last executing test programs:

5m47.221594974s ago: executing program 32 (id=485):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIGETBSZ(r0, 0x5421, &(0x7f0000000040))
r1 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000002c0)={0x10200, 0x0, &(0x7f0000ffb000/0x2000)=nil})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$FIGETBSZ(r0, 0x5421, &(0x7f0000000040)) (async)
signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000002c0)={0x10200, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async)

5m36.473315628s ago: executing program 33 (id=639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
preadv(r1, &(0x7f00000032c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0)
write$UHID_INPUT(r3, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

4m20.563587577s ago: executing program 34 (id=1562):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r2 = dup(r1)
read(r2, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1000})

3m49.545058844s ago: executing program 35 (id=1994):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00')
read$alg(r2, &(0x7f0000000100)=""/220, 0xdc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4854}, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000280), 0x6, 0x400)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x27, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x82}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8c8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x50, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r8, 0xffffffffffffffff, r10], &(0x7f00000004c0)=[{0x0, 0x5, 0x5, 0xb}, {0x5, 0x4, 0x4, 0x6}, {0x1, 0x4, 0x10, 0x9}, {0x4, 0x2, 0x0, 0x2}], 0x10, 0x1}, 0x94)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3m35.634164179s ago: executing program 36 (id=2322):
syz_clone(0x80000000, &(0x7f0000000500)="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", 0xb01, 0x0, 0x0, 0x0)
io_setup(0xfffff77e, &(0x7f0000000040)=<r0=>0x0)
io_submit(r0, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

3m20.591044856s ago: executing program 37 (id=2525):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'nv'}, &(0x7f0000000640)='\xb4-}\x00', 0x4, 0x1)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a"], 0x184}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
fstat(r8, &(0x7f000000b100))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x24000081}, 0x4)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0x37bc8000)
r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r4)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd2763eee03f33855}, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000004c0), 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

3m13.416451834s ago: executing program 38 (id=2430):
r0 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
pread64(r2, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x80}}, 0x200449c1)
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000000)=""/119)

2m48.127178324s ago: executing program 39 (id=2994):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x14) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x80800)

2m24.984037209s ago: executing program 9 (id=3332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r3, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r3, 0x34e5}], 0x1, 0x40)
r4 = fanotify_init(0x200, 0x0)
r5 = socket(0x29, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
fanotify_mark(r4, 0x1, 0x40000032, r2, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000003c0)='-', 0x1}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

2m24.981039802s ago: executing program 9 (id=3334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
syz_io_uring_setup(0x3282, &(0x7f0000000280)={0x0, 0xc4cf, 0x10100, 0x4}, &(0x7f00000001c0), 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00036c0000006c031da481a24956e578b704f6bb9e0ac3b8e68ff593698efd2539d923a400be54b7451ca4f8e0453d1ef962dacf869e09eb66bcc9df41a87a430450cc5dcc1d1f76add480ac97e112b1fc8e547e03ff63a01fb11c2f129109bb16491d7b7b639fd0653e10c8af96a753f258294e38e951ad96b68f7fb88dc971c6ce1fbc07071e8c2f0de66440ffda9a6dd0eba8f3dd3ec06d56e65697f73f60818b38a3c224aa4f14ed4a3771c50785cf68513a316fb219e96af77f7eaf41a82acac82e00"/208], 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r4 = dup(r3)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000340)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000340)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)
bind$xdp(r7, &(0x7f0000000240)={0x2c, 0x1, r8}, 0x10)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
getsockopt(r5, 0x5ba5, 0x3, &(0x7f00000000c0)=""/138, &(0x7f0000000040)=0x8a) (async)
getsockopt(r5, 0x5ba5, 0x3, &(0x7f00000000c0)=""/138, &(0x7f0000000040)=0x8a)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)

2m24.034048419s ago: executing program 9 (id=3343):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd21, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0xfff}}, './file0\x00'})
bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90)

2m23.866212237s ago: executing program 9 (id=3346):
setreuid(0x0, 0xee00)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="68000600", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25010000000000000008410000004c001800000008696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0xf3, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x2001, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0xffffffff, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f00000000c0)=0x18)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)
r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

2m23.124583762s ago: executing program 9 (id=3349):
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2})
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb", 0x2e}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {0x0}, {&(0x7f0000000780)}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030720bd7002f8dbdf250d000000"], 0x14}}, 0x4008800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m22.944401347s ago: executing program 9 (id=3350):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040), 0x4) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)
r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "fcffffff", ["5089986400005cacf10000b6", "8e1500", "0c436d743c97c443084000", "ff81000000008000"]})
r3 = fanotify_init(0x0, 0x0) (async)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x10)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r7, 0x0) (async, rerun: 32)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 32)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="dab2e761c98b20a09a391cd120c72bdb2581a214c96ede0306e44b40585e24ed5eb5a9f316e2c68d2f15301a973f764c76a786f51a543e0186e276b66e27ae428cde18d12e9a8cc8490f828993b3d5d88fadd09ad05c732267d2f82b230b5376d971b3", @ANYRESOCT, @ANYRES32, @ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x14041}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000640ffffff000c000b40000000000000009014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

2m8.213811432s ago: executing program 7 (id=3518):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
setreuid(0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32], 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

2m7.954376327s ago: executing program 7 (id=3519):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x42, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,aname=-'])
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)

2m7.953919515s ago: executing program 7 (id=3520):
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
dup(r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000001000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffffd}, 0x1c)
listen(r3, 0x3)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e7832f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
setreuid(0x0, 0xee01)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000180)={<r7=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @local, @rand_addr=0x64010101}, {{0xfffd, 0x4e22, r7, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001500)={@local, @random="b9890c6f9ebb", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x2, 0x0, 0x932}}}}}}, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0xf0bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r9, 0x40943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r10 = eventfd(0x800a6)
write$eventfd(r10, &(0x7f0000000000)=0xfffffffffffffffb, 0x8)

2m7.95298953s ago: executing program 40 (id=3350):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040), 0x4) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)
r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "fcffffff", ["5089986400005cacf10000b6", "8e1500", "0c436d743c97c443084000", "ff81000000008000"]})
r3 = fanotify_init(0x0, 0x0) (async)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x10)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r7, 0x0) (async, rerun: 32)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 32)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="dab2e761c98b20a09a391cd120c72bdb2581a214c96ede0306e44b40585e24ed5eb5a9f316e2c68d2f15301a973f764c76a786f51a543e0186e276b66e27ae428cde18d12e9a8cc8490f828993b3d5d88fadd09ad05c732267d2f82b230b5376d971b3", @ANYRESOCT, @ANYRES32, @ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x14041}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000640ffffff000c000b40000000000000009014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

2m4.703456656s ago: executing program 7 (id=3550):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c03, r3)
r4 = dup2(r2, r0)
syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
ftruncate(r4, 0x8)

2m4.490293873s ago: executing program 7 (id=3552):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x18, r1, 0x4d, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x20000000)

2m3.915108251s ago: executing program 7 (id=3553):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004002238030008000a00", @ANYRES32=r2, @ANYBLOB="1c00128009000120626f6ed1080000000c00028005000d00020000003d060c31ed0e6ca3b4ccc815349a2bdec6826c2e2d16881ebb348a39d7c4"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x76d, 0x10000001, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback}}}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000000)=0x783d, 0x0, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007b00), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000007b40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB='\x00\x00\x00'], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x20000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}})

2m3.809593303s ago: executing program 41 (id=3553):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004002238030008000a00", @ANYRES32=r2, @ANYBLOB="1c00128009000120626f6ed1080000000c00028005000d00020000003d060c31ed0e6ca3b4ccc815349a2bdec6826c2e2d16881ebb348a39d7c4"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x76d, 0x10000001, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback}}}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000000)=0x783d, 0x0, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007b00), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000007b40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB='\x00\x00\x00'], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x20000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}})

1m39.131914801s ago: executing program 4 (id=3886):
r0 = socket(0xa, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c400714"], 0xf)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x19, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8)
r1 = syz_open_dev$cec(&(0x7f00000008c0), 0x0, 0x80)
ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000900))
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2376125", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6})
close(r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={<r5=>0x0, 0x6}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="4aaed590e5de75b60600"], 0xe)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6)

1m38.944064883s ago: executing program 4 (id=3889):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
close(0x3)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_PHYS_SWITCH_ID]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x404c0d0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)

1m38.883942183s ago: executing program 4 (id=3890):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f0000000040)='net/xfrm_stat\x00')
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_ACTIVITY={{0x3}, 0xc}}}, 0x7)

1m38.882018866s ago: executing program 4 (id=3891):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c0002800800010024b3"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1m38.823201405s ago: executing program 4 (id=3894):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r2=>0x0})
syz_open_procfs(r2, 0x0)
ptrace$pokeuser(0x6, r1, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200010, 0x0)

