c8f021467832eb9a6d85d06e35412b7ebfd3da6d8c317eb098747089eb372ed582281db249f60960dc39f2d692e3f0c70a82a2b42ab848eddbe3dffa40dca29e87ba6a15bb13c8688bb72ce4984385c3f4bbad6e33bdc00e24da57c54276fe5c7ed3f2604782ecfe74bec0776066b418b423cf91a306ff98fd0608bdb3ddeac8be7c91ed3560db94acc68e5061cca2e483041a5b81038b373e58a8f2321384d66e5f805d864e5f8c50fbae104e9a5aa1d63539c62aad4151bfc046a74cb9f9b391693ef4b88bdc98429cf98beba44f5e3de3ae3fb19707d375fa6298d26740769200f9d2929570f50890e65c89b0204e447224d9bbd484aff5ae304e69658d5efb3fe5a9f351ad9a354acf75880a92ca3b1d62f0af3aca0934caa276a67edd67aad1c21d8f7ef58a33cb7d82b758e9357caa84d6052dc96eeab1f9e6202cd56197737034d49d363f062eb2ffd4de6405ff29dff5327f5a00e726e96b58b3b401d049b410bf9e6f94cf4effdc095de344cd55be7df138051952c6bac330ff9dd678efd93af4a48f806f70d47f24152338ca99618870919a02ff233a79c8fc852ea2d81c9b6d61606373c984fdf43167e9f630ebcd197488bf1c1b40a980732bfa9b12ade62d665f8893502ee766656fce4357ab0eb9176e781da2e9623a5ba5ca1302003389c71d2ee8e2f9962acd81a79a92022c5f24a539f9cade7ffe0211f0baffeb828faac08d9dad87bb4a419c11904bc55b54ed912d9804c3e94bca7e6d6bdacb45e084ed55e6d3b50900790cf7fd44416f65e84b5daa1ebfaea262ff50ec1ec7dd54ab973af396b81a", "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"}})
r10 = syz_open_dev$sndpcmc(&(0x7f0000004600), 0x2, 0x82000)
mmap$snddsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000001, 0x1010, r10, 0x3000)
ioctl$TIOCGPTLCK(r8, 0x80045439, &(0x7f0000004640))
ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000004680)={0x9, 0xda, 0x2, 0x0, 0x0, [{{r1}, 0xfffffffffffffffa}, {{r7}, 0x4}]})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r11, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x5cdd6f9c291256f}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004840), r8)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000004a00)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f00000049c0)={&(0x7f0000004880)={0x120, r12, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x291}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x333f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x400c815}, 0x8000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000004b40)={&(0x7f0000004a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4, 0x5})
r13 = socket$can_raw(0x1d, 0x3, 0x1)
shutdown(r13, 0x1)
name_to_handle_at(r7, &(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)=@reiserfs_4={0x10, 0x4, {0x512, 0x2, 0x10000, 0xf}}, &(0x7f0000004c00), 0x1800)

36.097394545s ago: executing program 4 (id=393):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000600)={0x3, 0x1, 0x0, 0x13, 0x4})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev, <r2=>0x0}, &(0x7f0000000180)=0xc)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x410401, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {0x0, 0x5}, {0xffff, 0xaf2c3c36521260e5}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x800}, {0x8}, {0x8, 0xb, 0x394f6f1b}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc800}, 0x4)

35.221337916s ago: executing program 4 (id=405):
eventfd(0x2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000800000000000000480de8001470042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800040004000000"], 0x3c}}, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x2, 0x10, 0x4, 0x10, 0x800, 0xfffffff8, 0x80008, 0x0, 0x87, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffc, 0x7, 0x101001, 0x80000003, 0x489, 0x2, 0xfffffffd, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
dup3(r4, r2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000b046515efff646c70095000000000000006a99892a235f"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8}, 0x10)
syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
syz_emit_ethernet(0xd81, &(0x7f0000006140)=ANY=[], 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf250200000008000000", @ANYRES32=0x0, @ANYBLOB="86f375ec4af6efda4ad71f55f3b4bf39c4cff967969181be141e00ca0e87335665d0b67af8ef6e4ff6188bbd24679f71b002204864fa9754ae68ecb27f8844233adf7e2d1f9140f92633e4b369d8d3240235d322efdd866de4ee41363edfa6ca5b78fe62e1687d7effffffffffffff7f31f62c3a5013271f0f47183e2a1f74f386fb89374639c0576fe6896ad22f7db531406c8196d8b349699d03f1262cfa7a9c100465128b33343e73e41189444e234c81123d1cd3f3eb61974ec533e9ee3abec0c459387407f1fde3412ddc7b432033a36b3c21c3"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x0)
write(r9, &(0x7f0000000140)='0', 0x1)
ioctl$KDSKBSENT(r9, 0x4b49, &(0x7f0000000180)={0x4, "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"})

35.146539401s ago: executing program 4 (id=408):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

35.055877625s ago: executing program 4 (id=409):
r0 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)

34.945378733s ago: executing program 34 (id=409):
r0 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)

22.705395099s ago: executing program 2 (id=550):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000740)=""/138, 0x8a, 0x40)
write$snddsp(r0, &(0x7f0000000080)="0ffe51cd2a5e12ceb88c5136e01019c974927eb6f556f170b1ea5e659ccf93bd1875c39265acc49a97ddc293e92dbd76e95bab28be6e9497763d89fc6ea6a93b65303a1591278c8378ac5e6a55269ce48d1b3e2f1f4e13403c004730e6a1234f165042d8b57e", 0x66)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e0005a7a3000000000010000000000000000000", @ANYRES32=0x1], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, 0x0, 0x20000804)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000000))
ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000040)=0x800009)

22.064919645s ago: executing program 2 (id=559):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000240))
socket$inet(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
rename(&(0x7f0000000000)='./dev/sda1\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000054000/0x3000)=nil, 0x3000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140)
r4 = epoll_create(0x4)
epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a, r3}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})

21.916896174s ago: executing program 2 (id=565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000040)='on', 0x2)

21.768133444s ago: executing program 2 (id=568):
mount(0x0, 0x0, &(0x7f0000000140)='securityfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pwrite64(r0, 0x0, 0x0, 0x85)
socket$kcm(0x29, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x11, r1)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x11, r1)
ptrace(0x10, r3)
ptrace(0x11, r3)
r4 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0)
landlock_restrict_self(r4, 0x0)
ptrace(0x10, r1)
ptrace(0x11, r1)
ptrace(0x10, r3)
ptrace(0x11, r3)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$inet(0xa, 0x801, 0x84)
recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/147, 0x93}, {&(0x7f0000001440)=""/187, 0xbb}, {&(0x7f0000001500)=""/47, 0x2f}], 0x6}, 0x7}], 0x1, 0x2, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)

21.649515884s ago: executing program 2 (id=573):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x3, 0x10000000, 0x43af, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x8, 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48)

21.028951823s ago: executing program 2 (id=591):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
gettid()
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_delete(r1)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100)=0x3, 0x4)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010101}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0)
write(r2, &(0x7f0000000600)='dir .', 0x5)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)="89a0943953498bc9e706063539a1264f0cf9d616c154533bdd33", 0x1a}], 0x1)
write(r2, &(0x7f0000000700)='bind', 0x4)

20.99477069s ago: executing program 35 (id=591):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
gettid()
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_delete(r1)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100)=0x3, 0x4)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010101}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0)
write(r2, &(0x7f0000000600)='dir .', 0x5)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)="89a0943953498bc9e706063539a1264f0cf9d616c154533bdd33", 0x1a}], 0x1)
write(r2, &(0x7f0000000700)='bind', 0x4)

11.138290851s ago: executing program 5 (id=730):
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x8d, 0x67, 0x1, @private0, @mcast2}}}}, 0x0)
mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='cramfs\x00', 0x21000d, 0x0)

11.059984218s ago: executing program 5 (id=731):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0xd, 0xebf, "c9ac4a70ba84646eba50f5859f31f4d9286aaa1792ed14ee4547c4956d4a971cbb5943ff64def2e0d1ded05bd5360357e2296fe1969dda8dda4c22b408f36fa9304a55e25c397d7549ced7ea2a33d05664862232e0c905d4787a86f07900b5e46bafb81c0172b1a37f80d45da7d7db810f0ce8cf826a145c82e35954006a0983dc7ea81e60c7fc155f021fd73f84c23b5a2fffed1a8a6557200050872970c9c98557b169f6da6be0c8e68640cc68607cf8aae3cd6769f0d553e7b5637b912f421157bc5e0a561ec9afe882b9555df4e2fb81b44925179b6021ad454c87a8fcd5e995696ff452611f000126d09297b3b8ed118dd6aa049f386fa0805cdbd997e6dd1622e5c9715458b79e11a9117a786b86a332ad123bbbe1854d4b4a4f1894a52b045516d73880e6be6f2ab043d75f145ebf5ea5ce7fc48fc6fef5d3668b5e68b394e596f44e08b70f966da035f95ad9fce927f6cf9431ab0e918622cb409a58effbbbd81760159a00010765b80e651d81d3850f1ea176347f1672f8d0c9f995c300c97563eeb8dd8bc9d39d40040ed36c0beb6d760f975944a7991739fa296c23c80a2f50c55d69c3741aeeac2e2ff5ba1331adee3590ffa1da2eda6406d8bfa19bc633582baa5f4e85383c6dcee60e47558f43dd6ec67522084c07b6739b391a9728cee6e86ad90c6ec699a5ff20511625e0fc207c405efd1993535116766cc2d29e427dac73da1338211d075cbc352321530b6b98346ade12f626c0be812d2eb571b0bd3c4b335d797bb37bd3826db203e3c89ded2a6d6f95f1744410a0da344329d3bd0cabbfa8e22ec43a8ae8ce43ed8facf77c4f0709e84c8f31d0612485475ae27a3302ecfc04172553c019c3c29a134ec62b4f5ae1c49674af502b2076c4d2e9ed108147135072472fd321dbbe32e15f123d7c9229ad7edc90b0ad3e1dc2ee48a7f384e0271c91c44a0a508df345fbebf9559ad6e3496593ef62139aa5723033209fd80f807638d5b24088e8cb896b499d6d872d42a8d938a77651c28cef73f00ada83257742e08c8c79aef569198542584b408ada5df6f0096ec9a6a8c78fd6d78c5c0944845a5fbcb1936e16a59f05ac6d82c6c2c99c9cae379ece8ddf805e618a61e35361cc4c83b5a07dafe2fe96c7599d6de1a3c5035c77a86b021b72d81bff0c2b6f9665840bf8c98debc219d3d75d451b60293f099ed171c5e566d2591e4bd507a51b925d09aa3ce8c7b8f56d1e35158839484e663de76545c818b0ea8646120eca0b75da4c0e648ae0d56aa168b19f48460923d8d38d3cd570a4c9d6ae1af48b28964db4d5eb89aa2845b8bdddd89f9272ad3e5d04e5624089ae1d124b0eef9ad7ebae1ea2557f946e2a824ed497d45826f26f089fabd54be895fece37564a13f716451a3cb549bece785de9ffa233c8cd10591986b5e5d2bd7349d508b6b504fff44ca31f386383b9da747d0c688bfde3725ebe669571340addd8f83157cdd04bfa060a6b9446e6231d235ecc28ff84ec9f6882bf1eefba15d7b1e47f3233a9dba73c6a027dc9be90e21892545b5d0a4402e9b69b82658b5f8a05977f4b385854814747655b0795e738723ef152b6b3199c41521c8bd86a9d3868b2a969697301b5fbca39bf541849ace04ed8b1b481a3bc80baeaece999cd09a828ae1471482a74cd5e63bb5c80c20050c053fe22fe7375267f84370f0ef1832732f1e0c49b9689d2911d1ea925db9cfce33e9b69d05f6d605e6fce75f65940136f5f55dfe7a8983a9edbc086937ec9f4100bb3e874c075f3d6caeaf46780bcc104dd83825ae45fd5a423d743d817b95e432ba28d994d65883c0532d208f6e90d951de4780b741b4810feee7d3dbd75267666b98510792533ad80bc57d3d6970d2e38504e76c6cc2cf4fb6e1358d49a1a0a30c0bc0d07d29845d9cb2371861fb9f01eb064a18f9e61a5682ef07c31ff8fb1050211fa22f01ef57f042a95756796d4c853360915e5e9c408bc09874d9bcf300c47d74a16c7b85842e22b5734bb84fb4de5dc241708408cb2b379d55be7dc8085f32fd1726a7e6c2fd58041e695596e0c2806c81906d33029c120d7c7e7f145680668fee3e5f010798364713d8c87832a51a934dcd448ac6cd35856ccc3e27c21ff9e25f1cb710d2b1796f637479fa32b003f110b0e2ac9c153941dad387a9edc7c16f50823bcd98a8618cc8735cbaa521a3d6484fc842b9185c740337838e12cf13c9efde323e8bbd33965d2bc435dcdb0cc7c26bf407063ca7a254c33800dd06b191b871fe6b2aae140d1cc1d6f22c1e5c4bc025375b77d3c4edc4cfb9dc558a9ae4814ed5dc83ad963fb590af7c109d2d35df528fa898ac5ea4db299c563fcc7d722a97d68a8e3f7771e5fff804f623ff0b2f25231bbd50ba1bc3a4d4ed857aaef212601bfdb0e183fd85f607e5cccbd4c8452b9b1e4c8376a687a59d34ac1c2dc20645a59efbc022bbd0f30999aafd2796ab3deaf29d0ce9bad1d1eda5f34dfd24cf05c8f3298566d255f75ec91919248c99abe29d5c9879758f68808f2a24dfeb386328dae00d06286a0d46b6b7ea117ad7fdbb5d9f833abf36984190a45bbeb9cd2e45af3f9077b208147e798370bd9e5373881ffa94267b82fc7cc4f11b5258cf219950a5a5732fbe10d385e9053c6fd7b5cc3098aedba588a2b619bc54e7f12228b907aea4f4544c65990baaad1b522635dfe5bb6b71721707f815d7a8ee24c8328d67b46e199c0e5c0c7fdb44b3e9defd5726317f74f4cb87909b00f1f4df8858a980a86f87d27dcf33d6d89bc4c7ec088a7270aff9470d7ef12835eddb86f7471af31e8f2cde0cf102d9c9df7cbf1064d1f61acc5897959df60a6e2861c90316c36f20cfb25d069a21a28441003ea5530e842e6112bc90d3cf67184c063bb33182b59aa49c97eee50f6141ba81518b95963b66f20a7296e911ad472e79ffa926feb2e5c5da5e97ff007445beff0c8711a90c7c7525d48e463c30997d530cab0a845ac173f399effcf6af84f50c6319a1ce3565eef74df335cab14daa748ce2037364d90a2ba428d56d5b3b602b2030ea6b721ffb19078bcfe3bbcace66fb3058745b92ff01de9ddb4dd4e0e460b090bc3983946c007e5f465cd9869cd67c5bcd5881c4557c81c69289bca96d4dc4f4cfa421547d5d5c92279b996173704616c1d50e2016efaee7acfb01c56323bad976ffb39f7d3407f7995742a63751a746e6ef6035923e4e879d92ec3e5d2390fe363270cfdadb75f1db87a71d2343229ec140cf75a25e98a298c98c22fd144b675e5fcf39115b243d8c29ab8d6f7c87a7313481fb99bdeb759072cc9a6ec5153d94298bbfdf80bc3075a503c232e3be025004d281d3478bcbdd0f5549be09fca89da7d0e34af97302607c20c464e034c6428cbe326c07615b39fc72ab6f254c7aad6102f813b9623c6a7601b6ea29f84e86999b1287bd111bfa49672c886cca6eb8786eefc96a84cb0aa04ee0334d3fe23a0cef39078bce8f22cc35eeb2fcbe22280df1209ffb05347cbc3611915e7fedbdc752c658c199b23b3346367cc5a68be6a79069a188f6a6efb2d2aaa387ebed66eeb411b9094254041932876a1120a4ae1d20dfaa8709c62828a3ee332cbbe997b6eae047bd493535a25042e1fb3f2b2933c17f6ef96c1793c0ff79fe740b9282416e5e65ef58254055e38afa2e8cec89274f4e542153896baae0e50c37c83bf1034a5b722c874652182954d271991110e43333a48fd85f9b3427915ff9bd2e3b5342858fd2d86801d1cddb55b66bda6c7df3b04ceeae4a7ce74391255ede63695046d8c27241514ceebbc0a5e6a119f7830600385c3b67583ad2e48f8517c4f31349d2d3535a71b1ba2543fca666e1a06f62ce20557ef459e419e0534feec1958cd6fb5c4413eaa1c7e7a64cb19f6a592fd74def605d69a5e6fe14ad77f60ef0424a8f6b7026c1f4b493c71b6428a826fa731022276888b0dd9fcf6dd67cfdfd2fd1765c3c5d9c5fe4d2012bf8217b9dc91b583d945f70d0df13d3b3380200f02753e86f0de109129586629db95d829235e0db826de6e17c830c1aeca17573cbf95cd18c92b8e12c57e93e189d25fe6e71c32526f82e52de09355ca7f5105a61e059d5924d227119175714b5ab610b8dfa9c53d0b4105481bd5f3d47dd6d9d0eee798d7e38644ecd4971b2663a8c628cf51016597eb2c70640a0fea463f9012eca14e957b4280866ad8490fe7c3db57cd40684dc5655bafdd28e8a24217ca96e6ea1ded591b0b8f0cc9f79059fca8c22a884fab4be708e50a38ed1c0350015f3e4326f0af07c57b31d13868167e6ae776f3203f9f03b316233a4d7045b4652b506238a9be0b68b54e6bc52cc1c0894fbfe5071616170ca4895f6636f9be5df32e09f7429c7569aa42715809969b3f8a88080f57155b4c0cbe54039fa8996c4614657a9e4c4b1eafaaf0a663c0d461380ecd907688668d119c0361c6ac486cda549521ad2702d54053e4c2747e710399e235fc8defe54c64218915598c14de35cec58f24328d950ba6548595bc4b9e6c45e3ccdaed1b1dfe9ae3e7dfa2e768d75d7408242d0c504ef2fa583703d8509e5520db9692003b34c9e4ed48aabaa6908cf599667a4ce679ccbadd440900bd917522eeecd73dc2d90446db4d7d40323ec7971477d061fbd6d1c6434c8614ef7a909f46acb4657c4828601a30b993cd9c1b14215674471fceb9777917d6b3cf6c217d453d01ae5007f7ed70f92aaddae11d2f9bcb5854c1292303c3324fef63eff0a3e7ed487310c81a23bb2f89f68a44af31ffc759827b9855fbc6b9e1321bdbed45679c14d5d72b89a7e684ca8fb434352632533b622c8b5ebd162148c301496c0a18fbf31f10e2319020f5f59e81050f21bbed6b007775bc87b3f0ef643d0294dc7db502a0a45d3c68024fad13885d0212fc96067b2de27c2ec471b201cd50f38fc777a6123931e148c4d888097e6ea4f379ff69ba12cda93b2f48ffbb7286395232a4a78094014fbf8f5b1ae3d0ac780efad2721b2996711f6c3ff54468028fc8fcab62fdd160e1e0b18a8b1726dc1bdf34c2ee35ece720716f01f495eb9adc8361e6bcd0f7fdf7a21abb2ea14ab6563f6a9e580c3e5dd0ee7dcaf5d36f04696ddae6b36039cc611020c783504fa233179397f40dee4199528bd2adf4dd0037d0709fcb0c989ed2a26b0b6d475d6c3e25ef26a87d8b25974ed4a84453df731a3d3d496a4807b5ebc5f310dfa6b72f52634cb5705cca5253899ab69035290a0e1f78d148b80c35cac0275c8a5bab51670e7aca0120"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce)