1m38.758839959s ago: executing program 4 (id=3896):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x6, 0x80000001, '\x00', &(0x7f0000000040)=0x2}) (async)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x11)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) (async)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000200)=0x80000) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000080)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=<r3=>r0, 0x7, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r0, r0, 0x38, 0x2010, r0, @value=r5, @void, @void, @void, r4}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', <r6=>0x0, 0x7800, 0x7, 0x5, 0x6, {{0x30, 0x4, 0x3, 0x8, 0xc0, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@generic={0x44, 0x7, "3f374bb6c0"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x21, 0x3, [{0x2, 0x9, "b1bb070cb358f1"}, {0x0, 0x12, "d8921871c15dfc2af2b29563037fa7b4"}]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0x2}, {0xc, 0x11, "21d6a487e6a2ef0964e168d60707af"}, {0x6, 0xc, "542fc7e67083bcca05e5"}, {0x1, 0x11, "f5d7335eb777e0cac251f9ac1346e9"}, {0x1, 0x3, '|'}]}, @timestamp={0x44, 0x14, 0x39, 0x0, 0x1, [0x6, 0x6, 0x6, 0x5]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x0, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0xd}, {@private=0xa010102, 0x1}]}, @ssrr={0x89, 0x7, 0x6e, [@broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x742a76c712ca0894}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) (async)
ioctl$int_out(r3, 0x5462, &(0x7f0000000880)) (async)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = accept(r7, &(0x7f00000008c0)=@nl=@unspec, &(0x7f0000000940)=0x80)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x140f, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x8800)
write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xa, 0x2, 0xc, 0x3, 0x3, 0x3e, 0xa0, 0x16e, 0x40, 0x5c, 0x2, 0x2, 0x38, 0x1, 0x9, 0x0, 0x2}, [{0x1, 0x7f, 0x6, 0x1, 0x7fffffffffffffff, 0x1f, 0xd}], "183c3ab3a14ffc75c6bdf787488d3cb33e7f69be2ce2825db6358e6af52ad70d4909aae69cce3df29c5a67d19d59330c7b878cd3d2ba5346935f4cdaeb8401b3b78b1e1417bf600b53b45f36f4eec23359582a88cfde10d61263d00cfe97cec4954781375272c3549267b0bb54264ea75392b56dcd504ef9ead794e42032d9d9ac93d7d0d4ae0bbb1d5b019148044a5678f65f1b00502417a1ce6684462708ede6949f9a787af64f256d97d9c872b6fc7fd4c494393c5dd47df1b88eba00a42eb3c33e05c3c4f7f1a8", ['\x00']}, 0x241)
socket$can_j1939(0x1d, 0x2, 0x7)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, r0, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x2}, 0x50) (async)
r10 = syz_open_dev$vcsa(&(0x7f0000000dc0), 0x1ff, 0x20000)
bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x13, 0x1, 0x2, 0x21, 0x81, r9, 0xbe, '\x00', 0x0, r10, 0x5, 0x4}, 0x50) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000e80)={0x4, "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"}) (async)
r11 = socket$rds(0x15, 0x5, 0x0)
recvfrom(r0, &(0x7f00000010c0)=""/88, 0x58, 0x0, &(0x7f0000001140)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e21, @loopback}, 0x1, 0x0, 0x1, 0x3}}, 0x80) (async)
sendfile(r5, r8, &(0x7f00000011c0)=0x9, 0x3)
move_mount(r0, &(0x7f0000001200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x173) (async)
ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000001280))
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f00000012c0))

1m23.643470028s ago: executing program 42 (id=3896):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x6, 0x80000001, '\x00', &(0x7f0000000040)=0x2}) (async)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x11)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) (async)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000200)=0x80000) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000080)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=<r3=>r0, 0x7, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r0, r0, 0x38, 0x2010, r0, @value=r5, @void, @void, @void, r4}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', <r6=>0x0, 0x7800, 0x7, 0x5, 0x6, {{0x30, 0x4, 0x3, 0x8, 0xc0, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@generic={0x44, 0x7, "3f374bb6c0"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x21, 0x3, [{0x2, 0x9, "b1bb070cb358f1"}, {0x0, 0x12, "d8921871c15dfc2af2b29563037fa7b4"}]}, @cipso={0x86, 0x39, 0x3, [{0x0, 0x2}, {0xc, 0x11, "21d6a487e6a2ef0964e168d60707af"}, {0x6, 0xc, "542fc7e67083bcca05e5"}, {0x1, 0x11, "f5d7335eb777e0cac251f9ac1346e9"}, {0x1, 0x3, '|'}]}, @timestamp={0x44, 0x14, 0x39, 0x0, 0x1, [0x6, 0x6, 0x6, 0x5]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x0, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0xd}, {@private=0xa010102, 0x1}]}, @ssrr={0x89, 0x7, 0x6e, [@broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x742a76c712ca0894}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) (async)
ioctl$int_out(r3, 0x5462, &(0x7f0000000880)) (async)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = accept(r7, &(0x7f00000008c0)=@nl=@unspec, &(0x7f0000000940)=0x80)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x140f, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x8800)
write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xa, 0x2, 0xc, 0x3, 0x3, 0x3e, 0xa0, 0x16e, 0x40, 0x5c, 0x2, 0x2, 0x38, 0x1, 0x9, 0x0, 0x2}, [{0x1, 0x7f, 0x6, 0x1, 0x7fffffffffffffff, 0x1f, 0xd}], "183c3ab3a14ffc75c6bdf787488d3cb33e7f69be2ce2825db6358e6af52ad70d4909aae69cce3df29c5a67d19d59330c7b878cd3d2ba5346935f4cdaeb8401b3b78b1e1417bf600b53b45f36f4eec23359582a88cfde10d61263d00cfe97cec4954781375272c3549267b0bb54264ea75392b56dcd504ef9ead794e42032d9d9ac93d7d0d4ae0bbb1d5b019148044a5678f65f1b00502417a1ce6684462708ede6949f9a787af64f256d97d9c872b6fc7fd4c494393c5dd47df1b88eba00a42eb3c33e05c3c4f7f1a8", ['\x00']}, 0x241)
socket$can_j1939(0x1d, 0x2, 0x7)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, r0, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x2}, 0x50) (async)
r10 = syz_open_dev$vcsa(&(0x7f0000000dc0), 0x1ff, 0x20000)
bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x13, 0x1, 0x2, 0x21, 0x81, r9, 0xbe, '\x00', 0x0, r10, 0x5, 0x4}, 0x50) (async)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000e80)={0x4, "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"}) (async)
r11 = socket$rds(0x15, 0x5, 0x0)
recvfrom(r0, &(0x7f00000010c0)=""/88, 0x58, 0x0, &(0x7f0000001140)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e21, @loopback}, 0x1, 0x0, 0x1, 0x3}}, 0x80) (async)
sendfile(r5, r8, &(0x7f00000011c0)=0x9, 0x3)
move_mount(r0, &(0x7f0000001200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x173) (async)
ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000001280))
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f00000012c0))

56.702597975s ago: executing program 3 (id=4210):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r0, 0x0, 0x6}, 0x18)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x6, &(0x7f0000000080)={0x10, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})

56.641977598s ago: executing program 3 (id=4212):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4, 0x22d11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0xc004)

56.641789934s ago: executing program 3 (id=4213):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = gettid()
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe)
getpeername(r3, 0x0, &(0x7f0000000300))
listen(r2, 0x3)
accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60)
sendmmsg(r4, &(0x7f0000006f40)=[{{&(0x7f0000000400)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004810)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x1214891, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

55.772473994s ago: executing program 3 (id=4225):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000500)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000100)={0x81, &(0x7f0000000040)="0d050687f286f46da0e6460670ade3a81c0515ac3c8e25b1fb49b7b87b28220eb604cfb4d0940b71477456b97f6b9ae2acca354e4f9ad26bf481e0bcba186024f418b7678a944781088d0906965c1af45c6eacb47fad6936c34383ee2583dcf36d1e3235b7000c1a117a9298d37965a8efa4a42f4e5fc9963cbf2910ba45b8fc82"})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
ioctl$LOOP_SET_FD(r6, 0x4c03, r6)
dup2(r5, r3)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0], 0x0, 0x0, 0x2, 0x2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000304000000000000fcffffff0000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x8000)

55.523470625s ago: executing program 3 (id=4228):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0x25}, 0xffffffffffffffba) (async)
write(r0, &(0x7f0000001500)="2e000300fce426ea5398b7b5047d682950b1f86b88228af10a38566763e264478c7d8b172a70ff92566808c3804684c7efc330d995b7548697355fcbe46da56621b0abcc553759362e6288bda2a28fe736c569f8538dce8b69cf6fb87a55854247d1758a9ee2950600a60b9e3641bfe7216623853af2a18ce9b1237b5969d8d556c5b4a9bf9c391f85f79e3d1b570100000038fd891e57ef57cf3cf8b488d4fb1851ea783ee31cb31dafe6004a92b617832267dcdfecb43fe81f0000000000", 0xbf) (async)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="ff000000000100000000000000000000000000001ebb96dce9ac94adb1c9ca125ce679e9bd12acbc2475d4d055cc7dcaa24a887f91e83de4f2e29a1dbd9198ed744a44ab030d36aec08af0e56df19014e5f8e56ad993c9ad841082a90aa066803934329d66f51805469ca15f5cb3f857dd095c68351bec91e6f3d71cdd35e25910fbd4d5ed335a439461b14de0f97828082b4ed9ab00040000cb5d5bbf1d9beefddb91e5efeabbbcb1", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) (async)
read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x1, 0x5, 0xfffffffe, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000080000097fcffff040000f62f006100"], 0x0, 0x1c}, 0x28)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) (async)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) (async)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d266abfb74bce739b919bac0c87dce1bdc5cb5ff3881ced037b6cc0f0d9b5bc60200000000000000e87b94abf06de190ee6800b18be1b4ccb7ec80f0fba61eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df746fccf1b01fd85815abc4b2cd3d8a3e0ce5c932be454104e9a4e84d867c11d790012d548598251be2be276972b599b391b32ca8ecfecec3dc429112d207a2b02eaee36b66e383968b2b764d4d308414626504bd95f131d3c3fb146a1339588d49be4a5de97f35ec3d4385957603637ce90275b9088ff97ffaed13121b2bca31bf489b47a81d2f9bf01a593d2c031fa7674f1fa75d13bdc3b512a43d962cd3bb52e56db77dd19f55acd55170b872324d985982db8d3c39c70c9b99bd2671d4d7a58ea69754e8b69055c2f2a7770dd0768d5b05a769904e393bf95afe35261fbd358719fd01e86aebfd96a770a7bcc0e611cf173c4f1c6b6a50731d872d9afa7eb32aa59dae737d86c1fdd25a9e022376a3921132c5560aaa8d1fe53e1df0f341af8d4715918d6cdb0618c0a2280c056fc765964d112073f054c8128118247799a60ef3cd83cb2c3a", @ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYBLOB="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", @ANYBLOB="3ff4f7a3a36cbe4ff922eaf578d390e0babeb89235ea263c6a52745b9c22bdf9f2d591fcc509b9e035bd06400e3eb22a53555cec047850ac0c34a3f09917e8e481dbd416d0ec29451030abc2f3bf42851bee7e746e7d8b1d0564eaf629ccee06db7cd1bbe71fd13feb2505b77bb60c30ee0ef468bbd4a6befb1fd32a2bd26e875875226147968bcf46d41f64650ae367288eb23167dc679195c80d04e6fa3df07723662225682b360456c5e7006788fafacc6ae6fb6e819df7c0476e6f0df65831bef7dadee1d0f615c04ac7b07ead068ac5758d3d1c09ce9736aa35236463970549fe886cf9312fcc", @ANYBLOB="7236a25b0ac50ed90b99d4f771baab03b67639e30cde1ab4905d6efa969bb042de15bdb7fba8c1fdceacaf06fde5a3720460594b5a26dc573a228d5bfb81fc556ab96e03dc968c3da29e4d77c49bf705742268969cbaade0c73610ac9d94", @ANYRESOCT=r4], &(0x7f0000000080)='GPL\x00', 0x4, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x4}, 0x10}, 0x94)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)=0x526) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0}) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002140)=@newchain={0xcd4, 0x64, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0x9}, {0xe, 0xe}, {0x1ffc7, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc84, 0x2, [@TCA_CGROUP_POLICE={0xc80, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x59d7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x8001, 0x81, 0x2, {0x0, 0x0, 0x9, 0x2000, 0x8, 0x1000}, {0x70, 0x2, 0x7, 0x20ce, 0xff, 0xb221}, 0x4, 0x94b2b81, 0xb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x100, 0x8, 0xffff8a84, 0x4, 0x6, 0xffffffff, 0x3, 0xd, 0x8, 0x6, 0x2, 0x6, 0x7, 0x9, 0x3, 0x5, 0x3, 0xb281, 0x6, 0xe0, 0x4, 0x5, 0x5, 0x4, 0x2, 0x4, 0xbe, 0x8, 0x81, 0x2, 0x80000000, 0x5, 0xffffffac, 0xc8, 0x80, 0x1ff, 0x4, 0xa1b, 0x3, 0x3, 0x4, 0xf41, 0x1, 0x7, 0x171b, 0x1000, 0xbc, 0x3, 0x2, 0x2, 0x6, 0x8, 0xb, 0x9, 0x8, 0x9, 0x7, 0xffffffd4, 0x200, 0x1, 0x2, 0xc, 0x6, 0x7fff, 0x46a4, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x81, 0xffffffff, 0x1000, 0x9, 0x5, 0x5, 0x6, 0xfffeffff, 0xe, 0x400, 0x0, 0x8ec, 0x1, 0x0, 0xc35, 0x400, 0x6, 0x200, 0x3b, 0x1, 0x7f, 0x800, 0x4, 0x360, 0x5, 0x80000000, 0x7, 0x6, 0x4, 0x0, 0x0, 0x0, 0xe05, 0xffffffff, 0x5, 0xfffffbff, 0xb, 0xf, 0x9, 0x8000, 0x9, 0x3ff, 0xc, 0x2, 0x9, 0xd, 0x5, 0x9, 0x6, 0x325, 0x100, 0x80000001, 0x7, 0x6, 0x8, 0x101, 0x4, 0x3, 0x7, 0x1, 0x0, 0x81, 0xffffffff, 0x0, 0x7, 0x50, 0x8001, 0x0, 0x0, 0x0, 0xd, 0x65, 0xb42, 0x0, 0x7, 0x100, 0x401, 0x8, 0x4391, 0x10000, 0x6, 0x80000001, 0x9, 0x64b, 0x0, 0x0, 0xb356, 0x6d54a28d, 0xa, 0xffff, 0x5, 0x1a, 0x9, 0x8, 0x4, 0xd, 0x1, 0x9, 0x1d, 0x8, 0x3, 0xfff, 0x10000, 0x3, 0xdf1, 0x1, 0x7, 0xc, 0x3, 0x4, 0x55, 0x0, 0x6, 0x10, 0x7fff, 0x1, 0xffffffc0, 0x2, 0x1f0, 0xffffff81, 0x5, 0x4, 0xb7fb, 0x8, 0x6, 0xd, 0x9, 0xf2, 0x3, 0x9, 0x0, 0xa19, 0x3, 0x200, 0xfff, 0xb, 0x2ec7, 0x9, 0x4, 0x8, 0x0, 0x5, 0x7, 0x0, 0x9, 0x10, 0x8, 0x2, 0x0, 0x1, 0x7, 0x89, 0x6, 0x8, 0x8, 0xffffffff, 0x10, 0x96, 0x5, 0xc7f5, 0x1, 0x3, 0x3, 0x6, 0xc07e, 0x3, 0xfffffffd, 0x8, 0x47d9, 0x8001, 0x0, 0x3, 0x6, 0x100, 0x2, 0x8, 0x8, 0x7, 0xc3b6, 0x1, 0xffff, 0x1, 0x1, 0xe2c, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x1, 0x1, 0x400, 0x6, 0x7f, 0xe, 0x28, 0x2, 0x1000, 0x40, 0x7, 0x8, 0x0, 0x3, 0x1, 0x4, 0x7, 0x80000001, 0xf443, 0x2, 0x5, 0x80000000, 0x4, 0xc651, 0x4, 0x7, 0xc, 0xae, 0x3, 0x5, 0x0, 0x100, 0x8001, 0x0, 0x7, 0x9, 0x80, 0x1, 0x2, 0x2, 0x7, 0xfffffffa, 0x80000000, 0x0, 0x5, 0x1, 0x8, 0x0, 0x9a, 0x10000, 0xd30c, 0xa6d, 0x52, 0x1ff, 0x1ff, 0x0, 0x4, 0x80, 0x8c64, 0x6, 0xfffffffe, 0xd17f320, 0x9, 0x80000008, 0x1000, 0xf267, 0x9e, 0xe, 0x7fffffff, 0x5, 0x43, 0x1ca, 0x9, 0x68e2, 0x80000001, 0x0, 0x5, 0x5, 0x9, 0x6, 0x2, 0x9, 0xd, 0x2f84, 0x7, 0x7d3, 0x6, 0x800, 0x137c, 0x2, 0xfffffffb, 0x96f, 0x7fff, 0xffff0001, 0x100, 0x15c0, 0xa00, 0x1a, 0x40, 0x1e, 0x0, 0x6, 0x4, 0xa21, 0x8000, 0x5, 0x8, 0x9, 0x6, 0x2, 0x5, 0xffffffff, 0x9, 0xff, 0x80000001, 0xe37, 0x1, 0xfffffff1, 0x0, 0xff, 0x0, 0xc94d, 0x101, 0xfff, 0x4, 0x3, 0x9, 0x7, 0xfffffff6, 0x9, 0xb, 0x1, 0x4, 0x227, 0x10000, 0x2, 0x7f, 0x6, 0x1ff, 0x6, 0x1, 0x6, 0xffffff25, 0x31dcc710, 0x5, 0xd6f, 0xe, 0x4, 0x3, 0xffffffdc, 0xfffffffe, 0x2, 0x6, 0x9, 0x7, 0xa0000000, 0x3, 0x6, 0x50, 0x0, 0x81, 0x0, 0x4d6, 0x6, 0x0, 0xe, 0xd, 0x7ff, 0x2, 0xb, 0x7, 0x46, 0x8, 0x8, 0x80, 0x8, 0x7fff, 0x8001, 0x4d, 0x400, 0x5, 0x80000000, 0x5, 0x9, 0x9, 0x1, 0x3, 0x68, 0x5, 0x3, 0x10000, 0x6691, 0xfffffffc, 0x2, 0x7, 0x5, 0x0, 0x542, 0x69, 0x8001, 0x9, 0x100, 0x1, 0x6, 0x7fff, 0x4, 0x5, 0x1000, 0x7e, 0x0, 0x7c, 0x5, 0x4, 0x100, 0x7fff, 0x4, 0x2, 0x200, 0xfff, 0x2, 0x7, 0x9, 0x4, 0x200, 0x3ff, 0x53f, 0x9, 0x7ff, 0x5, 0x5, 0x40, 0x7, 0x7fff, 0x8, 0x0, 0x67c2, 0x7, 0x5, 0xffffffff, 0x8, 0x100, 0xf43c, 0x80000000, 0x6f, 0x7079, 0x5, 0x80000001, 0xfff, 0x0, 0x69, 0x1, 0x7, 0x0, 0xd00]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f5a, 0x4, 0x5, 0x6, 0x7, 0x7fff, 0x401, 0x3, 0x463f42c5, 0x6, 0x94e6, 0x1, 0xb1, 0x0, 0x10001, 0x5, 0x800, 0x9, 0x9, 0x1ff, 0x3, 0x6, 0x0, 0x6, 0x5b1f, 0x10001, 0x10001, 0x6, 0x5, 0x9a, 0xfffffff2, 0x3, 0xbd, 0x200, 0x7ff, 0x1, 0xff, 0x5, 0x5, 0xe, 0x6, 0x7, 0x3, 0x729, 0x2, 0x6, 0x8, 0x5, 0x5, 0x24c9, 0x7fff, 0x6, 0x5, 0x4, 0x5, 0x6, 0x10001, 0x0, 0x8001, 0xebd9, 0x2, 0x10000, 0x5, 0x7, 0x0, 0x5, 0x6, 0x1, 0x1, 0xd, 0x4, 0x0, 0x7, 0x522, 0x2, 0x3, 0x180000, 0x5e, 0x5493ff1e, 0x9, 0x160, 0x8, 0x8, 0x2, 0xf, 0x3, 0x8, 0x5, 0x0, 0xa49c, 0xfffffd3a, 0x10, 0xe, 0x7, 0x2, 0xf, 0x5, 0x200, 0x9, 0x80000001, 0xb5, 0xfffffffe, 0x3, 0x3, 0x7, 0x8, 0x400, 0x4, 0x200, 0xdd2, 0xffffffff, 0x1a6, 0x5, 0xf16ad64, 0x5, 0x6, 0x6, 0x400, 0x257, 0x9, 0x1c000, 0x100, 0x81, 0x5, 0x401, 0x9, 0x7, 0x0, 0x2, 0x2, 0x5, 0x9c0, 0x1, 0x5, 0x7, 0x5fe, 0x5, 0x5, 0x8, 0x3, 0x7, 0xffff, 0x401, 0x8ed, 0x9, 0x9, 0x80, 0x2, 0xfffffff8, 0xffffffc0, 0x6, 0x0, 0x7, 0x55e, 0x4, 0x8, 0xffffffff, 0x2, 0x3, 0x2, 0x6, 0x7d0, 0x8, 0x978, 0x5, 0x5, 0x0, 0x4, 0x4, 0x6, 0x10000, 0x1, 0x8, 0x6, 0x1444, 0x4, 0x0, 0xd52, 0xffff, 0x6, 0x7bfd, 0x2, 0x0, 0x7, 0x0, 0x7, 0x80000001, 0x1, 0x5, 0xffff, 0x8, 0x5, 0xa0, 0x1, 0x2, 0x1, 0x7, 0x8a8, 0x7, 0x8, 0x0, 0xa, 0xfffffffc, 0x5, 0x3, 0x0, 0x8, 0x4, 0x7f, 0x3, 0x8, 0x1, 0x5, 0x6, 0xfff, 0x1, 0xff, 0xfffffffb, 0x8, 0x680000, 0xb8a, 0x5, 0x2, 0x0, 0x1, 0x6000000, 0x9, 0x8, 0x5, 0x1, 0x1, 0x40, 0x4, 0x9, 0x9, 0xc426, 0x401, 0x7, 0x4, 0x1, 0xb49, 0x6, 0x9, 0x1, 0x4, 0x7, 0x7f, 0x7f, 0x0, 0x1, 0x8a1d, 0x5, 0x1, 0x6, 0x4, 0x4edd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0xcd4}, 0x1, 0x0, 0x0, 0xc014}, 0x4054) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