10.968478662s ago: executing program 5 (id=734):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
dup(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
r2 = dup(r1)
write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x88ca}, @void, @eth={@broadcast, @empty, @val={@val, {0x8100, 0x1, 0x1}}, {@generic={0x10, "7bb2b026dbfbed41dcf823b3195f51e8153a0c912d3164f264ee23a9c998b1ecd37963b094cfc107427ead04d71258cc73a8072d"}}}}, 0x4e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

10.820164398s ago: executing program 5 (id=738):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
setresgid(0xee00, 0xee01, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000140)='personality\x00')
read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

10.759929336s ago: executing program 5 (id=739):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioprio_set$uid(0x3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0)
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080), 0x7f03)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x540, 0x0)
read$FUSE(r7, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x68}}, 0x0)

10.490201772s ago: executing program 5 (id=744):
r0 = syz_open_dev$vim2m(&(0x7f0000001900), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x2000, 0xa0363159, 0x0, 0x0, 0x1000000}})

10.401905827s ago: executing program 36 (id=744):
r0 = syz_open_dev$vim2m(&(0x7f0000001900), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x2000, 0xa0363159, 0x0, 0x0, 0x1000000}})

5.388021295s ago: executing program 6 (id=800):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmodC=0000000000000100000luler_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x20880, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11)
fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x0, r2})

5.310229566s ago: executing program 6 (id=802):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x6, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1e5e, @remote, 0x8000}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000080)='./dev/mtdblock0\x00', &(0x7f0000000400)='msdos\x00', 0x0, 0x0)

5.250472947s ago: executing program 6 (id=803):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x4}}) (async)
ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) (async)
listen(r2, 0x5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={<r3=>0x0, 0x4c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x1f7123dc}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x200, 0x4}, 0x8) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xfeff}}, 0x6, 0x0, 0x3fc, 0x4, 0x32, 0x3, 0xb4}, 0x9c)
recvmmsg(r2, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40000000000028f, 0x10120, 0x0)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0)

4.338937658s ago: executing program 6 (id=819):
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000440)='./file0\x00', 0x6)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000000c0)=0x1ff, 0x4)
write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)

4.194482353s ago: executing program 6 (id=821):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1, 0x200, 0x9, 0x2, 0x1, 0x2, 0x1}}, {0x6, 0x2, [0x9f8]}}, {{0x1c, 0x1, {0x6, 0x1, 0x3, 0x753, 0x1, 0x8000, 0xaa7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xb, 0x1000, 0x5, 0x1, 0x400, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0x1, 0x5, 0x6]}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1, 0x200, 0x9, 0x2, 0x1, 0x2, 0x1}}, {0x6, 0x2, [0x9f8]}}, {{0x1c, 0x1, {0x6, 0x1, 0x3, 0x753, 0x1, 0x8000, 0xaa7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xb, 0x1000, 0x5, 0x1, 0x400, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0x1, 0x5, 0x6]}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892) (async)

3.870292038s ago: executing program 6 (id=825):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd600fffff00103a0000000000000000000000ffffac141427ff0200000000003a0000000000000001"], 0x0)

3.798854936s ago: executing program 37 (id=825):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd600fffff00103a0000000000000000000000ffffac141427ff0200000000003a0000000000000001"], 0x0)

1.619398863s ago: executing program 1 (id=858):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000ecff170000001800000002000000000000007000000500"/50], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20)

1.560834576s ago: executing program 1 (id=860):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x21}]}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e}, 0x20)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x27c, 0x1, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0xfffffffffffffe07}, @NFTA_TABLE_USERDATA={0x83, 0x6, "f20f3e43004b175228cf201c07213a442a32cbcf87018ede8929368388f1c59b246b24af0f3a1039f5d90fab80fb95bf25da54ca04b47adf95efea2985c2963723f21ce508242722e62f13bef11ee8b7a2c4e254bb958ce2adcd06f41b06a131700c36079097d0523b1f3d47f55525ab92423f6cd3223af591823ac8f6c689"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "cfb4a9462a319bf57ce4924981c3a73c86ac6643a760e6089a0daa58c441939f3cac5dce53af44fc77eb105f98f5eed5ca0fddaadc7283b68920d958cca47ded58e79fbf436b080000003b8713fa1db30f028b13b22adeaf006a2663f4ecebe5198e92443be3a768509c69ee3499f34dd6bd08b074b1be31edd29d23bb556f6c2968aff0c670adf4b45a223a493c1e85e978b9377975e6f53b6ebcb296addbe6fd148f84e430f42e896e8f6c45b5355b920af7718a3e179c0deb0c45ea03b97a25111b9616420f78ddadaadc96017aed3600"/222}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40004}, 0x800)

1.560596525s ago: executing program 1 (id=861):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
ioctl$KDENABIO(r0, 0x4b36)
openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1ffd, @remote}, 0x10, 0x0}, 0x3000c041)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000060002000100000008000500", @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002)

1.459315703s ago: executing program 1 (id=863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), 0xffffffffffffffff)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000))
read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f00000000c0)={0xa4, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40010)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x2)
r5 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000073, 0x0, 0x2e1}]})
socket(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x40, r8, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x40}}, 0x804)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "adf83dd9149bc431", "bbc6ae386b11411f6ff3dce3504e9d5c", '\x00', "a5cc48f33a8300"}, 0x28)
recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000000801030000000000000000030000000900010072797ab10000000024000480080009400000000c080003400001000008000540000080a3080009400000000606000240920000000500030006"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x890)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x942}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x841)

1.328919135s ago: executing program 8 (id=865):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async)
r3 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x1}) (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
r4 = fanotify_init(0x20, 0x0) (async)
socket(0xa, 0x1, 0x0) (async, rerun: 32)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async, rerun: 32)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) (rerun: 32)
listen(r6, 0x8) (async)
connect$inet(r7, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32)
close_range(r4, 0xffffffffffffffff, 0x2) (async, rerun: 32)
mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c})

1.223078757s ago: executing program 8 (id=867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
readv(r2, &(0x7f0000001780)=[{&(0x7f0000001100)=""/144, 0x90}], 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r1, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

1.14924954s ago: executing program 8 (id=868):
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x20000000000001aa, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ff00001e640000000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba4595cd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb343eda758c509b8bda033cd1a6c588e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba52ac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)

1.148913427s ago: executing program 7 (id=869):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x40000802, 0x103, 0x1ff, 0x4, 0x1, 0x0, 0x13, 0x800000000000012, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff1, 0x40, 0x7, 0x6, 0xfa, 0x80006], 0xffff1000, 0x4fb20})
mmap(&(0x7f00006f6000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r0, 0xf62b7000) (async)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x8, 0x80000, <r4=>r3})
ioctl$NBD_SET_SOCK(r4, 0xab00, r2) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.079132029s ago: executing program 8 (id=870):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x1) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1, 0xfffffffa, 0x0) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)

997.311973ms ago: executing program 8 (id=871):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500006000640000000190780a010101ac1414bb05019078e000000241a00004000000000289000064010101e0000002441c9571ac1e0101000020000a01010100000401ac1414aa000000034414445364010101000000090a010101fffffffd6f3296b428fe154f8857cbbfde869307cbece5138b9d3e1bb2796e7a4ffe67f406cd2496fcdeb4f9ce0d3881951fa35bc3cf511e22106b884c02772b363cf86125c573a338079a14431fb47d27cf05ee617a7b420e80215c25c7c046508a0c6d3d61fc97072085dcc61faebcdf265577d373d10715a2d01e"], 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000})
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x8004, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1000)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x20000, 0x0, &(0x7f0000000140)=""/87, 0x0, 0x41000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000)

939.339435ms ago: executing program 8 (id=872):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x79) (async, rerun: 64)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (rerun: 64)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./dev/gnss0\x00', 0x561200, 0x42)
close(r1) (async, rerun: 64)
ptrace(0x420e, r0) (rerun: 64)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
close(r3) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0})
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0c00237605001e0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x20000010) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) (async)
splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff}) (async, rerun: 32)
io_setup(0x86, &(0x7f0000000280)=<r10=>0x0) (rerun: 32)
io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000200)={0x4c5, 0x0, 0x106, 0x1, 0x0, r9, 0x0}]) (async, rerun: 64)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r12, 0x4020aed2, &(0x7f0000000200)={0xc000, 0x1000000, 0x8}) (async, rerun: 32)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_PRE_FAULT_MEMORY(r13, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000})
socket$nl_route(0x10, 0x3, 0x0)

790.733472ms ago: executing program 7 (id=873):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async)
sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

527.758096ms ago: executing program 1 (id=874):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180))
mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, r4, 0x200000000000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x400101, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
umount2(&(0x7f0000000080)='./file0\x00', 0xe)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r7=>r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x4, 0xe, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x6, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x9, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write(r8, &(0x7f0000000500)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress:NVMf:uuid:12345678-1234-1234-1234-123456789abc,host_traddr=127.0.0.1,traddr=127.0.0.1,trsvcid=4', 0x8d)
close(0x3)
r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)

505.107354ms ago: executing program 9 (id=826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x8001}) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x8001})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

410.435618ms ago: executing program 7 (id=875):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0)

279.808754ms ago: executing program 1 (id=876):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x119) (async)
r4 = syz_open_dev$dmmidi(&(0x7f0000000080), 0xfffffffffffffffd, 0x18000)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000)
r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2080}, {r5, 0x90}, {0xffffffffffffffff, 0x1010}, {0xffffffffffffffff, 0x80c8}], 0x5, &(0x7f0000000180), &(0x7f00000001c0)={[0xa]}, 0x8) (async)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c17c10d8c744240004000000c7442402ab5e9cd2c7442406000000000f011424c4e219a68a10800000c4c17e5b2f0f01112e650f32c4e3b15e650000c4e1bfd00a660fc7b12a9800000fc77e04"}], 0x1, 0x6d, 0x0, 0x49)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x10000, 0x4, 0xb, 0x8000, 0x3, 0x4, 0x4b54, 0x0, 0xbe1, 0xbd, 0x5, 0x1, 0x8, 0xce43, 0xdc06]}, &(0x7f0000000600)=0x100) (async)
mkdirat(r9, &(0x7f0000000200)='./file0\x00', 0x4) (async)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) (async)
syz_usb_disconnect(r6) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x158, 0x0, 0x148, 0x158, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x28, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gretap0\x00', {0x8, 0xfffffffffffffff8, 0x56, 0x9, 0x2, 0x80, 0x20, 0x78, 0x80}, {0x9}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async)
sendto$inet(r2, &(0x7f0000000040)="0400", 0x2, 0x40001, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000300)={'geneve0\x00', {0x2, 0x0, @empty}})

279.370353ms ago: executing program 9 (id=877):
r0 = syz_open_dev$midi(&(0x7f0000000180), 0xfffffffffffffffc, 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r1 = syz_usb_connect$cdc_ecm(0x4, 0x5d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x2, 0xc0, 0x1, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x76, 0x7, 0x7f}, [@dmm={0x7, 0x24, 0x14, 0x5, 0xffd7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x8, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6f, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf, 0x6f, 0xf}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x3, 0x2, 0x8, 0x5}, 0xfc, &(0x7f00000001c0)={0x5, 0xf, 0xfc, 0x5, [@generic={0xa3, 0x10, 0x4, "0f711e19ceb50eca892a8fcdea4090035fbde8c72d956182f304862b7d86297711d5f2231b8ae3fe8890a2161559b01400a4599778b2c056c29318beca6f25fb681ed0a7d9a37269708222d7226d6c87376b69d338b5b45c3cfb00ae3421729e08b6770d9ca5db2a5b1ccfe0c92e67e4526beb58c2908963f261289aadee3c7a6e9a03c5e69771c6c6adc3ba01532252fb5243050351794cb25c4ae9b33257ac"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x81, 0xf, 0x6, [0xfe80cf, 0xf, 0x30, 0xff3f00, 0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0xff, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x40, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x10001, 0xf00f, 0x6, [0xff0000, 0x30, 0x30, 0x0, 0x0]}]}, 0x3, [{0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "c6de939b7d5401d1e3dafc61f99cf2011715fba61fe6e958c6d5ac00cbc8949179d90d7194f836585b9ad990712acd86767254688001399cde07cf54f895f7bb579fb0bf3b80da0d447703b3fdd4aa5a6b4e9d257870783fcc55ab36dd3b9081c12a102a6b87a9de9d04fb67332b112052dbf193a7b051511e4c4910b4bfb3c0179e95c2af52ff207b7a111e172766545a00ec6b2475be0280a4b4f67dd53e08e29f729f8ac51e4e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x418}}]})
syz_usb_disconnect(r1)

140.159253ms ago: executing program 7 (id=878):
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x4, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r3=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r3, r2})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6})
getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000240)=""/201, &(0x7f0000000100)=0xc9)

132.84394ms ago: executing program 7 (id=879):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}}, 0xc840)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0})

0s ago: executing program 7 (id=880):
mkdir(&(0x7f00000000c0)='my_configfs\x00', 0x17b)
mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x36}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0)
rmdir(&(0x7f0000000040)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00') (async)
write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000000)={0x1, 0x50}, 0x2)

kernel console output (not intermixed with test programs):