54.983783819s ago: executing program 3 (id=4233):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x2001)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
setresuid(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r2], &(0x7f0000000080), 0x1, 0x1})
r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x200, 0x30b000)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000380)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x40000}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="af", 0x1, 0x840, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008854)
r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x62040)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d75eff653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0})
ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r7=>r6, {0xc2}}, './file0\x00'})
close_range(r7, r7, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000340)=0x1ffffffd, 0x4)

54.931373714s ago: executing program 43 (id=4233):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x2001)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
setresuid(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r2], &(0x7f0000000080), 0x1, 0x1})
r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x200, 0x30b000)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000380)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x40000}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="af", 0x1, 0x840, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008854)
r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x62040)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d75eff653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0})
ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r7=>r6, {0xc2}}, './file0\x00'})
close_range(r7, r7, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000340)=0x1ffffffd, 0x4)

49.172534061s ago: executing program 5 (id=4334):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000340)=""/124, 0x7c})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, <r4=>0x0, <r5=>0x0], &(0x7f0000000040), 0x3, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r5, r4], &(0x7f0000000340), 0x0, 0xf})

49.082725702s ago: executing program 5 (id=4335):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="9ce360a024367b1eb3237e16622cbcda58874038e4a8e39b721ef31138cdc115864ce50fba1b76b4b721250d1b8265b473366afe7dc1303cae1825084a3e960d5c79f088027c01dd89d34d98036c02f01eff27618e4c4ad09ef5dea74392b3aea9749bfd9ed00727df61baf352581d7e6a93be79f7c2b879966a2646059dd31a7d", 0x81}], 0x1}], 0x1, 0x404c8d4)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_timeval(r5, 0x1, 0x2b, 0x0, &(0x7f0000000040))
getsockname$packet(r2, 0x0, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2c}}, 0x0)
socket(0x1, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

49.078660999s ago: executing program 5 (id=4337):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)

49.021409105s ago: executing program 5 (id=4338):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="bd577fa26959653e60bddd5b66194aaf38596874d3d2bdd868f8703cd65950c66c4032c436dd42fbe598563b8fec6bb202c5886174fa12d1e53f461e92f0e593d20074b98c7842478346547de172b45ff0df7f0cee846fbd960f8fef7264f71041370979ef0418a22a20d73b6f3528c10e32", @ANYRES16=r0, @ANYRES64=r0], 0x48)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000001440)=""/90, 0x34, 0x5a, 0x1, 0x999}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f0000001580)=""/134, 0x86, <r7=>0x0, &(0x7f0000001640)=""/58, 0x3a}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={r1, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7a}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff517}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000400)=""/4096, 0x40f00, 0x0, '\x00', r3, @fallback=0x2d, r6, 0x8, &(0x7f0000001500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0x10, 0x100, 0x10000}, 0x10, r7, r0, 0x4, &(0x7f0000001740)=[r8], &(0x7f0000001780)=[{0x0, 0x5, 0x1, 0x7}, {0x2, 0x5, 0x8, 0x2}, {0x0, 0x3, 0x3, 0x5}, {0x3, 0x5, 0xa, 0xb}], 0x10, 0x1}, 0x94)
ppoll(&(0x7f0000001880)=[{r8, 0x200}, {r4, 0xa202}], 0x2, &(0x7f00000018c0)={0x0, 0x3938700}, &(0x7f0000001900)={[0x5]}, 0x8)
r9 = getpid()
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

48.423869004s ago: executing program 5 (id=4340):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x101480e, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28)
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
syz_open_procfs(r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200010, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mremap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f000000f000/0x2000)=nil)