4055][ T5629] cdc_ncm 7-1:1.0: bind() failure
[   78.441632][ T5629] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[   78.441653][ T5629] cdc_ncm 7-1:1.1: bind() failure
[   78.444741][ T5629] usb 7-1: USB disconnect, device number 5
[   78.654151][ T2327] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   78.805564][ T2327] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   78.806607][ T2327] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   78.806621][ T2327] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   78.806631][ T2327] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   78.806657][ T2327] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   78.806670][ T2327] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   78.807982][ T2327] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   78.807994][ T2327] usb 6-1: Product: syz
[   78.808002][ T2327] usb 6-1: Manufacturer: syz
[   78.813332][ T2327] cdc_wdm 6-1:1.0: skipping garbage
[   78.813342][ T2327] cdc_wdm 6-1:1.0: skipping garbage
[   78.818273][ T2327] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   78.818285][ T2327] cdc_wdm 6-1:1.0: Unknown control protocol
[   78.865263][ T5739] Bluetooth: hci1: command 0x206a tx timeout
[   79.014240][ T2327] usb 6-1: USB disconnect, device number 9
[   79.432781][ T7403] xt_TCPMSS: Only works on TCP SYN packets
[   79.494022][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout
[   79.494041][ T5087] Bluetooth: hci0: command 0x0c1a tx timeout
[   79.496609][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout
[   79.584027][ T5739] Bluetooth: hci4: command 0x1003 tx timeout
[   79.588387][   T66] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   79.654038][   T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   79.805160][   T42] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   79.810151][   T42] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.815102][   T42] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   79.815165][   T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.815422][   T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   79.815490][   T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   79.832466][   T42] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   79.832515][   T42] usb 6-1: Product: syz
[   79.832556][   T42] usb 6-1: Manufacturer: syz
[   79.835439][   T42] cdc_wdm 6-1:1.0: skipping garbage
[   79.835449][   T42] cdc_wdm 6-1:1.0: skipping garbage
[   79.840435][   T42] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   79.840453][   T42] cdc_wdm 6-1:1.0: Unknown control protocol
[   79.919151][ T7434] Unable to locate . in FUNC.INSTANCE
[   79.990657][ T7438] netlink: 'syz.5.359': attribute type 10 has an invalid length.
[   79.990705][ T7438] __nla_validate_parse: 1 callbacks suppressed
[   79.990756][ T7438] netlink: 55 bytes leftover after parsing attributes in process `syz.5.359'.
[   80.037808][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.038032][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.038472][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.038649][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.042362][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.044340][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.044784][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.044959][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.066649][ T2327] usb 6-1: USB disconnect, device number 10
[   80.101777][ T7447] netlink: 'syz.5.359': attribute type 10 has an invalid length.
[   80.101855][ T7447] netlink: 55 bytes leftover after parsing attributes in process `syz.5.359'.
[   80.124379][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.361'.
[   80.222243][ T7456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   80.276917][   T43] kauditd_printk_skb: 52 callbacks suppressed
[   80.277039][   T43] audit: type=1400 audit(1788872198.316:615): avc:  denied  { unmount } for  pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   80.357117][ T7459] batadv_slave_0: Caught tx_queue_len zero misconfig
[   80.377299][   T43] audit: type=1400 audit(1788872198.416:616): avc:  denied  { bind } for  pid=7458 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   80.377384][   T43] audit: type=1400 audit(1788872198.416:617): avc:  denied  { name_bind } for  pid=7458 comm="syz.4.364" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   80.377681][   T43] audit: type=1400 audit(1788872198.416:618): avc:  denied  { node_bind } for  pid=7458 comm="syz.4.364" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   80.409035][   T43] audit: type=1400 audit(1788872198.446:619): avc:  denied  { shutdown } for  pid=7463 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   80.410381][   T43] audit: type=1400 audit(1788872198.446:620): avc:  denied  { name_bind } for  pid=7463 comm="syz.4.365" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   80.414722][ T7466] sg_write: data in/out 134155232/590 bytes for SCSI command 0x0-- guessing data in;
[   80.414722][ T7466]    program syz.4.365 not setting count and/or reply_len properly
[   80.933750][   T66] Bluetooth: hci1: command 0x206a tx timeout
[   81.347199][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.347384][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.347500][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.347616][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.347731][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.347826][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.347920][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   81.376595][ T7500] syzkaller0: entered promiscuous mode
[   81.376654][ T7500] syzkaller0: entered allmulticast mode
[   81.556476][ T7522] netlink: 'syz.5.376': attribute type 2 has an invalid length.
[   81.560894][ T7522] FAULT_INJECTION: forcing a failure.
[   81.560894][ T7522] name failslab, interval 1, probability 0, space 0, times 0
[   81.564894][ T7522] CPU: 3 UID: 0 PID: 7522 Comm: syz.5.376 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   81.564921][ T7522] Tainted: [L]=SOFTLOCKUP
[   81.564927][ T7522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   81.564937][ T7522] Call Trace:
[   81.564944][ T7522]  <TASK>
[   81.564953][ T7522]  dump_stack_lvl+0x100/0x190
[   81.565001][ T7522]  should_fail_ex.cold+0x5/0xa
[   81.565029][ T7522]  should_failslab+0xc2/0x120
[   81.565059][ T7522]  __kmalloc_noprof+0xfc/0x840
[   81.565076][ T7522]  ? rcu_is_watching+0x13/0xc0
[   81.565100][ T7522]  ? tomoyo_realpath_from_path+0xb6/0x690
[   81.565126][ T7522]  tomoyo_realpath_from_path+0xb6/0x690
[   81.565150][ T7522]  tomoyo_check_open_permission+0x2af/0x3c0
[   81.565177][ T7522]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[   81.565210][ T7522]  ? hook_file_open+0x248/0x8e0
[   81.565245][ T7522]  ? path_get+0x61/0x80
[   81.565269][ T7522]  tomoyo_file_open+0x6b/0x90
[   81.565290][ T7522]  security_file_open+0xb5/0x1e0
[   81.565312][ T7522]  do_dentry_open+0x588/0x14d0
[   81.565337][ T7522]  vfs_open+0x82/0x3f0
[   81.565363][ T7522]  path_openat+0x19fa/0x2440
[   81.565390][ T7522]  ? __pfx_path_openat+0x10/0x10
[   81.565417][ T7522]  do_file_open+0x20e/0x430
[   81.565439][ T7522]  ? __pfx_do_file_open+0x10/0x10
[   81.565480][ T7522]  ? _raw_spin_unlock+0x28/0x50
[   81.565507][ T7522]  ? alloc_fd+0x471/0x7a0
[   81.565540][ T7522]  do_sys_openat2+0x10f/0x1e0
[   81.565566][ T7522]  ? __pfx_do_sys_openat2+0x10/0x10
[   81.565591][ T7522]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   81.565619][ T7522]  __x64_sys_openat+0x12d/0x210
[   81.565643][ T7522]  ? __pfx___x64_sys_openat+0x10/0x10
[   81.565665][ T7522]  ? ksys_write+0x1ac/0x250
[   81.565689][ T7522]  do_syscall_64+0x123/0x790
[   81.565712][ T7522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.565731][ T7522] RIP: 0033:0x7fee22b5e98e
[   81.565750][ T7522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.565768][ T7522] RSP: 002b:00007fee239c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   81.565793][ T7522] RAX: ffffffffffffffda RBX: 00007fee239c16c0 RCX: 00007fee22b5e98e
[   81.565806][ T7522] RDX: 0000000000109301 RSI: 00007fee239c0c00 RDI: ffffffffffffff9c
[   81.565817][ T7522] RBP: 00007fee239c0c00 R08: 0000000000000000 R09: 0000000000000000
[   81.565827][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   81.565837][ T7522] R13: 00007fee22e26038 R14: 00007fee22e25fa0 R15: 00007ffc83b69208
[   81.565864][ T7522]  </TASK>
[   81.565871][ T7522] ERROR: Out of memory at tomoyo_realpath_from_path.
[   81.584007][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout
[   81.584039][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.584137][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[   81.598659][   T43] audit: type=1400 audit(1788872199.636:621): avc:  denied  { listen } for  pid=7523 comm="syz.4.377" lport=37307 faddr=::ffff:172.30.0.5 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.617529][   T43] audit: type=1400 audit(1788872199.656:622): avc:  denied  { unmount } for  pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   81.708645][ T7532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7532 comm=syz.1.379
[   81.720111][   T43] audit: type=1400 audit(1788872199.756:623): avc:  denied  { mounton } for  pid=7530 comm="syz.1.379" path="/97/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   81.779038][ T7544] veth2: entered allmulticast mode
[   81.940705][   T43] audit: type=1400 audit(1788872199.976:624): avc:  denied  { getopt } for  pid=7559 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   82.057210][ T7577] input: syz0 as /devices/virtual/input/input11
[   82.198460][ T7559] ima: policy update failed
[   82.278802][ T7598] FAULT_INJECTION: forcing a failure.
[   82.278802][ T7598] name failslab, interval 1, probability 0, space 0, times 0
[   82.278849][ T7598] CPU: 3 UID: 0 PID: 7598 Comm: syz.2.396 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   82.278877][ T7598] Tainted: [L]=SOFTLOCKUP
[   82.278883][ T7598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.278890][ T7598] Call Trace:
[   82.278894][ T7598]  <TASK>
[   82.278899][ T7598]  dump_stack_lvl+0x100/0x190
[   82.278918][ T7598]  should_fail_ex.cold+0x5/0xa
[   82.278934][ T7598]  should_failslab+0xc2/0x120
[   82.278949][ T7598]  kmem_cache_alloc_noprof+0x92/0x6a0
[   82.278961][ T7598]  ? __pfx_map_id_range_down+0x10/0x10
[   82.278973][ T7598]  ? security_inode_alloc+0x3b/0x2c0
[   82.278992][ T7598]  security_inode_alloc+0x3b/0x2c0
[   82.279009][ T7598]  inode_init_always_gfp+0xc6f/0xfb0
[   82.279025][ T7598]  alloc_inode+0x8e/0x250
[   82.279035][ T7598]  path_from_stashed+0x25b/0x760
[   82.279053][ T7598]  pidfs_alloc_file+0xf8/0x290
[   82.279067][ T7598]  ? __pfx_pidfs_alloc_file+0x10/0x10
[   82.279084][ T7598]  pidfd_prepare+0x107/0x1b0
[   82.279097][ T7598]  __x64_sys_pidfd_open+0x105/0x1a0
[   82.279113][ T7598]  ? __pfx___x64_sys_pidfd_open+0x10/0x10
[   82.279132][ T7598]  do_syscall_64+0x123/0x790
[   82.279147][ T7598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.279159][ T7598] RIP: 0033:0x7f2b7839e159
[   82.279168][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.279178][ T7598] RSP: 002b:00007f2b79332018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2
[   82.279190][ T7598] RAX: ffffffffffffffda RBX: 00007f2b78625fa0 RCX: 00007f2b7839e159
[   82.279197][ T7598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000122
[   82.279206][ T7598] RBP: 00007f2b78435024 R08: 0000000000000000 R09: 0000000000000000
[   82.279216][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.279227][ T7598] R13: 00007f2b78626038 R14: 00007f2b78625fa0 R15: 00007ffc87d7b528
[   82.279247][ T7598]  </TASK>
[   82.279389][ T7595] overlayfs: invalid origin (0000)
[   82.939085][ T7633] nbd0: detected capacity change from 0 to 127
[   82.956273][ T7633] netlink: 'syz.2.404': attribute type 2 has an invalid length.
[   83.023507][   T66] Bluetooth: hci1: command 0x206a tx timeout
[   83.180378][ T5577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.252752][ T5577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.307515][ T7665] FAULT_INJECTION: forcing a failure.
[   83.307515][ T7665] name fail_futex, interval 1, probability 0, space 0, times 1
[   83.312596][ T7665] CPU: 2 UID: 0 PID: 7665 Comm: syz.2.412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   83.312642][ T7665] Tainted: [L]=SOFTLOCKUP
[   83.312649][ T7665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.312659][ T7665] Call Trace:
[   83.312666][ T7665]  <TASK>
[   83.312675][ T7665]  dump_stack_lvl+0x100/0x190
[   83.312708][ T7665]  should_fail_ex.cold+0x5/0xa
[   83.312735][ T7665]  get_futex_key+0x1d0/0x14f0
[   83.312761][ T7665]  ? __pfx_get_futex_key+0x10/0x10
[   83.312784][ T7665]  ? find_held_lock+0x2b/0x80
[   83.312811][ T7665]  ? futex_wake+0x4ea/0x5e0
[   83.312845][ T7665]  futex_wake+0xf4/0x5e0
[   83.312871][ T7665]  ? futex_wait+0x11e/0x370
[   83.312902][ T7665]  ? __pfx_futex_wake+0x10/0x10
[   83.312932][ T7665]  ? __lock_acquire+0x5c0/0x1f40
[   83.312953][ T7665]  ? ksys_write+0x190/0x250
[   83.312971][ T7665]  ? ksys_write+0x190/0x250
[   83.312991][ T7665]  do_futex+0x2b2/0x440
[   83.313017][ T7665]  ? __pfx_do_futex+0x10/0x10
[   83.313039][ T7665]  ? lock_acquire+0x1d1/0x380
[   83.313057][ T7665]  ? __fget_files+0x34/0x3d0
[   83.313079][ T7665]  ? find_held_lock+0x2b/0x80
[   83.313107][ T7665]  __x64_sys_futex+0x34f/0x4d0
[   83.313133][ T7665]  ? __fget_files+0x21f/0x3d0
[   83.313155][ T7665]  ? __pfx___x64_sys_futex+0x10/0x10
[   83.313189][ T7665]  do_syscall_64+0x123/0x790
[   83.313214][ T7665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.313236][ T7665] RIP: 0033:0x7f2b7839e159
[   83.313254][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.313272][ T7665] RSP: 002b:00007f2b793320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   83.313291][ T7665] RAX: ffffffffffffffda RBX: 00007f2b78625fa8 RCX: 00007f2b7839e159
[   83.313304][ T7665] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b78625fac
[   83.313316][ T7665] RBP: 00007f2b78625fa0 R08: 0000000000000001 R09: 0000000000000000
[   83.313328][ T7665] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   83.313340][ T7665] R13: 00007f2b78626038 R14: 00007ffc87d7b440 R15: 00007ffc87d7b528
[   83.313389][ T7665]  </TASK>
[   83.342837][ T5577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.345000][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.350704][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.353795][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.359964][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.360461][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.442806][ T5577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.553588][   T13] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[   83.587905][ T5577] netdevsim netdevsim14 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.603531][   T13] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[   83.606797][   T13] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[   83.606832][   T13] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[   83.643691][ T7691] netlink: 'syz.5.417': attribute type 10 has an invalid length.
[   83.663623][ T5087] Bluetooth: hci3: command 0x0c1a tx timeout
[   83.705892][ T5577] bridge_slave_1: left allmulticast mode
[   83.705960][ T5577] bridge_slave_1: left promiscuous mode
[   83.707729][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.714086][ T5577] bridge_slave_0: left allmulticast mode
[   83.714148][ T5577] bridge_slave_0: left promiscuous mode
[   83.714306][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.897004][ T7704] FAULT_INJECTION: forcing a failure.
[   83.897004][ T7704] name failslab, interval 1, probability 0, space 0, times 0
[   83.897097][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.2.420 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   83.897136][ T7704] Tainted: [L]=SOFTLOCKUP
[   83.897144][ T7704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.897154][ T7704] Call Trace:
[   83.897160][ T7704]  <TASK>
[   83.897167][ T7704]  dump_stack_lvl+0x100/0x190
[   83.897212][ T7704]  should_fail_ex.cold+0x5/0xa
[   83.897240][ T7704]  should_failslab+0xc2/0x120
[   83.897269][ T7704]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[   83.897290][ T7704]  ? sidtab_sid2str_get+0x84/0x670
[   83.897313][ T7704]  ? sidtab_sid2str_get+0x17a/0x670
[   83.897339][ T7704]  kmemdup_noprof+0x29/0x60
[   83.897367][ T7704]  sidtab_sid2str_get+0x17a/0x670
[   83.897392][ T7704]  security_sid_to_context_core+0x373/0x700
[   83.897413][ T7704]  avc_audit_post_callback+0x109/0x910
[   83.897436][ T7704]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   83.897457][ T7704]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   83.897478][ T7704]  ? skb_put+0x138/0x180
[   83.897510][ T7704]  ? audit_log_n_string+0x2a3/0x5a0
[   83.897535][ T7704]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   83.897558][ T7704]  common_lsm_audit+0x23f/0x2b0
[   83.897581][ T7704]  ? __pfx_common_lsm_audit+0x10/0x10
[   83.897600][ T7704]  ? avc_denied+0x14a/0x190
[   83.897629][ T7704]  slow_avc_audit+0x186/0x210
[   83.897655][ T7704]  ? __pfx_slow_avc_audit+0x10/0x10
[   83.897680][ T7704]  ? find_held_lock+0x2b/0x80
[   83.897706][ T7704]  ? avc_has_perm_noaudit+0x2b3/0x3b0
[   83.897741][ T7704]  avc_has_perm+0x1a6/0x1e0
[   83.897767][ T7704]  ? __pfx_avc_has_perm+0x10/0x10
[   83.897790][ T7704]  ? __might_fault+0xc5/0x140
[   83.897825][ T7704]  ? find_held_lock+0x2b/0x80
[   83.897852][ T7704]  ? __might_fault+0xc5/0x140
[   83.897878][ T7704]  ? __might_fault+0xc5/0x140
[   83.897912][ T7704]  selinux_bpf+0xf4/0x150
[   83.897939][ T7704]  security_bpf+0xa5/0x260
[   83.897960][ T7704]  __sys_bpf+0x440/0x4a30
[   83.897988][ T7704]  ? __pfx___sys_bpf+0x10/0x10
[   83.898005][ T7704]  ? __pfx_futex_hash+0x10/0x10
[   83.898028][ T7704]  ? get_pid_task+0xfc/0x250
[   83.898051][ T7704]  ? get_pid_task+0xfc/0x250
[   83.898086][ T7704]  ? find_held_lock+0x2b/0x80
[   83.898119][ T7704]  ? rcu_read_lock_any_held+0x6a/0x90
[   83.898148][ T7704]  ? find_held_lock+0x2b/0x80
[   83.898173][ T7704]  ? ksys_write+0x190/0x250
[   83.898192][ T7704]  ? ksys_write+0x190/0x250
[   83.898227][ T7704]  ? __x64_sys_futex+0x34f/0x4d0
[   83.898251][ T7704]  ? __x64_sys_futex+0x358/0x4d0
[   83.898280][ T7704]  ? xfd_validate_state+0x129/0x190
[   83.898304][ T7704]  ? __x64_sys_bpf+0xce/0x140
[   83.898320][ T7704]  __x64_sys_bpf+0xce/0x140
[   83.898340][ T7704]  ? do_syscall_64+0xae/0x790
[   83.898374][ T7704]  do_syscall_64+0x123/0x790
[   83.898401][ T7704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.898422][ T7704] RIP: 0033:0x7f2b7839e159
[   83.898439][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.898459][ T7704] RSP: 002b:00007f2b79332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   83.898481][ T7704] RAX: ffffffffffffffda RBX: 00007f2b78625fa0 RCX: 00007f2b7839e159
[   83.898494][ T7704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[   83.898506][ T7704] RBP: 00007f2b78435024 R08: 0000000000000000 R09: 0000000000000000
[   83.898517][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.898529][ T7704] R13: 00007f2b78626038 R14: 00007f2b78625fa0 R15: 00007ffc87d7b528
[   83.898556][ T7704]  </TASK>
[   83.945602][ T5577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.953079][ T5577] bond0 (unregistering): Released all slaves
[   83.958955][ T5577] bond1 (unregistering): Released all slaves
[   83.981724][ T7703] sch_tbf: burst 17 is lower than device syzkaller0 mtu (1514) !
[   84.013582][   T12] netdevsim netdevsim14 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[   84.134015][ T7719] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   84.134132][ T7719] CIFS mount error: No usable UNC path provided in device string!
[   84.134132][ T7719] 
[   84.134661][ T7719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   84.268272][ T5440] 8021q: adding VLAN 0 to HW filter on device eth10
[   84.283200][ T7725] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[   84.283237][ T7725] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[   84.288158][ T7725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   84.443470][   T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   84.453242][ T5577] hsr_slave_0: left promiscuous mode
[   84.456619][ T5577] hsr_slave_1: left promiscuous mode
[   84.457298][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.457313][ T5577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.458172][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.458186][ T5577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.470122][ T5577] veth1_macvtap: left promiscuous mode
[   84.470152][ T5577] veth0_macvtap: left promiscuous mode
[   84.470269][ T5577] veth1_vlan: left promiscuous mode
[   84.470323][ T5577] veth0_vlan: left promiscuous mode
[   84.604291][   T58] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   84.605433][   T58] usb 7-1: config 1 has an invalid interface number: 3 but max is 0
[   84.605455][   T58] usb 7-1: config 1 has no interface number 0
[   84.607576][   T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.607596][   T58] usb 7-1: Product: syz
[   84.607610][   T58] usb 7-1: Manufacturer: syz
[   84.607623][   T58] usb 7-1: SerialNumber: syz
[   84.624450][   T30] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   84.632700][   T58] usb 7-1: 3:1 : does not exist
[   84.632746][   T58] usb 7-1: 3:2 : does not exist
[   84.685368][ T5577] team0 (unregistering): Port device team_slave_1 removed
[   84.701607][ T5577] team0 (unregistering): Port device team_slave_0 removed
[   84.767858][ T5440] 8021q: adding VLAN 0 to HW filter on device eth11
[   84.773662][   T30] usb 10-1: Using ep0 maxpacket: 32
[   84.776478][   T30] usb 10-1: New USB device found, idVendor=05c6, idProduct=9203, bcdDevice=88.5f
[   84.777855][   T30] usb 10-1: config 4 has an invalid interface number: 216 but max is 2
[   84.777874][   T30] usb 10-1: config 4 has an invalid interface number: 166 but max is 2
[   84.777890][   T30] usb 10-1: config 4 has an invalid interface number: 6 but max is 2
[   84.777904][   T30] usb 10-1: config 4 has no interface number 0
[   84.777912][   T30] usb 10-1: config 4 has no interface number 1
[   84.777920][   T30] usb 10-1: config 4 has no interface number 2
[   84.777965][   T30] usb 10-1: config 4 interface 216 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64
[   84.777986][   T30] usb 10-1: config 4 interface 216 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64
[   84.778003][   T30] usb 10-1: config 4 interface 216 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[   84.778015][   T30] usb 10-1: config 4 interface 216 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64
[   84.778029][   T30] usb 10-1: config 4 interface 216 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64
[   84.778056][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[   84.778073][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[   84.778090][   T30] usb 10-1: config 4 interface 166 altsetting 3 endpoint 0x9 has an invalid bInterval 0, changing to 7
[   84.778107][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[   84.778118][   T30] usb 10-1: config 4 interface 166 altsetting 3 endpoint 0xD has invalid maxpacket 1624, setting to 64
[   84.778130][   T30] usb 10-1: config 4 interface 166 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   84.778143][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[   84.778154][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[   84.778164][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[   84.778175][   T30] usb 10-1: config 4 interface 166 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[   84.778190][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[   84.778201][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[   84.778212][   T30] usb 10-1: config 4 interface 6 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   84.778224][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   84.778236][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0xA, skipping
[   84.778247][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[   84.778257][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[   84.778269][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[   84.778280][   T30] usb 10-1: config 4 interface 6 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   84.778296][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[   84.778312][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[   84.778328][   T30] usb 10-1: config 4 interface 6 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[   84.778343][   T30] usb 10-1: config 4 interface 216 has no altsetting 0
[   84.778356][   T30] usb 10-1: config 4 interface 166 has no altsetting 0
[   84.778364][   T30] usb 10-1: config 4 interface 6 has no altsetting 0
[   84.783507][   T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.783525][   T30] usb 10-1: Product: Ў
[   84.783534][   T30] usb 10-1: Manufacturer: ࡃ
[   84.783544][   T30] usb 10-1: SerialNumber: ⠊
[   84.848976][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.849126][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.849187][ T7667] bridge_slave_0: entered allmulticast mode
[   84.850099][ T7667] bridge_slave_0: entered promiscuous mode
[   84.851510][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.851585][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.851639][ T7667] bridge_slave_1: entered allmulticast mode
[   84.852349][ T7667] bridge_slave_1: entered promiscuous mode
[   84.871349][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.874167][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.898041][ T7667] team0: Port device team_slave_0 added
[   84.900618][ T7667] team0: Port device team_slave_1 added
[   84.936862][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.936876][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.936897][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.938455][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.938467][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.938488][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.991436][ T7734] virtio-fs: tag </dev/sg0> not found
[   84.993804][ T7734] __nla_validate_parse: 36 callbacks suppressed
[   84.993817][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.427'.
[   84.995885][ T7667] hsr_slave_0: entered promiscuous mode
[   84.996701][ T7667] hsr_slave_1: entered promiscuous mode
[   84.997236][ T7667] debugfs: 'hsr0' already exists in 'hsr'
[   84.997251][ T7667] Cannot create hsr debugfs directory
[   85.030446][   T30] usb 10-1: USB disconnect, device number 3
[   85.079794][ T5577] IPVS: stop unused estimator thread 0...
[   85.093364][ T5087] Bluetooth: hci1: command 0x206a tx timeout
[   85.117759][ T5440] 8021q: adding VLAN 0 to HW filter on device eth12
[   85.175892][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.191254][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.243159][ T7667] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   85.252183][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.256585][ T7667] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   85.265411][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.265878][ T7667] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   85.270686][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.271089][ T7667] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   85.277774][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.282441][ T7776] nvme_fabrics: unknown parameter or missing value 'ELF�' in ctrl creation request
[   85.285164][   T43] kauditd_printk_skb: 81 callbacks suppressed
[   85.285178][   T43] audit: type=1400 audit(1788872203.326:706): avc:  denied  { mount } for  pid=7775 comm="syz.1.429" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   85.323070][   T43] audit: type=1400 audit(1788872203.356:707): avc:  denied  { write } for  pid=7783 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.339129][   T43] audit: type=1400 audit(1788872203.376:708): avc:  denied  { create } for  pid=7775 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.365412][   T43] audit: type=1400 audit(1788872203.406:709): avc:  denied  { getopt } for  pid=7775 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.366102][   T43] audit: type=1400 audit(1788872203.406:710): avc:  denied  { write } for  pid=7775 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.366380][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13
[   85.407532][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.413511][ T5087] Bluetooth: hci0: command tx timeout
[   85.426969][ T7667] 8021q: adding VLAN 0 to HW filter on device team0
[   85.431126][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.431304][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.437510][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.437588][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.440607][ T7788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.514613][   T43] audit: type=1400 audit(1788872203.556:711): avc:  denied  { write } for  pid=7791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.573434][ T7800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65289 sclass=netlink_route_socket pid=7800 comm=syz.5.431
[   85.575606][   T43] audit: type=1400 audit(1788872203.616:712): avc:  denied  { map_create } for  pid=7799 comm="syz.5.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   85.577682][   T43] audit: type=1400 audit(1788872203.616:713): avc:  denied  { prog_load } for  pid=7799 comm="syz.5.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   85.577719][   T43] audit: type=1400 audit(1788872203.616:714): avc:  denied  { bpf } for  pid=7799 comm="syz.5.431" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   85.577750][   T43] audit: type=1400 audit(1788872203.616:715): avc:  denied  { perfmon } for  pid=7799 comm="syz.5.431" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   85.588434][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'.
[   85.629469][ T7800] bond1: entered promiscuous mode
[   85.629529][ T7800] bond1: entered allmulticast mode
[   85.668721][ T5440] 8021q: adding VLAN 0 to HW filter on device eth14
[   85.774415][ T7667] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.841605][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.434'.
[   85.937035][ T7667] veth0_vlan: entered promiscuous mode
[   85.942246][ T7667] veth1_vlan: entered promiscuous mode
[   85.956062][ T7667] veth0_macvtap: entered promiscuous mode
[   85.959018][ T7667] veth1_macvtap: entered promiscuous mode
[   85.966950][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.970467][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.978434][ T5806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.978554][ T5806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.978605][ T5806] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.978625][ T5806] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.066676][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.067335][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.094739][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.094813][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.150817][ T7850] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058)
[   86.162154][ T7852] netlink: 'syz.1.441': attribute type 1 has an invalid length.
[   86.162200][ T7852] netlink: 224 bytes leftover after parsing attributes in process `syz.1.441'.
[   86.196414][ T7854] xt_l2tp: invalid flags combination: 8
[   86.236999][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'.
[   86.237070][ T7860] openvswitch: netlink: Missing key (keys=c0, expected=2000)
[   86.295760][ T5933] block nbd0: Connection timed out, retrying (1/1 alive)
[   86.301943][   T67] block nbd0: Receive control failed (result -32)
[   86.306490][ T5933] block nbd0: Connection timed out, retrying (0/1 alive)
[   86.306538][ T5933] block nbd0: Connection timed out, retrying (0/1 alive)
[   86.306561][ T5933] block nbd0: Connection timed out, retrying (0/1 alive)
[   86.306734][ T5933] block nbd0: Dead connection, failed to find a fallback
[   86.306745][ T5933] block nbd0: shutting down sockets
[   86.306753][ T5933] blk_print_req_error: 11 callbacks suppressed
[   86.306760][ T5933] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.306775][ T5933] buffer_io_error: 31 callbacks suppressed
[   86.306781][ T5933] Buffer I/O error on dev nbd0, logical block 3, async page read
[   86.306809][ T5933] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.306821][ T5933] Buffer I/O error on dev nbd0, logical block 2, async page read
[   86.306832][ T5933] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.306843][ T5933] Buffer I/O error on dev nbd0, logical block 1, async page read
[   86.306859][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.306870][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   86.309631][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[   86.309648][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   86.309661][ T5933] Buffer I/O error on dev nbd0, logical block 1, async page read
[   86.309668][ T5933] Buffer I/O error on dev nbd0, logical block 2, async page read
[   86.309676][ T5933] Buffer I/O error on dev nbd0, logical block 3, async page read
[   86.310415][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[   86.310431][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   86.310439][ T5933] Buffer I/O error on dev nbd0, logical block 1, async page read
[   86.310496][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.310543][ T5933] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.310591][ T5933] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.310684][ T5933] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   86.311455][ T5732] ldm_validate_partition_table(): Disk read failed.
[   86.312295][ T5732] Dev nbd0: unable to read RDB block 0
[   86.314185][ T5732]  nbd0: unable to read partition table
[   86.325637][ T5732] ldm_validate_partition_table(): Disk read failed.
[   86.326537][ T5732] Dev nbd0: unable to read RDB block 0
[   86.327452][ T5732]  nbd0: unable to read partition table
[   86.504964][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'.
[   86.505021][ T7870] openvswitch: netlink: Missing key (keys=c0, expected=500)
[   86.714353][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[   87.116388][ T7886] kvm: user requested TSC rate below hardware speed
[   87.171782][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.451'.
[   87.171837][ T7888] netlink: 'syz.6.451': attribute type 30 has an invalid length.
[   87.188368][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.451'.
[   87.188422][ T7888] netlink: 'syz.6.451': attribute type 30 has an invalid length.
[   87.203515][ T5577] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.203577][ T5577] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.203789][ T5577] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.203807][ T5577] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.205614][ T7841] usb 7-1: USB disconnect, device number 6
[   87.301829][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'.
[   87.324389][ T7899] fuse: Unknown parameter 'grou'
[   87.340109][ T7896] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.387107][ T7902] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[   87.439936][ T7908] bond0: (slave bond_slave_1): Releasing backup interface
[   87.503372][ T5087] Bluetooth: hci0: command tx timeout
[   87.553782][   T58] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[   87.704240][   T58] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   87.705229][   T58] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   87.705253][   T58] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   87.705282][   T58] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.707816][ T7894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   87.711416][   T58] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[   87.970406][   T10] usb 11-1: USB disconnect, device number 2
[   88.672216][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.680021][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.680598][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.681110][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.681727][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.682461][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.683145][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.683722][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.684789][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.685628][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.686581][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.687478][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.688455][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.689218][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.689951][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.690773][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.691477][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.692333][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.693651][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.694501][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.695490][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.696524][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.697446][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.698304][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.699217][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.700142][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.701103][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.702007][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.703006][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.705930][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.706876][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.707842][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.708749][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.709725][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.710681][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.711668][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.712594][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.715521][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.716406][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.717294][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.717981][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.718680][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.719275][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.719810][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.720295][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.720787][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.721271][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.721781][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.722262][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.722770][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.724080][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.724576][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.725093][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.725724][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.726236][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.726732][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.727295][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.727821][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.728327][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.728837][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.729397][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.729893][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.730431][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.730980][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.734118][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.938955][ T8006] CIFS: bad ip= option (.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�)