48.262229126s ago: executing program 5 (id=4342):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffff9, 0xffffbffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x9, '\x00', 0x4b}, {0x11, 0x7, 0xe, '\x00', 0x7f}, {0xff, 0x5, 0x0, '\x00', 0x8}, {0x7, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xe, 0xa, 0x47, '\x00', 0x6}, {0x11, 0x90, 0x4, '\x00', 0xe9}, {0x8, 0x6, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0xa}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x1}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x6, 0xd1, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x2}, {0xee, 0x3, 0xfe, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x8, 0x54, '\x00', 0xbf}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0x7, 0x40, 0x2, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x1, 0x6, 0xfa, '\x00', 0x40}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

42.082520187s ago: executing program 1 (id=4402):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

41.913418952s ago: executing program 1 (id=4405):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{0x0, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4a})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
fspick(r1, &(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
ioctl$UI_DEV_CREATE(r2, 0x5501)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xfcdd) (async)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xfcdd)
listen(r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r0, &(0x7f0000000180)=""/51, 0x33, 0x140, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28)
accept4(r5, 0x0, 0x0, 0x80000) (async)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6)
syz_open_procfs(0x0, &(0x7f0000000340)='net/hci\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000340)='net/hci\x00')

41.843384792s ago: executing program 1 (id=4407):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r0, &(0x7f0000000080)='V', 0x1)
pread64(r0, &(0x7f0000000140)=""/245, 0xf5, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

41.842951201s ago: executing program 1 (id=4408):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0x17, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=""/129, 0x81)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x5, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0xfb, 0x9, 0xc, 0x0, 0x0, 0xfc})
eventfd2(0x0, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x8, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x30000000)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)

41.513493173s ago: executing program 1 (id=4412):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x3}, 0x0, 0x0, 0x4, 0x2, 0xffffffffffff8000, 0x4, 0x4b}}], 0x58}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x400, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0xfffffe23, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_OFFSET={0x0, 0x3, 0xfffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

40.903598109s ago: executing program 1 (id=4417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x103}, 0x8)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r3, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x103}, 0x8) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) (async)

40.801482795s ago: executing program 44 (id=4417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x103}, 0x8)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r3, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x103}, 0x8) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) (async)

33.263482574s ago: executing program 45 (id=4342):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffff9, 0xffffbffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x9, '\x00', 0x4b}, {0x11, 0x7, 0xe, '\x00', 0x7f}, {0xff, 0x5, 0x0, '\x00', 0x8}, {0x7, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xe, 0xa, 0x47, '\x00', 0x6}, {0x11, 0x90, 0x4, '\x00', 0xe9}, {0x8, 0x6, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0xa}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x1}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x6, 0xd1, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x2}, {0xee, 0x3, 0xfe, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x8, 0x54, '\x00', 0xbf}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0x7, 0x40, 0x2, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x1, 0x6, 0xfa, '\x00', 0x40}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.991352408s ago: executing program 8 (id=4904):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x80805, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0, {0x45, 0x4}}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x44)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x80800)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x6})
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$CDROMVOLCTRL(r6, 0x309, &(0x7f0000000000)={0x9e, 0xfd, 0x3})
close(r0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
close(r7)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0ab06597051567928800000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100582e00000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a01080000000000000000070000060900020073797a3000000000090001457d852f1bec6f3433ea73797a31000000000900010073bb7a3000000000140000001100010000000000000000000100000a"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.809716439s ago: executing program 8 (id=4905):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x4, 0x3, 0x800}) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe}]}}}]}, 0x38}}, 0x0)

3.80938874s ago: executing program 8 (id=4906):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r0 = syz_io_uring_setup(0x1c9a, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b1a0100001000090455070103490200090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000040)=ANY=[])
syz_usb_disconnect(r3)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000a00000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x6, 0x12, r6, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=@isdn, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/66}, {&(0x7f0000000340)=""/208}, {&(0x7f0000000440)=""/163}, {&(0x7f0000000240)=""/119}, {&(0x7f0000000500)=""/205}], 0x0, &(0x7f0000000680)=""/90}, 0x0, 0x20000, 0x1, {0x0, r5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, r9, 0x25, 0x10, @void}, 0x10)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.673425939s ago: executing program 0 (id=4908):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28}, 0x40400c4)
r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00')
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f0000000540))
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000180)=0x80)
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0)
preadv(r1, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28}, 0x40400c4) (async)
syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') (async)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f0000000540)) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000180)=0x80) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0) (async)
preadv(r1, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3) (async)

2.672987019s ago: executing program 0 (id=4909):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r2, &(0x7f0000000700)=@other={'unlock', ' ', 'none'}, 0xc)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = io_uring_setup(0x1160, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r5, 0x3c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x9, @empty, 0x6}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000340)=0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r6 = accept(r1, 0x0, 0x0)
recvfrom$inet_nvme(r6, &(0x7f0000000000)=""/100, 0x64, 0x63, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x2, 0x2, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x80)
r7 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0)
r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r9, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f000000, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000700)={0x4, 0x8}, 0x10)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000100), r6)

1.521321744s ago: executing program 2 (id=4918):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.452544207s ago: executing program 2 (id=4919):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x60, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20044851}, 0x4000000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000030003602518bbcccf5c0461c1d67f5394007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7b4f4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8840)
r5 = memfd_secret(0x80000)
ftruncate(r5, 0x3)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r5, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000a00)=0x1, 0x0, 0x4)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000000)='b\x10rust\xe3c*sgrVdn.Dd', 0xfffffffffffffff8)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="9dc8bc9abb0d02447efeac0e918a0afbe610f75e0e82e244412537be891fb149b73471e2302fb91900c5d0e6eafecee457d208b6eee85fb198b8858936a94c0a1e3887cebadd27c6856ed65cd139fd62b9e12cad52fe78629d658c143077f35a68", 0x61, 0xfffffffffffffffe)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r10, 0x1, 0x2, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x600}, "ffb00afe4e70"}}}}}}}, 0x0)

1.353198951s ago: executing program 0 (id=4920):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r0 = userfaultfd(0x80001)
syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000100), 0x1004)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})
fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99)

1.303341283s ago: executing program 0 (id=4921):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000003c0), 0x0}, 0x20) (async)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x860, 0x88000)
recvmsg$can_raw(r1, &(0x7f0000000580)={&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/199, 0xc7}], 0x4, &(0x7f0000000480)=""/246, 0xf6}, 0x9414ec60363389e4)

1.202982632s ago: executing program 2 (id=4922):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300"], 0x0, 0x51}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000080)={{@local, 0x3}, 0x6, 0x9, 0x1, 0x4, 0x1, 0x9e38, 0x4, 0x6})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300"], 0x0, 0x51}, 0x28) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0000008179a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000b5000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) (async)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000080)={{@local, 0x3}, 0x6, 0x9, 0x1, 0x4, 0x1, 0x9e38, 0x4, 0x6}) (async)

1.200529945s ago: executing program 0 (id=4923):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x6a040000)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000, 0x3fd, 0x0, 0x8})
ioctl$TIOCGPTPEER(r1, 0x40084d0b, 0x200000000005)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x9, 0x7f})
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00'})
r3 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000600), 0x0}, 0x20)
sendmsg$sock(r0, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x1)

1.199832542s ago: executing program 6 (id=4924):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a0a06020000002abc7000fcdbdf25"], 0x10}}, 0x40001)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r3 = syz_open_pts(r2, 0x141601)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0)

1.132688536s ago: executing program 2 (id=4925):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="6500068ded60aee45bdca700005a15afacb0560000000000005ed9df739987d7b0", 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="0f09b805000000b9100000000f01d9c4c1b9e17d00c4c17a6f9700800000b9780200000f3264f236642ed9e5b8e30000000f23d00f21f835100000060f23f836360fc77c5e6ac4e285a880e00d029766ba4300ed", 0x54}], 0x1, 0x4, &(0x7f0000000240), 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x0, 0x3, {0x25, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "4fa5cb8d90b531"}]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback, 0x2}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast, 0xfffffffe}]}, @timestamp={0x44, 0x14, 0x20, 0x0, 0x0, [0x7, 0x20, 0xffffffff, 0x0]}]}}}}}}}, 0x0)

1.132420297s ago: executing program 2 (id=4926):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.063127058s ago: executing program 6 (id=4927):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000300)=0x6, 0x4)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async)
setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000300)=0x6, 0x4) (async)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) (async)

1.062978949s ago: executing program 2 (id=4928):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
close(0x3)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.060633644s ago: executing program 6 (id=4929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xa6b8, 0x2, 0x0, 0x273})
io_uring_enter(r1, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOBLANK(r3, 0x4611, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @rose}, [@rose, @default, @rose, @rose, @rose, @rose, @netrom]}, &(0x7f0000000340)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
r10 = accept4$rose(r8, &(0x7f0000000140)=@short={0xb, @remote, @rose, 0x1, @default}, &(0x7f00000002c0)=0x1c, 0xc00)
connect$rose(r10, &(0x7f0000000300)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c)
connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480), 0x80000, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x10001}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'team0\x00'}}, {@fsname={'fsname', 0x3d, '^([..'}}]}})
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r12}, 0x10)
r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
close_range(r13, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa8, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x94, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x1, 0x4}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0x20000000, 0xe3, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x4d0308de9b6c586, 0x3, 0x401}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040004}, 0x2000a804)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x0)

885.968873ms ago: executing program 0 (id=4930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x3, 0x34, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782)
ioperm(0x0, 0x7fff, 0x15f9)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0xe, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000580)='Y~\x8b\xc1\xcd\xad6\xef2\x87\xc8\xd1\x8c\xa2\x90_.G\xf3E\xc7')
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x8, 0x31b080)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000140)={0x5000, 0x4000})
close(0xffffffffffffffff)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x4040845)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000500)={0x1})
close(r4)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r8 = getpid()
syz_clone(0xc10b0000, &(0x7f0000000380)="165f4d7d6a4beb874e2a4ec1dd2ef04f17d11eaf5cf9d5a61211c1a49b60328e3463325dc3effbcaf033ae837f209009aed881a32fd9edd9f97756d1692da1aa37f91fe824e87d52bebb536208991d12dc433b896d8b7e1e445419f16246a6a13324ee9fa50bd3413bb94bf61dc92f2ca8a127c6eabbd4a43c87218e31efd8f57fccf476825eb93e99a4336cb5ba63487485efffc5c89090b8785b688579e094e0ce79a77fc578acca415d3ed901e1cf9255b9483a9a4b8adfd911bda45f39f509dba8aac93da12bc44be813ed2a771a32c48faefb", 0xd5, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="cb4eefb18ba2adca2e8f26d95d82edeb2fa3067d08716c802d48a5f13468abf4a8ea01533e870fb388216e84cbb0d59b452f6d06ba00")
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r9, 0x29, 0xd0, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r8, @ANYRES32, @ANYBLOB="000000000000000000b2000000ca9f263ae52bbfbb00000000000000", @ANYRESOCT=r1, @ANYRESOCT=r9], 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0xe, 0x0, 0xbba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_pidfd_open(r8, 0x0)
socket$kcm(0x10, 0x2, 0x0)

263.073729ms ago: executing program 8 (id=4931):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x4f75, 0x4)
r2 = syz_io_uring_setup(0x7e4e, &(0x7f0000000140)={0x0, 0xb475, 0x10, 0x3, 0xe0}, &(0x7f00000001c0), &(0x7f0000000200))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x0, 0x3}]})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r1, r1, r1, r6], 0x4)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)

195.894918ms ago: executing program 6 (id=4932):
ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000000)={0x0, 0x9, 0x3, 0xf8}) (async)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f00000002c0)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x7, 0x0, 0x1c}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r2, r1, 0x0)
openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x169a82, 0x6d)
sendfile(r5, r5, 0x0, 0xb)

102.792957ms ago: executing program 6 (id=4933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, &(0x7f0000000000)=0x1c)

102.23959ms ago: executing program 8 (id=4934):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x40800)
sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000001c0), 0x4)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
syz_io_uring_setup(0x7c77, &(0x7f0000000280)={0x0, 0xff03, 0x40, 0x2, 0x25f}, &(0x7f0000000040), &(0x7f00000000c0)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0x200, 0x0, 0x64b, 0x4, 0x0, {0x0, r6}})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000300)="526492d2a65d1140479fdf1a9e18b33f8dc5689a2b5d5674232b536d418f7c8ef5fa2ad0f96c8656cd51cdda934e31399e74c892f7ac2635c8f53b5997e14b5c23d86d0a698f58e1be3f65cd9ab76bd9e181c11ac17f0148736929a9b64aa333c5930bf4d93b9bdd536d8824c433e2b7edca9ced9fe0f0d3", 0x78}], 0x1)
r8 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r9, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @multicast2, 0xffffffffffffffff, "aed49577d53892937a15c6ec311614868510337365e19992c3bb14236d557c55", 0x3, 0x5, 0x3, 0x40}, 0x3c)

829.468µs ago: executing program 8 (id=4935):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) (async)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) (async)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5)

0s ago: executing program 6 (id=4936):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x7, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r5=>0x0], &(0x7f0000000340)=[<r6=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000580)=[r6, r5, r5], 0x3}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000580)=[r6, r5, r5], 0x3})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[<r7=>0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000140)={0x0, r5, r7, 0x0, 0x42, 0x1d, 0x7fff, 0x3, 0x0, 0xffffffff, 0xfffffffa, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000140)={0x0, r5, r7, 0x0, 0x42, 0x1d, 0x7fff, 0x3, 0x0, 0xffffffff, 0xfffffffa, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x27, 0x1000000, 0x0})
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b4", 0x8}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b4", 0x8}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0)

kernel console output (not intermixed with test programs):