[   89.102982][ T8009] comedi: No check for data length of config insn id 1999 is implemented
[   89.103027][ T8009] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[   89.104308][ T8009] comedi: Assuming n=15 is correct
[   89.440482][ T8026] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   89.583379][ T5087] Bluetooth: hci0: command tx timeout
[   89.764577][ T8044] binder_alloc: 8042: binder_alloc_buf, no vma
[   89.767771][ T8044] binder: 8042:8044 ioctl 400c4d19 200000000000 returned -22
[   89.841463][ T8049] netlink: 'syz.5.490': attribute type 2 has an invalid length.
[   90.252602][ T8060] batadv_slave_0: entered promiscuous mode
[   90.294513][   T43] kauditd_printk_skb: 120 callbacks suppressed
[   90.294601][   T43] audit: type=1400 audit(1788872208.336:836): avc:  denied  { connect } for  pid=8061 comm="syz.5.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   90.323688][ T8058] batadv_slave_0: left promiscuous mode
[   90.345089][   T43] audit: type=1400 audit(1788872208.386:837): avc:  denied  { shutdown } for  pid=8064 comm="syz.5.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   90.351843][   T43] audit: type=1400 audit(1788872208.386:838): avc:  denied  { bind } for  pid=8064 comm="syz.5.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.361275][   T43] audit: type=1400 audit(1788872208.396:839): avc:  denied  { map } for  pid=8064 comm="syz.5.497" path="socket:[23029]" dev="sockfs" ino=23029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.361561][   T43] audit: type=1400 audit(1788872208.396:840): avc:  denied  { read } for  pid=8064 comm="syz.5.497" path="socket:[23029]" dev="sockfs" ino=23029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.407232][   T43] audit: type=1400 audit(1788872208.446:841): avc:  denied  { read } for  pid=8067 comm="syz.1.498" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   90.427631][   T43] audit: type=1400 audit(1788872208.466:842): avc:  denied  { write } for  pid=8070 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   90.502190][ T8076] xt_hashlimit: size too large, truncated to 1048576
[   90.599908][ T8092] netlink: 'syz.6.504': attribute type 4 has an invalid length.
[   90.610953][ T8092] netlink: 'syz.6.504': attribute type 4 has an invalid length.
[   90.613306][ T7840] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[   90.613487][ T8092] fuse: Bad value for 'user_id'
[   90.613498][ T8092] fuse: Bad value for 'user_id'
[   90.725827][   T43] audit: type=1400 audit(1788872208.766:843): avc:  denied  { mount } for  pid=8096 comm="syz.6.506" name="/" dev="rpc_pipefs" ino=20434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   90.733093][   T43] audit: type=1400 audit(1788872208.766:844): avc:  denied  { ioctl } for  pid=8096 comm="syz.6.506" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   90.775110][   T43] audit: type=1400 audit(1788872208.816:845): avc:  denied  { unmount } for  pid=7667 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   90.788137][ T7840] usb 10-1: not running at top speed; connect to a high speed hub
[   90.788211][ T7840] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[   90.791610][ T7840] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   90.791644][ T7840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.809859][ T7840] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[   90.829795][ T7840] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   90.846343][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.898335][ T8106] overlayfs: failed to resolve './file0': -2
[   90.902004][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.1.509
[   90.920743][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.920977][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.927050][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.1.509
[   90.978609][ T8116] __nla_validate_parse: 3 callbacks suppressed
[   90.978672][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.511'.
[   91.013159][ T7840] usb 10-1: USB disconnect, device number 4
[   91.020150][ T7840] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   91.020735][ T7840] cyberjack 10-1:1.0: device disconnected
[   91.163055][   T58] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   91.293014][   T58] usb 6-1: device descriptor read/64, error -71
[   91.345340][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[   91.345401][ T8125] netlink: 'syz.2.514': attribute type 30 has an invalid length.
[   91.354405][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[   91.354467][ T8125] netlink: 'syz.2.514': attribute type 30 has an invalid length.
[   91.363092][ T5577] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.363173][ T5577] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.363203][ T5577] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.363233][ T5577] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.443417][ T8131] jffs2: notice: (8131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found.
[   91.533138][   T58] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   91.572018][ T8141] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[   91.572099][ T8141] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[   91.586303][ T8141] syzkaller1: entered promiscuous mode
[   91.586369][ T8141] syzkaller1: entered allmulticast mode
[   91.653365][ T5087] Bluetooth: hci0: command tx timeout
[   91.663269][   T58] usb 6-1: device descriptor read/64, error -71
[   91.773246][   T58] usb usb6-port1: attempt power cycle
[   91.852289][ T8162] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[   92.113019][   T58] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   92.134776][   T58] usb 6-1: device descriptor read/8, error -71
[   92.139310][ T8170] netlink: 'syz.5.527': attribute type 13 has an invalid length.
[   92.372977][   T58] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   92.393558][   T58] usb 6-1: device descriptor read/8, error -71
[   92.503157][   T58] usb usb6-port1: unable to enumerate USB device
[   92.523792][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'.
[   93.147869][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.532'.
[   93.147916][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.6.532'.
[   93.151773][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.532'.
[   93.151786][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.532'.
[   93.259781][ T8209] ima: policy update completed
[   94.053405][ T8228] bpf: Bad value for 'gid'
[   95.180067][ T8173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.191807][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.528'.
[   95.310763][   T43] kauditd_printk_skb: 57 callbacks suppressed
[   95.310857][   T43] audit: type=1400 audit(1788872213.346:903): avc:  denied  { listen } for  pid=8240 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   95.319416][   T43] audit: type=1400 audit(1788872213.356:904): avc:  denied  { create } for  pid=8240 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   95.361959][   T43] audit: type=1800 audit(1788872213.396:905): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0
[   95.375027][   T43] audit: type=1800 audit(1788872213.416:906): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[   95.384847][   T43] audit: type=1800 audit(1788872213.426:907): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0
[   95.390517][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'.
[   95.391897][   T43] audit: type=1326 audit(1788872213.426:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.6.547" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9126f9e159 code=0x0
[   95.431251][   T43] audit: type=1400 audit(1788872213.466:909): avc:  denied  { sqpoll } for  pid=8238 comm="syz.5.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   95.446378][   T43] audit: type=1800 audit(1788872213.486:910): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0
[   95.472001][   T43] audit: type=1800 audit(1788872213.506:911): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0
[   95.535678][ T8154] syz.2.521 (8154) used greatest stack depth: 17488 bytes left
[   95.547943][ T8254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.594265][   T43] audit: type=1800 audit(1788872213.636:912): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[   95.972082][ T8275] can: request_module (can-proto-0) failed.
[   96.348690][ T8302] __nla_validate_parse: 2 callbacks suppressed
[   96.351142][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'.
[   96.353670][   T67] block nbd1: Receive control failed (result -107)
[   96.444720][ T8317] netlink: 112 bytes leftover after parsing attributes in process `syz.5.569'.
[   96.599876][ T8330] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   96.655445][ T8337] binder: 8329:8337 ioctl c018480b 200000000300 returned -22
[   96.662201][ T8331] binder_alloc: 8329: binder_alloc_buf, no vma
[   96.690394][ T8344] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[   96.690445][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'.
[   96.764800][ T8349] vxcan2: entered promiscuous mode
[   96.764858][ T8349] vxcan2: entered allmulticast mode
[   96.782345][ T5087] Bluetooth: hci2: unexpected event for opcode 0x0804
[   96.796675][ T8352] bridge3: entered promiscuous mode
[   96.796740][ T8352] bridge3: entered allmulticast mode
[   96.846074][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0c20
[   96.878526][ T8360] sg_write: data in/out 134155232/282 bytes for SCSI command 0x0-- guessing data in;
[   96.878526][ T8360]    program syz.1.585 not setting count and/or reply_len properly
[   96.985882][ T8371] netlink: 'syz.5.589': attribute type 1 has an invalid length.
[   96.988292][ T8371] netlink: 'syz.5.589': attribute type 19 has an invalid length.
[   96.990713][ T8369] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   97.182873][ T5935] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[   97.265670][   T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.271925][   T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.277455][   T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.279619][   T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.280109][   T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.312893][ T5935] usb 11-1: device descriptor read/64, error -71
[   97.459108][ T8398] SELinux: security_context_str_to_sid (4m�se�vS�:"-����X�F@
) failed with errno=-22
[   97.502128][ T8401] netlink: 68 bytes leftover after parsing attributes in process `syz.5.595'.
[   97.552909][ T5935] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[   97.661813][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.661920][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.662072][ T8381] bridge_slave_0: entered allmulticast mode
[   97.662991][ T8381] bridge_slave_0: entered promiscuous mode
[   97.664396][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.664459][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.664602][ T8381] bridge_slave_1: entered allmulticast mode
[   97.665800][ T8381] bridge_slave_1: entered promiscuous mode
[   97.683128][ T5935] usb 11-1: device descriptor read/64, error -71
[   97.700342][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.704231][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.719294][ T8381] team0: Port device team_slave_0 added
[   97.720506][ T8381] team0: Port device team_slave_1 added
[   97.737055][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.737107][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.737140][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.738606][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.738618][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.738638][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.774959][ T8381] hsr_slave_0: entered promiscuous mode
[   97.775413][ T8381] hsr_slave_1: entered promiscuous mode
[   97.775696][ T8381] debugfs: 'hsr0' already exists in 'hsr'
[   97.775707][ T8381] Cannot create hsr debugfs directory
[   97.798637][ T5935] usb usb11-port1: attempt power cycle
[   98.028505][ T8381] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   98.034386][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.037217][ T8381] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   98.041054][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.049617][ T8381] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   98.056233][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.058889][ T8381] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   98.063800][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.145495][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.147767][ T5935] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[   98.157323][ T8381] 8021q: adding VLAN 0 to HW filter on device team0
[   98.164396][ T5935] usb 11-1: device descriptor read/8, error -71
[   98.165837][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.165922][ T6460] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.173774][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.173920][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.403660][ T5935] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[   98.423248][ T5935] usb 11-1: device descriptor read/8, error -71
[   98.507396][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.534387][ T5935] usb usb11-port1: unable to enumerate USB device
[   98.623428][   T55] wlan1: Trigger new scan to find an IBSS to join
[   98.700613][ T8381] veth0_vlan: entered promiscuous mode
[   98.706255][ T8381] veth1_vlan: entered promiscuous mode
[   98.719667][ T8381] veth0_macvtap: entered promiscuous mode
[   98.723790][ T8381] veth1_macvtap: entered promiscuous mode
[   98.732560][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.744902][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.176713][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.182069][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.192720][ T5806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.192793][ T5806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.192824][ T5806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.193274][ T5806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.211463][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.211516][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.220464][ T8482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.610'.
[   99.333934][   T66] Bluetooth: hci1: command tx timeout
[   99.851637][ T8532] netlink: 32 bytes leftover after parsing attributes in process `syz.5.616'.
[  100.114101][ T8560] overlayfs: conflicting lowerdir path
[  100.133909][ T8558] overlayfs: failed lookup in lower (newroot/168, name='file0', err=-40): overlapping layers
[  100.205074][ T8558] overlayfs: failed lookup in lower (newroot/168, name='file2', err=-40): overlapping layers
[  100.271806][ T8566] Bluetooth: MGMT ver 1.23
[  100.383128][ T8568] fuse: Unknown parameter '000000000000000000000000x0000000000000000'
[  100.423520][   T43] kauditd_printk_skb: 150 callbacks suppressed
[  100.423609][   T43] audit: type=1800 audit(1788872218.467:1063): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  100.435958][   T43] audit: type=1800 audit(1788872218.477:1064): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153258 res=0 errno=0
[  100.463150][   T43] audit: type=1800 audit(1788872218.507:1065): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153269 res=0 errno=0
[  100.469523][   T43] audit: type=1400 audit(1788872218.507:1066): avc:  denied  { map } for  pid=8581 comm="syz.7.626" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  100.470813][ T8582] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  100.497772][   T43] audit: type=1800 audit(1788872218.537:1067): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  100.536818][   T43] audit: type=1800 audit(1788872218.577:1068): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  100.572827][   T43] audit: type=1800 audit(1788872218.617:1069): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  100.660104][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  100.916278][   T43] audit: type=1800 audit(1788872218.957:1070): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  100.934089][   T43] audit: type=1800 audit(1788872218.977:1071): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  100.939398][   T43] audit: type=1400 audit(1788872218.977:1072): avc:  denied  { write } for  pid=8592 comm="syz.6.630" name="fib_trie" dev="proc" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  100.959108][ T8594] binder: BINDER_SET_CONTEXT_MGR already set
[  100.959152][ T8594] binder: 8590:8594 ioctl 4018620d 200000000100 returned -16
[  100.961424][ T8591] binder_alloc: binder_alloc_mmap_handler: 8590 200000ffc000-200001000000 already mapped failed -16
[  100.961740][ T8591] binder: BINDER_SET_CONTEXT_MGR already set
[  100.961747][ T8591] binder: 8590:8591 ioctl 4018620d 200000004a80 returned -16
[  100.962162][ T8595] binder_alloc: 8590: binder_alloc_buf, no vma
[  100.962252][ T8596] binder_alloc: binder_alloc_mmap_handler: 8590 200000ffe000-200001000000 already mapped failed -16
[  101.080312][ T8608] Bluetooth: hci0: load_link_keys: too big key_count value 6144
[  101.082311][ T8609] Bluetooth: hci0: load_link_keys: too big key_count value 6144
[  101.128669][ T8614] FAULT_INJECTION: forcing a failure.
[  101.128669][ T8614] name failslab, interval 1, probability 0, space 0, times 0
[  101.128731][ T8614] CPU: 0 UID: 0 PID: 8614 Comm: syz.5.636 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  101.128764][ T8614] Tainted: [L]=SOFTLOCKUP
[  101.128770][ T8614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.128780][ T8614] Call Trace:
[  101.128786][ T8614]  <TASK>
[  101.128793][ T8614]  dump_stack_lvl+0x100/0x190
[  101.128825][ T8614]  should_fail_ex.cold+0x5/0xa
[  101.128841][ T8614]  should_failslab+0xc2/0x120
[  101.128858][ T8614]  __kmalloc_cache_noprof+0x91/0x6d0
[  101.128873][ T8614]  ? string+0x201/0x4d0
[  101.128887][ T8614]  ? format_decode+0x1ad/0xdd0
[  101.128897][ T8614]  ? tomoyo_init_log+0x1a0/0x20c0
[  101.128912][ T8614]  tomoyo_init_log+0x1a0/0x20c0
[  101.128923][ T8614]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  101.128937][ T8614]  ? vsnprintf+0x4c5/0x1300
[  101.128954][ T8614]  ? __pfx_tomoyo_init_log+0x10/0x10
[  101.128967][ T8614]  ? tomoyo_profile+0x47/0x60
[  101.128981][ T8614]  ? tomoyo_domain_quota_is_ok+0x367/0x580
[  101.128999][ T8614]  tomoyo_supervisor+0x506/0x1340
[  101.129016][ T8614]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  101.129037][ T8614]  ? tomoyo_realpath_from_path+0x19c/0x690
[  101.129053][ T8614]  ? tomoyo_check_path_number_acl+0x1e6/0x2f0
[  101.129075][ T8614]  tomoyo_path_number_perm+0x445/0x580
[  101.129092][ T8614]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  101.129110][ T8614]  ? __pfx_futex_wait+0x10/0x10
[  101.129130][ T8614]  ? __lock_acquire+0x5c0/0x1f40
[  101.129148][ T8614]  ? __fget_files+0x34/0x3d0
[  101.129161][ T8614]  ? find_held_lock+0x2b/0x80