callbacks suppressed
[  394.105362][   T40] audit: type=1400 audit(2000000121.409:54261): avc:  denied  { create } for  pid=21867 comm="syz.1.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  394.124409][   T40] audit: type=1400 audit(2000000121.429:54262): avc:  denied  { create } for  pid=21867 comm="syz.1.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  394.131162][   T40] audit: type=1400 audit(2000000121.439:54263): avc:  denied  { listen } for  pid=21867 comm="syz.1.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  394.137697][   T40] audit: type=1400 audit(2000000121.439:54264): avc:  denied  { accept } for  pid=21867 comm="syz.1.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  394.274045][T21877] __nla_validate_parse: 1 callbacks suppressed
[  394.274057][T21877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4230'.
[  394.280366][   T40] audit: type=1400 audit(2000000121.589:54265): avc:  denied  { relabelfrom } for  pid=21876 comm="syz.5.4230" name="NETLINK" dev="sockfs" ino=110784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  394.280883][T21877] SELinux:  Context system_u:object_r:insmod_exec_t:s0 is not valid (left unmapped).
[  394.288641][   T40] audit: type=1400 audit(2000000121.589:54266): avc:  denied  { mac_admin } for  pid=21876 comm="syz.5.4230" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  394.300035][   T40] audit: type=1400 audit(2000000121.599:54267): avc:  denied  { relabelto } for  pid=21876 comm="syz.5.4230" name="NETLINK" dev="sockfs" ino=110784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:insmod_exec_t:s0"
[  394.309577][   T40] audit: type=1400 audit(2000000121.609:54268): avc:  denied  { read } for  pid=21876 comm="syz.5.4230" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  394.318536][   T40] audit: type=1400 audit(2000000121.609:54269): avc:  denied  { open } for  pid=21876 comm="syz.5.4230" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  394.326297][   T40] audit: type=1400 audit(2000000121.609:54270): avc:  denied  { read write } for  pid=21876 comm="syz.5.4230" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  394.341476][T21880] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  394.344679][T21880] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  394.350696][T21880] cramfs: wrong magic
[  394.388901][T21886] ip6t_rpfilter: unknown options
[  394.568635][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  394.572121][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  394.575206][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  394.581919][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  394.587589][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  394.634603][T21905] devtmpfs: Unknown parameter 'usrquota_�lock_hardlimit'
[  394.752500][T10485] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.772336][T21895] xfrm0 speed is unknown, defaulting to 1000
[  394.808429][T10485] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.855730][T21963] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4244'.
[  394.864472][T21977] 9p: Unknown Cache mode or invalid value fscac
[  394.886981][T21895] chnl_net:caif_netlink_parms(): no params data found
[  394.924316][T10485] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.989941][T21895] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.992468][T21895] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.994887][T21895] bridge_slave_0: entered allmulticast mode
[  394.998824][T21895] bridge_slave_0: entered promiscuous mode
[  395.006912][T10485] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.014304][T22039] overlayfs: invalid redirect (./file0/file1)
[  395.017826][T22039] overlayfs: failed lookup in lower (newroot/62, name='file1', err=-40): overlapping layers
[  395.024318][T21895] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.026797][T21895] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.027546][T22039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22039 comm=syz.1.4249
[  395.029879][T21895] bridge_slave_1: entered allmulticast mode
[  395.047420][T21895] bridge_slave_1: entered promiscuous mode
[  395.065336][T22039] netlink: 'syz.1.4249': attribute type 5 has an invalid length.
[  395.100489][T21895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.108434][T21895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.125300][T21895] team0: Port device team_slave_0 added
[  395.144098][T22097] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  395.144910][T21895] team0: Port device team_slave_1 added
[  395.172599][T21895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.175190][T21895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.183597][T21895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.188688][T21895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.191143][T21895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.199707][T21895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.230245][T21895] hsr_slave_0: entered promiscuous mode
[  395.232684][T21895] hsr_slave_1: entered promiscuous mode
[  395.246297][T21895] debugfs: 'hsr0' already exists in 'hsr'
[  395.248411][T21895] Cannot create hsr debugfs directory
[  395.323635][T22198] FAT-fs (nullb0): bogus number of reserved sectors
[  395.332652][T10485] bridge_slave_1: left allmulticast mode
[  395.334566][T10485] bridge_slave_1: left promiscuous mode
[  395.336547][T10485] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.337746][T22198] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  395.357724][T10485] bridge_slave_0: left allmulticast mode
[  395.359914][T10485] bridge_slave_0: left promiscuous mode
[  395.361872][T10485] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.821847][T10485] team0: Port device bridge2 removed
[  396.022785][T10485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.059457][T10485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.099531][T10485] bond0 (unregistering): Released all slaves
[  396.190872][T10485] bond1 (unregistering): (slave veth5): Releasing active interface
[  396.240994][T10485] bond1 (unregistering): Released all slaves
[  396.256868][T22210] netem: change failed
[  396.521466][T22294] sctp: [Deprecated]: syz.1.4264 (pid 22294) Use of int in maxseg socket option.
[  396.521466][T22294] Use struct sctp_assoc_value instead
[  396.609224][T22305] binder: BINDER_SET_CONTEXT_MGR already set
[  396.611230][T22305] binder: 22303:22305 ioctl 4018620d 200000004a80 returned -16
[  396.613890][T22304] binder: 22303:22304 ioctl c018620c 200000002480 returned -22
[  396.617212][T17360] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  396.667288][ T5947] Bluetooth: hci0: command tx timeout
[  396.767314][T17360] usb 10-1: Using ep0 maxpacket: 8
[  396.771614][T17360] usb 10-1: config 252 has an invalid interface number: 100 but max is 0
[  396.774475][T17360] usb 10-1: config 252 has no interface number 0
[  396.776796][T17360] usb 10-1: too many endpoints for config 252 interface 100 altsetting 154: 59, using maximum allowed: 30
[  396.781085][T17360] usb 10-1: config 252 interface 100 altsetting 154 has 0 endpoint descriptors, different from the interface descriptor's value: 59
[  396.785462][T17360] usb 10-1: config 252 interface 100 has no altsetting 0
[  396.788602][T17360] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  396.791808][T17360] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.927373][T22332] sit0: entered promiscuous mode
[  396.931604][T22332] netlink: 'syz.1.4271': attribute type 1 has an invalid length.
[  396.935592][T22332] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4271'.
[  396.947847][T10485] hsr_slave_0: left promiscuous mode
[  396.958405][T10485] hsr_slave_1: left promiscuous mode
[  396.961356][T10485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.964216][T10485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.980346][T10485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.983536][T10485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.999764][T17360] usb 10-1: string descriptor 0 read error: -71
[  397.008578][T17360] pvrusb2: Hardware description: Terratec Grabster AV400
[  397.010898][T17360] pvrusb2: **********
[  397.012293][T17360] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  397.015571][T17360] pvrusb2: Important functionality might not be entirely working.
[  397.016080][T10485] veth1_to_hsr: left allmulticast mode
[  397.018342][T17360] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  397.020372][T10485] veth1_to_hsr: left promiscuous mode
[  397.023978][T17360] pvrusb2: **********
[  397.024157][T17360] usb 10-1: selecting invalid altsetting 0
[  397.026162][T10485] veth1_macvtap: left promiscuous mode
[  397.032818][T17360] usb 10-1: USB disconnect, device number 42
[  397.033202][ T2490] pvrusb2: Invalid write control endpoint
[  397.038302][T10485] veth0_macvtap: left promiscuous mode
[  397.040216][T10485] veth1_vlan: left promiscuous mode
[  397.041964][T10485] veth0_vlan: left promiscuous mode
[  397.067661][ T2490] pvrusb2: Invalid write control endpoint
[  397.071541][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  397.075140][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  397.078499][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  397.081198][T22356] block device autoloading is deprecated and will be removed.
[  397.082884][ T2490] pvrusb2: Device being rendered inoperable
[  397.088293][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  397.091037][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  397.095933][ T2490] pvrusb2: Attached sub-driver cx25840
[  397.098344][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  397.103486][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  397.268293][T22380] netlink: 'syz.1.4276': attribute type 10 has an invalid length.
[  397.319946][T22382] netlink: 'syz.1.4276': attribute type 10 has an invalid length.
[  397.496943][T10485] team0 (unregistering): Port device team_slave_1 removed
[  397.524815][T10485] team0 (unregistering): Port device team_slave_0 removed
[  397.630220][T22386] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4277'.
[  397.776679][T22380] team0: Device ipvlan1 failed to register rx_handler
[  397.799761][T22382] team0: Device ipvlan1 failed to register rx_handler
[  397.894634][T21895] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  397.902431][T21895] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  397.906567][T21895] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  397.913608][T21895] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  397.917912][T22414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4280'.
[  397.965277][T21895] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.990511][T21895] 8021q: adding VLAN 0 to HW filter on device team0
[  398.004564][T10475] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.007869][T10475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.016400][T10486] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.019634][T10486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.031515][T22426] loop2: detected capacity change from 0 to 7
[  398.041087][T22426] Dev loop2: unable to read RDB block 7
[  398.045736][T22426]  loop2: AHDI p1 p2 p3 p4
[  398.053621][T22426] loop2: partition table partially beyond EOD, truncated
[  398.056032][T22426] loop2: p1 start 1601398130 is beyond EOD, truncated
[  398.064143][T22426] loop2: p2 start 1702059890 is beyond EOD, truncated
[  398.066412][T22426] loop2: p3 start 2097152 is beyond EOD, truncated
[  398.103065][T22435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4285'.
[  398.129736][T22439] loop8: detected capacity change from 0 to 7
[  398.135890][T22439]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  398.142354][T22439] loop8: partition table partially beyond EOD, truncated
[  398.146014][T22439] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  398.155029][T22439] loop8: p2 start 956478 is beyond EOD, truncated
[  398.213385][T10485] IPVS: stop unused estimator thread 0...
[  398.219348][T21895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.226521][T22458] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4289'.
[  398.252749][T21895] veth0_vlan: entered promiscuous mode
[  398.259065][T21895] veth1_vlan: entered promiscuous mode
[  398.274056][T21895] veth0_macvtap: entered promiscuous mode
[  398.278488][T21895] veth1_macvtap: entered promiscuous mode
[  398.286692][T21895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.296227][T21895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.302342][T18326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.315279][T18326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.326537][T18326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.330057][T18326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.381597][T10481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.384208][T10481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.398828][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.401442][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.580112][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4299'.
[  398.670577][T22512] loop2: detected capacity change from 0 to 7
[  398.673424][T22512] Dev loop2: unable to read RDB block 7
[  398.675422][T22512]  loop2: AHDI p1 p2 p3 p4
[  398.676945][T22512] loop2: partition table partially beyond EOD, truncated
[  398.680030][T22512] loop2: p1 start 1601398130 is beyond EOD, truncated
[  398.682300][T22512] loop2: p2 start 1702059890 is beyond EOD, truncated
[  398.684629][T22512] loop2: p3 start 2097152 is beyond EOD, truncated
[  398.716497][T22524] erofs (device loop5): cannot find valid erofs superblock
[  398.747412][ T5949] Bluetooth: hci0: command tx timeout
[  398.844199][T22555] trusted_key: encrypted_key: key trusted:syz not found
[  398.858025][T22557] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4311'.
[  398.876816][T22561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4312'.
[  398.913845][T22563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  398.916002][T22563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  398.918996][T22563] vhci_hcd vhci_hcd.0: Device attached
[  398.920954][T22569] vhci_hcd: connection closed
[  398.921137][T18326] vhci_hcd vhci_hcd.1: stop threads
[  398.924402][T18326] vhci_hcd vhci_hcd.1: release socket
[  398.926159][T18326] vhci_hcd vhci_hcd.1: disconnect device
[  399.455959][   T40] kauditd_printk_skb: 265 callbacks suppressed
[  399.455971][   T40] audit: type=1400 audit(2000000126.759:54536): avc:  denied  { create } for  pid=22620 comm="syz.1.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.465497][   T40] audit: type=1400 audit(2000000126.769:54537): avc:  denied  { bind } for  pid=22620 comm="syz.1.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.473007][   T40] audit: type=1400 audit(2000000126.779:54538): avc:  denied  { listen } for  pid=22620 comm="syz.1.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.483389][   T40] audit: type=1400 audit(2000000126.779:54539): avc:  denied  { accept } for  pid=22620 comm="syz.1.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.524647][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  399.524702][   T40] audit: type=1400 audit(2000000126.829:54540): avc:  denied  { name_bind } for  pid=22620 comm="syz.1.4320" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  399.530676][ T5949] CPU: 3 UID: 0 PID: 5949 Comm: kworker/u33:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.530697][ T5949] Tainted: [L]=SOFTLOCKUP
[  399.530702][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  399.530710][ T5949] Workqueue: hci3 hci_rx_work
[  399.530745][ T5949] Call Trace:
[  399.530749][ T5949]  <TASK>
[  399.530754][ T5949]  dump_stack_lvl+0x16c/0x1f0
[  399.530772][ T5949]  sysfs_warn_dup+0x7f/0xa0
[  399.530791][ T5949]  sysfs_create_dir_ns+0x24b/0x2b0
[  399.530804][ T5949]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  399.530817][ T5949]  ? find_held_lock+0x2b/0x80
[  399.530840][ T5949]  ? do_raw_spin_unlock+0x172/0x230
[  399.530858][ T5949]  kobject_add_internal+0x2c4/0x9d0
[  399.530878][ T5949]  kobject_add+0x16e/0x240
[  399.530895][ T5949]  ? __pfx_kobject_add+0x10/0x10
[  399.530927][ T5949]  ? kobject_put+0xaf/0x6f0
[  399.530941][ T5949]  ? _raw_spin_unlock+0x28/0x50
[  399.530958][ T5949]  device_add+0x288/0x1980
[  399.530972][ T5949]  ? __pfx_dev_set_name+0x10/0x10
[  399.530986][ T5949]  ? __pfx_device_add+0x10/0x10
[  399.530998][ T5949]  ? mgmt_send_event_skb+0x2fb/0x460
[  399.531015][ T5949]  hci_conn_add_sysfs+0x1a8/0x260
[  399.531031][ T5949]  le_conn_complete_evt+0x11ed/0x1fa0
[  399.531047][ T5949]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  399.531098][ T5949]  hci_le_conn_complete_evt+0x23c/0x3a0
[  399.531116][ T5949]  hci_le_meta_evt+0x357/0x610
[  399.531130][ T5949]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  399.531146][ T5949]  hci_event_packet+0x685/0x1210
[  399.531159][ T5949]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  399.531173][ T5949]  ? __pfx_hci_event_packet+0x10/0x10
[  399.531189][ T5949]  ? kcov_remote_start+0x399/0x680
[  399.531202][ T5949]  ? lockdep_hardirqs_on+0x7c/0x110
[  399.531222][ T5949]  hci_rx_work+0x2c9/0x1020
[  399.531237][ T5949]  process_one_work+0x9ba/0x1b20
[  399.531258][ T5949]  ? __pfx_process_one_work+0x10/0x10
[  399.531277][ T5949]  ? assign_work+0x1a0/0x250
[  399.531292][ T5949]  worker_thread+0x6c8/0xf10
[  399.531311][ T5949]  ? __kthread_parkme+0x19e/0x250
[  399.531322][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  399.531337][ T5949]  kthread+0x3c5/0x780
[  399.531350][ T5949]  ? __pfx_kthread+0x10/0x10
[  399.531365][ T5949]  ? rcu_is_watching+0x12/0xc0
[  399.531376][ T5949]  ? __pfx_kthread+0x10/0x10
[  399.531389][ T5949]  ret_from_fork+0x983/0xb10
[  399.531402][ T5949]  ? __pfx_ret_from_fork+0x10/0x10
[  399.531416][ T5949]  ? __switch_to+0x7af/0x10d0
[  399.531432][ T5949]  ? __pfx_kthread+0x10/0x10
[  399.531446][ T5949]  ret_from_fork_asm+0x1a/0x30
[  399.531471][ T5949]  </TASK>
[  399.531487][ T5949] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  399.625281][ T5949] Bluetooth: hci3: failed to register connection device
[  399.809739][T22631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4321'.
[  399.817577][   T40] audit: type=1400 audit(2000000127.119:54541): avc:  denied  { create } for  pid=22630 comm="syz.2.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  399.824076][   T40] audit: type=1400 audit(2000000127.119:54542): avc:  denied  { write } for  pid=22630 comm="syz.2.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  399.838226][   T40] audit: type=1400 audit(2000000127.119:54543): avc:  denied  { create } for  pid=22630 comm="syz.2.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  399.844731][   T40] audit: type=1400 audit(2000000127.119:54544): avc:  denied  { bind } for  pid=22630 comm="syz.2.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  399.853100][   T40] audit: type=1400 audit(2000000127.119:54545): avc:  denied  { write } for  pid=22630 comm="syz.2.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  399.908061][ T5949] Bluetooth: hci0: unexpected event 0x32 length: 48 > 9
[  399.948690][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4326'.
[  399.960797][T22651] : entered promiscuous mode
[  400.022055][T22665] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4329'.
[  400.026424][T22665] netlink: 'syz.5.4329': attribute type 2 has an invalid length.
[  400.078401][T22670] syzkaller0: entered promiscuous mode
[  400.080300][T22670] syzkaller0: entered allmulticast mode
[  400.097307][ T5949] Bluetooth: hci3: command 0x0405 tx timeout
[  400.188793][   T59] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  400.228504][T22680] 9p: Could not find request transport: vir�io
[  400.324794][T22691] binder_alloc: 22690: binder_alloc_buf, no vma
[  400.370738][   T59] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  400.375401][   T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  400.380682][   T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  400.384300][   T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  400.389564][   T59] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  400.406464][   T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.413448][   T59] usb 5-1: config 0 descriptor??
[  400.481636][T22705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.571708][T22705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.667498][T22705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.744311][T22705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.817284][ T5939] Bluetooth: hci0: command 0x040f tx timeout
[  400.825479][   T59] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max
[  400.836858][   T59] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  400.901237][T10485] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.912232][T10485] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.924395][T10485] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.939378][T10485] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.924941][T22778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=22778 comm=syz.2.4347
[  401.929431][T22778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=22778 comm=syz.2.4347
[  401.966232][ T5947] Bluetooth: hci3: unexpected event for opcode 0x201c
[  402.126044][T22788] kvm: pic: non byte write
[  402.361166][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4354'.
[  402.365902][T22807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22807 comm=syz.2.4354
[  402.425796][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'.
[  402.432278][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'.
[  402.688148][T22838] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4361'.
[  402.732895][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'.
[  402.737104][T22847] hsr_slave_0: left promiscuous mode
[  402.741327][T22847] hsr_slave_1: left promiscuous mode
[  402.897338][ T5947] Bluetooth: hci0: command 0x040f tx timeout
[  402.951977][ T6001] usb 5-1: USB disconnect, device number 38
[  403.127719][   T59] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  403.138681][T22889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22889 comm=syz.1.4369
[  403.143491][T22889] netlink: 'syz.1.4369': attribute type 1 has an invalid length.
[  403.163931][T22889] bond2: (slave bridge3): making interface the new active one
[  403.166901][T22889] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  403.290043][   T59] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD
[  403.293972][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 198, changing to 11
[  403.297957][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 42683, setting to 1024
[  403.303433][   T59] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  403.306423][   T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.309014][   T59] usb 7-1: Product: syz
[  403.310504][   T59] usb 7-1: Manufacturer: syz
[  403.312169][   T59] usb 7-1: SerialNumber: syz
[  403.315190][   T59] usb 7-1: config 0 descriptor??
[  403.317468][T22856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  403.414867][T22945] ALSA: seq fatal error: cannot create timer (-16)
[  403.437237][T17360] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  403.522559][T22856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  403.588781][T17360] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  403.591490][T17360] usb 5-1: config 1 has no interface number 0
[  403.593503][T17360] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32
[  403.596747][T17360] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  403.600222][T17360] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  403.605461][T17360] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  403.608643][T17360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.611334][T17360] usb 5-1: Product: syz
[  403.612839][T17360] usb 5-1: Manufacturer: syz
[  403.614357][T17360] usb 5-1: SerialNumber: syz
[  403.618340][T22933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  403.621803][T22933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  403.625434][T17360] usb 5-1: Expected 3 endpoints, found: 2
[  403.730152][   T59] usb 7-1: USB disconnect, device number 33