[  101.129175][ T8614]  ? hook_file_ioctl_common+0x140/0x440
[  101.129191][ T8614]  ? __fget_files+0x21f/0x3d0
[  101.129206][ T8614]  security_file_ioctl+0xd3/0x230
[  101.129219][ T8614]  __x64_sys_ioctl+0xb7/0x210
[  101.129231][ T8614]  do_syscall_64+0x123/0x790
[  101.129245][ T8614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.129256][ T8614] RIP: 0033:0x7fee22b9e159
[  101.129268][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.129284][ T8614] RSP: 002b:00007fee239c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  101.129296][ T8614] RAX: ffffffffffffffda RBX: 00007fee22e25fa0 RCX: 00007fee22b9e159
[  101.129303][ T8614] RDX: 0000000000000000 RSI: 00000000810c9365 RDI: 0000000000000007
[  101.129310][ T8614] RBP: 00007fee22c35024 R08: 0000000000000000 R09: 0000000000000000
[  101.129318][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.129324][ T8614] R13: 00007fee22e26038 R14: 00007fee22e25fa0 R15: 00007ffc83b69208
[  101.129340][ T8614]  </TASK>
[  101.189110][   T66] Bluetooth: hci3: unexpected event for opcode 0x2029
[  101.293704][ T8622] IPVS: length: 32 != 8
[  101.362014][ T8628] program syz.5.642 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.416601][ T8636] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups)
[  101.422785][   T66] Bluetooth: hci1: command tx timeout
[  101.486967][ T8638] nfs4: Unknown parameter '
o'
[  101.498093][ T8638] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  101.593130][ T5935] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  101.662594][ T1162] wlan1: Trigger new scan to find an IBSS to join
[  101.752422][ T5935] usb 6-1: Using ep0 maxpacket: 16
[  101.755276][ T5935] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  101.760181][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.765900][ T5935] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  101.773431][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.776912][ T5935] usb 6-1: Product: syz
[  101.779585][ T5935] usb 6-1: Manufacturer: syz
[  101.781644][ T5935] usb 6-1: SerialNumber: syz
[  101.793858][ T5935] r8152-cfgselector 6-1: Unknown version 0x0000
[  101.793923][ T5935] r8152-cfgselector 6-1: config 0 descriptor??
[  101.896769][ T8654] cgroup: fork rejected by pids controller in /syz5
[  102.047716][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[  102.093951][ T5821] r8152-cfgselector 6-1: USB disconnect, device number 15
[  102.120728][ T8696] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  102.120755][ T8696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  102.121800][ T8696] vhci_hcd vhci_hcd.0: Device attached
[  102.134118][ T8699] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7)
[  102.134153][ T8699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  102.134479][ T8699] vhci_hcd vhci_hcd.0: Device attached
[  102.145767][ T8703] vhci_hcd: connection closed
[  102.146987][ T8697] vhci_hcd: connection closed
[  102.149010][ T5577] vhci_hcd vhci_hcd.7: stop threads
[  102.149031][ T5577] vhci_hcd vhci_hcd.7: release socket
[  102.149049][ T5577] vhci_hcd vhci_hcd.7: disconnect device
[  102.149611][ T5577] vhci_hcd vhci_hcd.7: stop threads
[  102.149625][ T5577] vhci_hcd vhci_hcd.7: release socket
[  102.149640][ T5577] vhci_hcd vhci_hcd.7: disconnect device
[  102.986727][ T8736] hsr_slave_0: left promiscuous mode
[  102.989333][ T8736] hsr_slave_1: left promiscuous mode
[  103.002489][ T5821] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  103.064372][ T8745] FAULT_INJECTION: forcing a failure.
[  103.064372][ T8745] name failslab, interval 1, probability 0, space 0, times 0
[  103.064426][ T8745] CPU: 3 UID: 0 PID: 8745 Comm: syz.1.664 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.064453][ T8745] Tainted: [L]=SOFTLOCKUP
[  103.064459][ T8745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.064465][ T8745] Call Trace:
[  103.064470][ T8745]  <TASK>
[  103.064474][ T8745]  dump_stack_lvl+0x100/0x190
[  103.064494][ T8745]  should_fail_ex.cold+0x5/0xa
[  103.064510][ T8745]  should_failslab+0xc2/0x120
[  103.064524][ T8745]  __kmalloc_cache_noprof+0x91/0x6d0
[  103.064541][ T8745]  ? rtnl_newlink+0x139/0x2620
[  103.064563][ T8745]  ? __pfx_rtnl_newlink+0x10/0x10
[  103.064576][ T8745]  rtnl_newlink+0x139/0x2620
[  103.064593][ T8745]  ? __pfx_rtnl_newlink+0x10/0x10
[  103.064606][ T8745]  ? avc_has_perm_noaudit+0x56/0x3b0
[  103.064622][ T8745]  ? find_held_lock+0x2b/0x80
[  103.064639][ T8745]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  103.064652][ T8745]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  103.064672][ T8745]  ? __lock_acquire+0x5c0/0x1f40
[  103.064694][ T8745]  ? lock_acquire+0x1d1/0x380
[  103.064706][ T8745]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  103.064719][ T8745]  ? find_held_lock+0x2b/0x80
[  103.064735][ T8745]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  103.064748][ T8745]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  103.064762][ T8745]  ? __pfx_rtnl_newlink+0x10/0x10
[  103.064776][ T8745]  rtnetlink_rcv_msg+0x95e/0xe90
[  103.064790][ T8745]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  103.064807][ T8745]  ? ref_tracker_free+0x37e/0x6c0
[  103.064825][ T8745]  netlink_rcv_skb+0x159/0x420
[  103.064837][ T8745]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  103.064851][ T8745]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.064866][ T8745]  ? netlink_deliver_tap+0x1ae/0xcc0
[  103.064885][ T8745]  netlink_unicast+0x585/0x850
[  103.064897][ T8745]  ? __pfx_netlink_unicast+0x10/0x10
[  103.064911][ T8745]  netlink_sendmsg+0x8b0/0xda0
[  103.064924][ T8745]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.064936][ T8745]  ? selinux_socket_sendmsg+0x198/0x2f0
[  103.064954][ T8745]  ____sys_sendmsg+0xa4d/0xbe0
[  103.064968][ T8745]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.064980][ T8745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.065003][ T8745]  ? plist_check_list+0x1b8/0x280
[  103.065018][ T8745]  ? plist_del+0x308/0x510
[  103.065037][ T8745]  ___sys_sendmsg+0x190/0x1e0
[  103.065064][ T8745]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.065090][ T8745]  ? futex_wake+0x220/0x5e0
[  103.065125][ T8745]  ? find_held_lock+0x2b/0x80
[  103.065152][ T8745]  __sys_sendmsg+0x160/0x210
[  103.065164][ T8745]  ? __pfx___sys_sendmsg+0x10/0x10
[  103.065183][ T8745]  do_syscall_64+0x123/0x790
[  103.065213][ T8745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.065227][ T8745] RIP: 0033:0x7fc4dbb9e159
[  103.065237][ T8745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.065249][ T8745] RSP: 002b:00007fc4dc9b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.065260][ T8745] RAX: ffffffffffffffda RBX: 00007fc4dbe25fa0 RCX: 00007fc4dbb9e159
[  103.065269][ T8745] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  103.065276][ T8745] RBP: 00007fc4dbc35024 R08: 0000000000000000 R09: 0000000000000000
[  103.065283][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.065291][ T8745] R13: 00007fc4dbe26038 R14: 00007fc4dbe25fa0 R15: 00007ffed42a6ca8
[  103.065307][ T8745]  </TASK>
[  103.154406][ T8737] netlink: 56 bytes leftover after parsing attributes in process `syz.5.661'.
[  103.154778][ T8740] netlink: 56 bytes leftover after parsing attributes in process `syz.5.661'.
[  103.163271][ T5821] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  103.164248][ T5821] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  103.165130][ T5821] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  103.166997][ T5821] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.167015][ T5821] usb 11-1: Product: syz
[  103.167027][ T5821] usb 11-1: Manufacturer: syz
[  103.167040][ T5821] usb 11-1: SerialNumber: syz
[  103.178785][ T5821] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected
[  103.179932][ T8756] macvtap0: entered allmulticast mode
[  103.179952][ T8756] veth0_macvtap: entered allmulticast mode
[  103.189042][ T5821] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  103.197078][ T5821] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  103.331279][ T8764] FAULT_INJECTION: forcing a failure.
[  103.331279][ T8764] name failslab, interval 1, probability 0, space 0, times 0
[  103.331353][ T8764] CPU: 2 UID: 0 PID: 8764 Comm: syz.7.667 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.331393][ T8764] Tainted: [L]=SOFTLOCKUP
[  103.331402][ T8764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.331412][ T8764] Call Trace:
[  103.331419][ T8764]  <TASK>
[  103.331429][ T8764]  dump_stack_lvl+0x100/0x190
[  103.331461][ T8764]  should_fail_ex.cold+0x5/0xa
[  103.331488][ T8764]  should_failslab+0xc2/0x120
[  103.331512][ T8764]  __kmalloc_noprof+0xfc/0x840
[  103.331531][ T8764]  ? trace_kmalloc+0xeb/0x110
[  103.331555][ T8764]  ? lsm_blob_alloc+0x68/0x90
[  103.331584][ T8764]  lsm_blob_alloc+0x68/0x90
[  103.331609][ T8764]  security_sk_alloc+0x2d/0x290
[  103.331638][ T8764]  sk_prot_alloc+0x12a/0x2a0
[  103.331666][ T8764]  sk_alloc+0x36/0xe80
[  103.331686][ T8764]  __netlink_create+0x5e/0x2c0
[  103.331711][ T8764]  ? __wake_up+0x3f/0x60
[  103.331740][ T8764]  netlink_create+0x29b/0x610
[  103.331768][ T8764]  ? __pfx_genl_bind+0x10/0x10
[  103.331785][ T8764]  ? __pfx_genl_unbind+0x10/0x10
[  103.331804][ T8764]  ? __pfx_genl_release+0x10/0x10
[  103.331826][ T8764]  __sock_create+0x339/0x860
[  103.331856][ T8764]  __sys_socket+0x14d/0x260
[  103.331890][ T8764]  ? __pfx___sys_socket+0x10/0x10
[  103.331925][ T8764]  __x64_sys_socket+0x72/0xb0
[  103.331953][ T8764]  ? lockdep_hardirqs_on+0x7d/0x110
[  103.331977][ T8764]  do_syscall_64+0x123/0x790
[  103.332004][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.332023][ T8764] RIP: 0033:0x7fe419d9f9c7
[  103.332040][ T8764] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.332057][ T8764] RSP: 002b:00007fe41ad25f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  103.332076][ T8764] RAX: ffffffffffffffda RBX: 00007fe41a025fa0 RCX: 00007fe419d9f9c7
[  103.332089][ T8764] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  103.332100][ T8764] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  103.332111][ T8764] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000
[  103.332122][ T8764] R13: 00007fe41a026038 R14: 00007fe41a025fa0 R15: 00007ffda4eb8928
[  103.332148][ T8764]  </TASK>
[  103.356249][ T8762] cdrom: dropping to single frame dma
[  103.395424][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.671'.
[  103.634961][    C3] usb 11-1: ti_interrupt_callback - nonzero urb status, -71
[  103.635195][    C3] usb 11-1: ti_interrupt_callback - nonzero urb status, -71
[  103.635475][    C3] usb 11-1: ti_interrupt_callback - nonzero urb status, -71
[  103.635699][    C3] usb 11-1: ti_interrupt_callback - nonzero urb status, -71
[  103.635774][ T5813] usb 11-1: USB disconnect, device number 7
[  103.635887][    C3] usb 11-1: ti_interrupt_callback - nonzero urb status, -71
[  103.635897][    C3] usb 11-1: ti_interrupt_callback - resubmit interrupt urb failed, -19
[  103.639426][ T8729] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -71
[  103.639461][ T8729] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -71
[  103.639533][ T8729] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -19
[  103.649278][ T5813] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  103.661693][ T5813] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  103.662087][ T5813] ti_usb_3410_5052 11-1:2.0: device disconnected
[  103.822207][ T8790] nbd7: detected capacity change from 0 to 1
[  103.825158][ T5732] buffer_io_error: 138 callbacks suppressed
[  103.825252][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825281][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825319][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825347][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825364][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825375][ T5732] ldm_validate_partition_table(): Disk read failed.
[  103.825392][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825409][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825427][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825445][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825455][ T5732] Dev nbd7: unable to read RDB block 0
[  103.825470][ T5732] Buffer I/O error on dev nbd7, logical block 0, async page read
[  103.825499][ T5732]  nbd7: unable to read partition table
[  103.825637][ T5732] nbd7: partition table beyond EOD, truncated
[  103.831101][ T5732] ldm_validate_partition_table(): Disk read failed.
[  103.831137][ T5732] Dev nbd7: unable to read RDB block 0
[  103.831165][ T5732]  nbd7: unable to read partition table
[  103.831258][ T5732] nbd7: partition table beyond EOD, truncated
[  104.124353][ T5813] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  104.214803][ T8814] bond1 (unregistering): Released all slaves
[  104.272819][ T5813] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  104.276981][ T5813] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.380919][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'.
[  104.402301][ T8819] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.496217][ T5813] cdc_acm 12-1:1.0: ttyACM0: USB ACM device
[  104.533116][ T6487] wlan1: Creating new IBSS network, BSSID ea:ea:21:5d:41:ca
[  104.950872][ T8844] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions
[  104.950915][ T8844] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address
[  104.951425][ T8844] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22
[  104.953822][ T8844] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01
[  105.018980][ T8793] block nbd7: shutting down sockets
[  105.095112][   T66] Bluetooth: hci1: command tx timeout
[  105.100185][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.697'.
[  105.101238][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.697'.
[  105.356909][ T8873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  105.436007][   T43] kauditd_printk_skb: 175 callbacks suppressed
[  105.436087][   T43] audit: type=1800 audit(1788872223.477:1248): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.688" name="/" dev="fuse" ino=1 res=0 errno=0
[  105.463703][   T43] audit: type=1800 audit(1788872223.507:1249): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  105.483639][   T43] audit: type=1800 audit(1788872223.527:1250): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  105.496452][   T43] audit: type=1800 audit(1788872223.537:1251): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  105.547256][   T43] audit: type=1800 audit(1788872223.587:1252): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  105.588250][   T43] audit: type=1800 audit(1788872223.627:1253): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155232 res=0 errno=0
[  105.599271][ T6468] nvmet: connect request for invalid subsystem testsubsys!
[  105.602903][ T8892] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  105.750700][   T43] audit: type=1800 audit(1788872223.787:1254): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  105.769295][   T43] audit: type=1800 audit(1788872223.807:1255): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35025 res=0 errno=0
[  105.773813][   T43] audit: type=1800 audit(1788872223.817:1256): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35048 res=0 errno=0
[  106.012249][ T7841] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  106.162301][ T7841] usb 10-1: Using ep0 maxpacket: 16
[  106.163089][ T7841] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  106.164025][ T7841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  106.165910][ T7841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.165929][ T7841] usb 10-1: Product: syz
[  106.165942][ T7841] usb 10-1: Manufacturer: syz
[  106.165954][ T7841] usb 10-1: SerialNumber: syz
[  106.168331][ T7841] usb 10-1: config 0 descriptor??
[  106.170537][ T7841] hub 10-1:0.0: bad descriptor, ignoring hub
[  106.170588][ T7841] hub 10-1:0.0: probe with driver hub failed with error -5
[  106.171868][   T43] audit: type=1800 audit(1788872224.207:1257): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155283 res=0 errno=0
[  106.172513][ T7841] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  106.240489][ T8900] overlayfs: failed to decode file handle (len=10, type=0, flags=0, err=-22)
[  106.240732][ T8899] overlayfs: failed to decode file handle (len=10, type=0, flags=0, err=-22)
[  106.304880][ T8904] tipc: Enabled bearer <ib:syzkaller0>, priority 10
[  106.310129][ T8903] tipc: Disabling bearer <ib:syzkaller0>
[  106.431935][ T8916] nvme_fabrics: unknown parameter or missing value 'ELF�	' in ctrl creation request
[  106.453921][ T5821] usb 10-1: USB disconnect, device number 5
[  106.632746][ T8927] fuse: Bad value for 'user_id'
[  106.632797][ T8927] fuse: Bad value for 'user_id'
[  106.673344][ T8929] fuseblk: Bad value for 'fd'
[  106.706590][   T66] Bluetooth: hci2: unexpected event for opcode 0x0401
[  106.792640][ T8933] macvlan0: entered promiscuous mode
[  106.792709][ T8933] veth1_vlan: entered promiscuous mode
[  107.054509][ T8948] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  107.066435][ T8948] cramfs: wrong magic
[  107.200357][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'.
[  107.203624][ T8956] netlink: 'syz.5.734': attribute type 7 has an invalid length.
[  107.207307][ T8956] netlink: 'syz.5.734': attribute type 8 has an invalid length.
[  107.207325][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.734'.
[  107.226796][ T8956] syz_tun: entered promiscuous mode
[  107.231013][ T8956] syz_tun: left promiscuous mode
[  107.338740][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.737'.
[  107.338806][ T8968] netlink: 'syz.6.737': attribute type 30 has an invalid length.
[  107.389873][ T8968] netlink: 'syz.6.737': attribute type 4 has an invalid length.
[  107.392804][ T8968] netlink: 'syz.6.737': attribute type 4 has an invalid length.
[  107.397342][ T8968] /dev/sg0: Can't lookup blockdev
[  107.642720][ T8983] netlink: 44 bytes leftover after parsing attributes in process `syz.6.743'.
[  107.727433][ T8987] netlink: 44 bytes leftover after parsing attributes in process `syz.6.743'.
[  107.866794][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.867745][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.871399][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.873704][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.874118][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  108.081171][ T9021] TC_ACT_REPEAT abuse ?
[  108.170741][ T9029] xt_hashlimit: size too large, truncated to 1048576
[  108.391885][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.392163][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.392397][ T8993] bridge_slave_0: entered allmulticast mode
[  108.393115][ T8993] bridge_slave_0: entered promiscuous mode
[  108.394568][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.394663][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.394810][ T8993] bridge_slave_1: entered allmulticast mode
[  108.395519][ T8993] bridge_slave_1: entered promiscuous mode
[  108.409349][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.410937][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.427476][ T8993] team0: Port device team_slave_0 added
[  108.428831][ T8993] team0: Port device team_slave_1 added
[  108.448465][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.448512][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.448640][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.451763][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.451772][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.451786][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.476240][ T8993] hsr_slave_0: entered promiscuous mode
[  108.476692][ T8993] hsr_slave_1: entered promiscuous mode
[  108.495875][ T9060] overlay: filesystem on ./file0 not supported
[  108.498795][ T9062] netlink: 44 bytes leftover after parsing attributes in process `syz.6.758'.
[  108.657120][ T8993] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  108.661718][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  108.662853][ T8993] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  108.670156][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  108.673793][ T8993] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  108.687875][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  108.691154][ T8993] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  108.699780][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  108.717443][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.717601][ T8993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.758698][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.773852][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.793733][ T8993] 8021q: adding VLAN 0 to HW filter on device team0
[  108.799952][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.800110][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.804135][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.804179][ T6487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.048046][ T8993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.177820][ T8993] veth0_vlan: entered promiscuous mode
[  109.181810][ T8993] veth1_vlan: entered promiscuous mode
[  109.196398][ T8993] veth0_macvtap: entered promiscuous mode
[  109.198412][ T8993] veth1_macvtap: entered promiscuous mode
[  109.209554][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.220279][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.245013][ T5806] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.280248][ T5577] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.280338][ T5577] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.280413][ T5577] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.312974][ T6467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.313021][ T6467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.327975][ T6467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.328016][ T6467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.536936][ T9110] SELinux:  Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped).
[  109.709510][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.766'.
[  109.892047][   T66] Bluetooth: hci3: command tx timeout
[  110.214329][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.451491][   T43] kauditd_printk_skb: 112 callbacks suppressed
[  110.451596][   T43] audit: type=1800 audit(1788872228.487:1370): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16785 res=0 errno=0
[  110.472494][ T9125] macvtap1: entered promiscuous mode
[  110.519777][   T43] audit: type=1400 audit(1788872228.557:1371): avc:  denied  { append } for  pid=9124 comm="syz.8.768" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.569510][   T43] audit: type=1800 audit(1788872228.607:1372): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  110.587394][   T43] audit: type=1800 audit(1788872228.627:1373): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162515 res=0 errno=0
[  110.590502][   T43] audit: type=1800 audit(1788872228.627:1374): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162525 res=0 errno=0
[  110.604283][   T43] audit: type=1800 audit(1788872228.647:1375): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162544 res=0 errno=0
[  110.604754][   T43] audit: type=1800 audit(1788872228.647:1376): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162554 res=0 errno=0
[  110.628045][   T43] audit: type=1800 audit(1788872228.667:1377): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16785 res=0 errno=0
[  110.643784][   T43] audit: type=1400 audit(1788872228.687:1378): avc:  denied  { mounton } for  pid=9138 comm="syz.8.770" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  110.649317][   T43] audit: type=1800 audit(1788872228.687:1379): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162573 res=0 errno=0
[  110.687941][ T5934] usb 12-1: USB disconnect, device number 2
[  110.754137][ T9150] xt_hashlimit: size too large, truncated to 1048576
[  110.991596][ T9170] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  110.991634][ T9170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  110.992691][ T9170] vhci_hcd vhci_hcd.0: Device attached
[  110.995070][ T9171] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0
[  110.995256][ T5806] vhci_hcd vhci_hcd.7: stop threads
[  110.995267][ T5806] vhci_hcd vhci_hcd.7: release socket
[  110.995277][ T5806] vhci_hcd vhci_hcd.7: disconnect device
[  111.292234][ T6392] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  111.461979][ T6392] usb 11-1: Using ep0 maxpacket: 8
[  111.462922][ T6392] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  111.463858][ T6392] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  111.463895][ T6392] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  111.463924][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  111.463947][ T6392] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.463968][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  111.463988][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  111.464010][ T6392] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  111.464032][ T6392] usb 11-1: config 168 interface 0 has no altsetting 0
[  111.464919][ T6392] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  111.464944][ T6392] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  111.464972][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  111.464993][ T6392] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.465013][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  111.465034][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  111.465055][ T6392] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  111.465077][ T6392] usb 11-1: config 168 interface 0 has no altsetting 0
[  111.466495][ T6392] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  111.466526][ T6392] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  111.466559][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  111.466581][ T6392] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.466626][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  111.466647][ T6392] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  111.466668][ T6392] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  111.466689][ T6392] usb 11-1: config 168 interface 0 has no altsetting 0
[  111.469334][ T6392] usb 11-1: string descriptor 0 read error: -22
[  111.469435][ T6392] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.484182][ T6392] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  111.548006][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.787'.
[  111.734616][  T851] usb 11-1: USB disconnect, device number 8
[  111.783175][   T10] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  111.856738][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'.
[  111.944323][   T10] usb 13-1: Using ep0 maxpacket: 32
[  111.945121][   T10] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  111.950832][   T10] usb 13-1: config index 0 descriptor too short (expected 29220, got 36)
[  111.950919][   T10] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  111.950953][   T10] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81
[  111.951004][   T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  111.951038][   T10] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  111.951074][   T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  111.951108][   T10] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  111.951144][   T10] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  111.951193][   T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.972388][ T5087] Bluetooth: hci3: command tx timeout
[  111.994946][   T10] usb 13-1: config 0 descriptor??
[  112.202976][   T10] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  112.412618][ T5837] usb 13-1: USB disconnect, device number 2
[  112.420651][ T5837] usblp0: removed
[  112.705654][ T9242] binder: 9241:9242 ioctl c00c620f 200000000000 returned -22
[  112.724114][ T9240] jffs2: notice: (9240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found.
[  112.808004][ T9253] fuse: Unknown parameter 'rootmodC'
[  112.872071][ T9257] FAT-fs (mtdblock0): bogus logical sector size 65508
[  112.872131][ T9257] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[  113.199150][ T9294] fuse: Unknown parameter 'rootmod0by��&6/N�J9��000000�00000010000000000000000000000000'
[  113.276448][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.7.809'.
[  113.386505][ T9302] nvme_fabrics: missing parameter 'traddr=%s'
[  113.500780][ T9310] program syz.7.812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.621821][ T9323] xt_hashlimit: size too large, truncated to 1048576
[  113.650868][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'.
[  113.657280][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'.
[  113.657634][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'.
[  113.658415][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'.
[  113.664696][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'.
[  113.713568][ T9313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9313 comm=syz.1.813
[  113.715808][ T9313] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  113.721211][ T9312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9312 comm=syz.1.813
[  113.853102][ T9329] trusted_key: syz.7.816 sent an empty control message without MSG_MORE.
[  114.065843][ T5087] Bluetooth: hci3: command tx timeout
[  114.344142][ T5806] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.344216][ T5806] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.469158][ T9367] netlink: 'syz.1.827': attribute type 2 has an invalid length.
[  114.483678][   T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.488466][   T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.490753][   T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.491419][   T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.498371][   T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.523604][ T5806] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.524528][ T5806] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.616761][ T5806] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.616834][ T5806] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.624034][ T9373] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[  114.624047][ T9373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  114.744878][ T5806] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.745022][ T5806] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.840227][ T9396] xt_hashlimit: size too large, truncated to 1048576
[  114.865890][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.835'.
[  115.047598][ T9413] usbcore.quirks: string doesn't fit in 127 chars.
[  115.051487][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.052696][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.102243][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.106965][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.254537][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.8.840'.
[  115.254609][ T9424] netlink: 'syz.8.840': attribute type 13 has an invalid length.
[  115.254818][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.840'.
[  115.300236][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.8.840'.
[  115.300305][ T9424] netlink: 'syz.8.840': attribute type 13 has an invalid length.
[  115.328219][ T9410] overlay: filesystem on ./file0 not supported as upperdir
[  115.436792][ T9435] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  115.457527][   T43] kauditd_printk_skb: 239 callbacks suppressed
[  115.457606][   T43] audit: type=1800 audit(1788872233.498:1619): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  115.468427][ T5806] bridge_slave_1: left allmulticast mode
[  115.468476][ T5806] bridge_slave_1: left promiscuous mode
[  115.468616][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.477583][ T5806] bridge_slave_0: left allmulticast mode
[  115.477630][ T5806] bridge_slave_0: left promiscuous mode
[  115.477820][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.489858][   T43] audit: type=1800 audit(1788872233.528:1620): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16785 res=0 errno=0
[  115.494991][   T43] audit: type=1400 audit(1788872233.538:1621): avc:  denied  { watch } for  pid=9439 comm="syz.8.845" path="/27/file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.500296][   T43] audit: type=1800 audit(1788872233.538:1622): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  115.510251][   T43] audit: type=1400 audit(1788872233.548:1623): avc:  denied  { associate } for  pid=9441 comm="syz.7.846" name="138" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  115.536488][   T43] audit: type=1800 audit(1788872233.578:1624): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16785 res=0 errno=0
[  115.613958][   T43] audit: type=1800 audit(1788872233.648:1625): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  115.628528][   T43] audit: type=1400 audit(1788872233.668:1626): avc:  denied  { create } for  pid=9448 comm="syz.7.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  115.628590][   T43] audit: type=1800 audit(1788872233.668:1627): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0
[  115.629663][   T43] audit: type=1400 audit(1788872233.668:1628): avc:  denied  { bind } for  pid=9448 comm="syz.7.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  115.663424][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.670677][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.685761][ T5806] bond0 (unregistering): Released all slaves
[  115.689642][ T5806] bond1 (unregistering): Released all slaves
[  115.712603][ T5805] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  115.712687][ T5805] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  115.712717][ T5805] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.712740][ T5805] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.712768][ T5805] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.712789][ T5805] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.712817][ T5805] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.712845][ T5805] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.712872][ T5805] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  115.712900][ T5805] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.712921][ T5805] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.712949][ T5805] netdevsim netdevsim6 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  115.856207][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.856323][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.856447][ T9368] bridge_slave_0: entered allmulticast mode
[  115.857766][ T9368] bridge_slave_0: entered promiscuous mode
[  115.880039][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.880175][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.880259][ T9368] bridge_slave_1: entered allmulticast mode
[  115.881244][ T9368] bridge_slave_1: entered promiscuous mode
[  115.911287][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.913360][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.966050][ T5440] 8021q: adding VLAN 0 to HW filter on device eth15
[  115.968124][ T9368] team0: Port device team_slave_0 added
[  115.970550][ T9368] team0: Port device team_slave_1 added
[  116.003707][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.003759][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.003793][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.004607][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.004615][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.004627][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.058179][ T9471] Dead loop on virtual device ip6_vti0 (net 34), fix it urgently!
[  116.064501][ T5806] hsr_slave_0: left promiscuous mode
[  116.066944][ T5806] hsr_slave_1: left promiscuous mode
[  116.067465][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.067477][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.069703][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.069714][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.075076][ T5806] veth1_macvtap: left promiscuous mode
[  116.075096][ T5806] veth0_macvtap: left promiscuous mode
[  116.075183][ T5806] veth1_vlan: left promiscuous mode
[  116.075216][ T5806] veth0_vlan: left promiscuous mode
[  116.131833][   T66] Bluetooth: hci3: command tx timeout
[  116.204373][ T5806] team0 (unregistering): Port device team_slave_1 removed
[  116.209961][ T5806] team0 (unregistering): Port device team_slave_0 removed
[  116.282218][ T9368] hsr_slave_0: entered promiscuous mode
[  116.283033][ T9368] hsr_slave_1: entered promiscuous mode
[  116.283624][ T9368] debugfs: 'hsr0' already exists in 'hsr'
[  116.283657][ T9368] Cannot create hsr debugfs directory
[  116.320579][ T9480] netlink: 'syz.8.854': attribute type 11 has an invalid length.
[  116.482653][ T9418] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.482735][ T9418] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.482764][ T9418] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.493899][ T9418] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.531827][   T66] Bluetooth: hci0: command tx timeout
[  116.544156][ T5440] 8021q: adding VLAN 0 to HW filter on device eth16
[  116.615352][ T9499] vlan2: entered promiscuous mode
[  116.615408][ T9499] hsr0: entered promiscuous mode
[  116.615659][ T9499] vlan2: entered allmulticast mode
[  116.615671][ T9499] hsr0: entered allmulticast mode
[  116.615682][ T9499] hsr_slave_0: entered allmulticast mode
[  116.615694][ T9499] hsr_slave_1: entered allmulticast mode
[  116.616161][ T9368] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  116.637908][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  116.638883][ T9368] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  116.651194][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  116.655888][ T9368] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  116.673014][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  116.673700][ T9368] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  116.680442][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  116.709243][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.709398][ T9368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.709621][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.709702][ T9368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.756687][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.767454][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.775382][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.794356][ T9368] 8021q: adding VLAN 0 to HW filter on device team0
[  116.795131][ T9527] sctp: [Deprecated]: syz.8.864 (pid 9527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.795131][ T9527] Use struct sctp_sack_info instead
[  116.797412][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.797457][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.801047][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.801089][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.831309][ T5440] 8021q: adding VLAN 0 to HW filter on device eth17
[  116.853597][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.853969][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.854257][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.854510][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.854795][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.855043][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.855303][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.855557][ T9531] ip_tables: iptables: counters copy to user failed while replacing table
[  116.866887][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.866993][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867083][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867228][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867314][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867411][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867501][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867594][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867688][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.867780][ T9531] x_tables: ip_tables: ECN target: only valid in mangle table, not 
[  116.884145][ T9537] overlayfs: workdir and upperdir must be separate subtrees
[  117.035744][ T5440] 8021q: adding VLAN 0 to HW filter on device eth18
[  117.160169][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.352623][ T9368] veth0_vlan: entered promiscuous mode
[  117.359936][ T9368] veth1_vlan: entered promiscuous mode
[  117.386297][ T9591] netlink: 'syz.7.873': attribute type 39 has an invalid length.
[  117.406806][ T9368] veth0_macvtap: entered promiscuous mode
[  117.413434][ T9368] veth1_macvtap: entered promiscuous mode
[  117.432965][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.440979][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.495891][ T5876] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  117.544355][ T5805] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.544834][ T5805] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.544892][ T5805] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.544921][ T5805] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.576010][ T6468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.576072][ T6468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.610941][ T6468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.611002][ T6468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.654578][ T9596] afs: Unknown parameter 'dynv/kvm'
[  117.655064][ T5876] usb 13-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  117.656521][ T5876] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.656543][ T5876] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  117.656575][ T5876] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.761197][ T9596] nvme nvme0: rdma_resolve_addr failed (-19).
[  117.864139][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.868430][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.869046][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.869249][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.877920][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.878138][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.884384][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.898221][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.898924][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.899112][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.936932][ T9583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9583 comm=syz.8.872
[  117.969764][ T9583] netlink: 'syz.8.872': attribute type 5 has an invalid length.
[  117.982119][ T5821] usb 13-1: USB disconnect, device number 3
[  118.178539][ T9627] LUN: removable file: (no medium)
[  118.199206][ T9628] 
[  118.200436][ T9628] ======================================================
[  118.203407][ T9628] WARNING: possible circular locking dependency detected
[  118.206451][ T9628] syzkaller #0 Tainted: G             L     
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  118.209173][ T9628] ------------------------------------------------------
[  118.212560][ T9628] syz.7.880/9628 is trying to acquire lock:
[  118.215143][ T9628] ffff888055a64460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990
[  118.218964][ T9628] 
[  118.218964][ T9628] but task is already holding lock:
[  118.222072][ T9628] ffff8880278c2920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450
[  118.226070][ T9628] 
[  118.226070][ T9628] which lock already depends on the new lock.
[  118.226070][ T9628] 
[  118.230251][ T9628] 
[  118.230251][ T9628] the existing dependency chain (in reverse order) is:
[  118.234258][ T9628] 
[  118.234258][ T9628] -> #3 (&common->filesem){++++}-{4:4}:
[  118.237733][ T9628]        lock_acquire+0x1d1/0x380
[  118.239972][ T9628]        down_read+0x99/0x4c0
[  118.242145][ T9628]        fsg_show_file+0x20/0x180
[  118.244267][ T9628]        configfs_read_iter+0x426/0x6f0
[  118.246582][ T9628]        __kernel_read+0x397/0xad0
[  118.248831][ T9628]        integrity_kernel_read+0x7e/0xb0
[  118.251309][ T9628]        ima_calc_file_hash_tfm+0x25e/0x350
[  118.253922][ T9628]        ima_calc_file_hash+0x167/0x380
[  118.256512][ T9628]        ima_collect_measurement+0x94f/0xb30
[  118.259037][ T9628]        process_measurement+0xdfe/0x2350
[  118.261502][ T9628]        ima_file_check+0xc3/0x110
[  118.263755][ T9628]        security_file_post_open+0xc4/0x210
[  118.266261][ T9628]        path_openat+0x5cd/0x2440
[  118.268446][ T9628]        do_file_open+0x20e/0x430
[  118.270678][ T9628]        do_sys_openat2+0x10f/0x1e0
[  118.272957][ T9628]        __x64_sys_openat+0x12d/0x210
[  118.275308][ T9628]        do_syscall_64+0x123/0x790
[  118.277886][ T9628]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.280715][ T9628] 
[  118.280715][ T9628] -> #2 (&p->frag_sem){.+.+}-{4:4}:
[  118.283969][ T9628]        lock_acquire+0x1d1/0x380
[  118.286175][ T9628]        down_read+0x99/0x4c0
[  118.288235][ T9628]        __configfs_open_file+0xe8/0x9c0
[  118.290715][ T9628]        do_dentry_open+0x6ab/0x14d0
[  118.293015][ T9628]        vfs_open+0x82/0x3f0
[  118.295083][ T9628]        dentry_open+0x71/0xd0
[  118.297215][ T9628]        ima_calc_file_hash+0xe1/0x380
[  118.299621][ T9628]        ima_collect_measurement+0x94f/0xb30
[  118.302615][ T9628]        process_measurement+0xdfe/0x2350
[  118.305071][ T9628]        ima_file_check+0xc3/0x110
[  118.307190][ T9628]        security_file_post_open+0xc4/0x210
[  118.309641][ T9628]        path_openat+0x5cd/0x2440
[  118.311759][ T9628]        do_file_open+0x20e/0x430
[  118.313843][ T9628]        do_sys_openat2+0x10f/0x1e0
[  118.316228][ T9628]        __x64_sys_openat+0x12d/0x210
[  118.318630][ T9628]        do_syscall_64+0x123/0x790
[  118.320889][ T9628]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.323584][ T9628] 
[  118.323584][ T9628] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  118.327719][ T9628]        lock_acquire+0x1d1/0x380
[  118.329928][ T9628]        __mutex_lock+0x1a4/0x1bd0
[  118.332189][ T9628]        process_measurement+0x5ab/0x2350
[  118.334651][ T9628]        ima_file_check+0xc3/0x110
[  118.336902][ T9628]        security_file_post_open+0xc4/0x210
[  118.339515][ T9628]        path_openat+0x5cd/0x2440
[  118.341740][ T9628]        do_file_open+0x20e/0x430
[  118.343965][ T9628]        do_sys_openat2+0x10f/0x1e0
[  118.346244][ T9628]        __x64_sys_openat+0x12d/0x210
[  118.348587][ T9628]        do_syscall_64+0x123/0x790
[  118.350872][ T9628]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.353996][ T9628] 
[  118.353996][ T9628] -> #0 (sb_writers#6){.+.+}-{0:0}:
[  118.357134][ T9628]        check_prev_add+0xeb/0xe60
[  118.359387][ T9628]        __lock_acquire+0x1528/0x1f40
[  118.361737][ T9628]        lock_acquire+0x1d1/0x380
[  118.363958][ T9628]        mnt_want_write+0x6f/0x420
[  118.366206][ T9628]        lookup_open+0x150/0x1990
[  118.368417][ T9628]        path_openat+0xa2c/0x2440
[  118.370661][ T9628]        do_file_open+0x20e/0x430
[  118.372867][ T9628]        file_open_name+0x1c3/0x3e0
[  118.375159][ T9628]        filp_open+0x2e/0x50
[  118.377226][ T9628]        fsg_lun_open+0x6b/0x7b0
[  118.379417][ T9628]        fsg_store_file+0x1e7/0x450
[  118.382013][ T9628]        configfs_write_iter+0x302/0x4e0
[  118.384123][ T9628]        vfs_write+0x6af/0x1050
[  118.386213][ T9628]        ksys_write+0x12a/0x250
[  118.388318][ T9628]        do_syscall_64+0x123/0x790
[  118.390408][ T9628]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.393088][ T9628] 
[  118.393088][ T9628] other info that might help us debug this:
[  118.393088][ T9628] 
[  118.397276][ T9628] Chain exists of:
[  118.397276][ T9628]   sb_writers#6 --> &p->frag_sem --> &common->filesem
[  118.397276][ T9628] 
[  118.402477][ T9628]  Possible unsafe locking scenario:
[  118.402477][ T9628] 
[  118.405547][ T9628]        CPU0                    CPU1
[  118.408213][ T9628]        ----                    ----
[  118.410538][ T9628]   lock(&common->filesem);
[  118.412558][ T9628]                                lock(&p->frag_sem);
[  118.415526][ T9628]                                lock(&common->filesem);
[  118.418547][ T9628]   rlock(sb_writers#6);
[  118.420450][ T9628] 
[  118.420450][ T9628]  *** DEADLOCK ***
[  118.420450][ T9628] 
[  118.423965][ T9628] locks held by syz.7.880/9628: 5, last CPU#3:
[  118.426683][ T9628]  #0: ffff888027510630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  118.430345][ T9628]  #1: ffff888024594460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  118.433768][ T9628]  #2: ffff88803dbb2280 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0
[  118.437314][ T9628]  #3: ffff888059662470 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0
[  118.440699][ T9628]  #4: ffff8880278c2920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450
[  118.444687][ T9628] 
[  118.444687][ T9628] stack backtrace:
[  118.447194][ T9628] CPU: 3 UID: 0 PID: 9628 Comm: syz.7.880 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  118.451636][ T9628] Tainted: [L]=SOFTLOCKUP
[  118.453439][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  118.457685][ T9628] Call Trace:
[  118.459082][ T9628]  <TASK>
[  118.460299][ T9628]  dump_stack_lvl+0x100/0x190
[  118.462226][ T9628]  print_circular_bug.cold+0x178/0x1be
[  118.464484][ T9628]  check_noncircular+0x146/0x160
[  118.467012][ T9628]  check_prev_add+0xeb/0xe60
[  118.468946][ T9628]  __lock_acquire+0x1528/0x1f40
[  118.470978][ T9628]  lock_acquire+0x1d1/0x380
[  118.472850][ T9628]  ? lookup_open+0x150/0x1990
[  118.474797][ T9628]  ? __pfx___might_resched+0x10/0x10
[  118.476860][ T9628]  ? find_held_lock+0x2b/0x80
[  118.478671][ T9628]  mnt_want_write+0x6f/0x420
[  118.480419][ T9628]  ? lookup_open+0x150/0x1990
[  118.482240][ T9628]  lookup_open+0x150/0x1990
[  118.484023][ T9628]  path_openat+0xa2c/0x2440
[  118.485878][ T9628]  ? __pfx_path_openat+0x10/0x10
[  118.487945][ T9628]  ? kasan_save_stack+0x3f/0x50
[  118.490012][ T9628]  ? kasan_save_stack+0x30/0x50
[  118.492076][ T9628]  ? kasan_save_track+0x14/0x30
[  118.494065][ T9628]  ? __kasan_slab_alloc+0x89/0x90
[  118.496179][ T9628]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[  118.498449][ T9628]  ? do_getname_kernel+0x5d/0x250
[  118.500075][ T9628]  ? filp_open+0x1d/0x50
[  118.501474][ T9628]  do_file_open+0x20e/0x430
[  118.503212][ T9628]  ? __pfx_do_file_open+0x10/0x10
[  118.505238][ T9628]  file_open_name+0x1c3/0x3e0
[  118.507073][ T9628]  ? __pfx_file_open_name+0x10/0x10
[  118.509237][ T9628]  ? do_getname_kernel+0x5d/0x250
[  118.511356][ T9628]  ? __asan_memcpy+0x3c/0x60
[  118.512858][ T9628]  ? do_getname_kernel+0x1be/0x250
[  118.514538][ T9628]  filp_open+0x2e/0x50
[  118.515870][ T9628]  fsg_lun_open+0x6b/0x7b0
[  118.517314][ T9628]  ? __pfx_down_read+0x10/0x10
[  118.518839][ T9628]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  118.520576][ T9628]  fsg_store_file+0x1e7/0x450
[  118.522104][ T9628]  configfs_write_iter+0x302/0x4e0
[  118.523735][ T9628]  vfs_write+0x6af/0x1050
[  118.525231][ T9628]  ? __pfx_configfs_write_iter+0x10/0x10
[  118.527011][ T9628]  ? __pfx_vfs_write+0x10/0x10
[  118.528528][ T9628]  ? find_held_lock+0x2b/0x80
[  118.530453][ T9628]  ksys_write+0x12a/0x250
[  118.531810][ T9628]  ? __pfx_ksys_write+0x10/0x10
[  118.533543][ T9628]  do_syscall_64+0x123/0x790
[  118.535145][ T9628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.536991][ T9628] RIP: 0033:0x7fe419d9e159
[  118.538410][ T9628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.544406][ T9628] RSP: 002b:00007fe41ad06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  118.547785][ T9628] RAX: ffffffffffffffda RBX: 00007fe41a026090 RCX: 00007fe419d9e159
[  118.551098][ T9628] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006
[  118.554451][ T9628] RBP: 00007fe419e35024 R08: 0000000000000000 R09: 0000000000000000
[  118.557766][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.561098][ T9628] R13: 00007fe41a026128 R14: 00007fe41a026090 R15: 00007ffda4eb8928
[  118.564854][ T9628]  </TASK>
[  118.567950][ T9628] mass_storage.usb0/lun.0: unable to open backing file: 
P
[  118.611750][   T66] Bluetooth: hci0: command tx timeout
[  118.621497][  T851] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  119.043940][ T5805] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.100467][ T5805] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.189371][ T5805] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.268687][ T5805] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.346586][ T5806] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  119.359041][ T5805] bridge_slave_1: left allmulticast mode
[  119.359126][ T5805] bridge_slave_1: left promiscuous mode
[  119.359215][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.363554][ T5805] bridge_slave_0: left allmulticast mode
[  119.363572][ T5805] bridge_slave_0: left promiscuous mode
[  119.363680][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.409187][ T5805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.412983][ T5805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.417008][ T5805] bond0 (unregistering): Released all slaves
[  119.441508][ T9418] netdevsim netdevsim8 eth22: set [1, 0] type 2 family 0 port 6081 - 0
[  119.441564][ T9418] netdevsim netdevsim8 eth21: set [1, 0] type 2 family 0 port 6081 - 0
[  119.441582][ T9418] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  119.528541][ T5440] 8021q: adding VLAN 0 to HW filter on device eth19
[  119.628285][ T5805] hsr_slave_0: left promiscuous mode
[  119.630783][ T5805] hsr_slave_1: left promiscuous mode
[  119.631327][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.633741][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.682711][ T5805] team0 (unregistering): Port device team_slave_1 removed
[  119.686063][ T5805] team0 (unregistering): Port device team_slave_0 removed
[  119.722184][ T5440] 8021q: adding VLAN 0 to HW filter on device eth20
[  119.845431][ T5440] 8021q: adding VLAN 0 to HW filter on device eth21
[  119.983719][ T5440] 8021q: adding VLAN 0 to HW filter on device eth22
[  120.144927][ T5805] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.724927][ T5805] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.776697][ T5805] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.836818][ T5805] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.898893][   T43] kauditd_printk_skb: 114 callbacks suppressed
[  120.898951][   T43] audit: type=1800 audit(1788872238.938:1743): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173454 res=0 errno=0
[  120.900548][   T43] audit: type=1800 audit(1788872238.938:1744): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=173459 res=0 errno=0
[  120.900763][   T43] audit: type=1800 audit(1788872238.938:1745): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=173463 res=0 errno=0
[  120.901404][   T43] audit: type=1800 audit(1788872238.938:1746): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=173462 res=0 errno=0
[  120.901909][   T43] audit: type=1800 audit(1788872238.948:1747): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=173465 res=0 errno=0
[  120.903599][   T43] audit: type=1800 audit(1788872238.948:1748): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173540 res=0 errno=0
[  120.904154][   T43] audit: type=1800 audit(1788872238.948:1749): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=173545 res=0 errno=0
[  120.904501][   T43] audit: type=1800 audit(1788872238.948:1750): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=173549 res=0 errno=0
[  120.904866][   T43] audit: type=1800 audit(1788872238.948:1751): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=173548 res=0 errno=0
[  120.905269][   T43] audit: type=1800 audit(1788872238.948:1752): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=173551 res=0 errno=0
[  120.940126][ T5805] bridge_slave_1: left allmulticast mode
[  120.940148][ T5805] bridge_slave_1: left promiscuous mode
[  120.940311][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.953329][ T5805] bridge_slave_0: left allmulticast mode
[  120.953349][ T5805] bridge_slave_0: left promiscuous mode
[  120.953460][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.025719][ T5805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.029907][ T5805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.033757][ T5805] bond0 (unregistering): Released all slaves
[  121.037383][ T5440] 8021q: adding VLAN 0 to HW filter on device eth23
[  121.061396][ T9418] netdevsim netdevsim9 eth26: set [1, 0] type 2 family 0 port 6081 - 0
[  121.061469][ T9418] netdevsim netdevsim9 eth23: set [1, 0] type 2 family 0 port 6081 - 0
[  121.061514][ T9418] netdevsim netdevsim9 eth25: set [1, 0] type 2 family 0 port 6081 - 0
[  121.061539][ T9418] netdevsim netdevsim9 eth24: set [1, 0] type 2 family 0 port 6081 - 0
[  121.155167][ T5440] 8021q: adding VLAN 0 to HW filter on device eth24
[  121.188763][ T5805] hsr_slave_0: left promiscuous mode
[  121.190659][ T5805] hsr_slave_1: left promiscuous mode
[  121.190972][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.190982][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.193345][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.193357][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.197092][ T5805] veth1_macvtap: left promiscuous mode
[  121.197108][ T5805] veth0_macvtap: left promiscuous mode
[  121.197135][ T5805] veth1_vlan: left promiscuous mode
[  121.197163][ T5805] veth0_vlan: left promiscuous mode
[  121.263363][ T5805] team0 (unregistering): Port device team_slave_1 removed
[  121.266782][ T5805] team0 (unregistering): Port device team_slave_0 removed
[  121.295766][ T5440] 8021q: adding VLAN 0 to HW filter on device eth25
[  121.459619][ T5440] 8021q: adding VLAN 0 to HW filter on device eth26
[  123.022068][    C2] ata1: illegal qc_active transition (00000000->02000000)
[  123.355291][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  123.356429][ T1131] ata1.00: configured for UDMA/100
[  126.827614][   T43] kauditd_printk_skb: 18 callbacks suppressed
[  126.827687][   T43] audit: type=1400 audit(1788872244.868:1771): avc:  denied  { write } for  pid=9711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.863154][   T43] audit: type=1400 audit(1788872244.908:1772): avc:  denied  { write } for  pid=9714 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.891384][   T43] audit: type=1400 audit(1788872245.938:1773): avc:  denied  { write } for  pid=9724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.920696][   T43] audit: type=1400 audit(1788872245.958:1774): avc:  denied  { write } for  pid=9727 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.040368][   T43] audit: type=1400 audit(1788872246.078:1775): avc:  denied  { write } for  pid=9730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  128.069794][   T43] audit: type=1400 audit(1788872246.108:1776): avc:  denied  { write } for  pid=9733 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1