syzkaller
syzkaller login: [  404.182842][T23008] Cannot find del_set index 4 as target
[  404.467463][ T6247] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  404.507241][ T6021] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  404.627383][ T6247] usb 6-1: Using ep0 maxpacket: 8
[  404.630890][ T6247] usb 6-1: config 0 interface 0 has no altsetting 0
[  404.633243][ T6247] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  404.636316][ T6247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.640976][ T6247] usb 6-1: config 0 descriptor??
[  404.647435][ T6021] usb 7-1: device descriptor read/64, error -71
[  404.897291][ T6021] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  404.977274][ T5947] Bluetooth: hci0: command 0x040f tx timeout
[  405.027249][ T6021] usb 7-1: device descriptor read/64, error -71
[  405.052372][ T6247] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  405.137467][ T6021] usb usb7-port1: attempt power cycle
[  405.258100][   T59] usb 6-1: USB disconnect, device number 50
[  405.477247][ T6021] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  405.497869][ T6021] usb 7-1: device descriptor read/8, error -71
[  405.737335][ T6021] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  405.757897][ T6021] usb 7-1: device descriptor read/8, error -71
[  405.785791][   T40] kauditd_printk_skb: 256 callbacks suppressed
[  405.785802][   T40] audit: type=1400 audit(2000000133.089:54802): avc:  denied  { name_bind } for  pid=23055 comm="syz.1.4380" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  405.795400][   T40] audit: type=1400 audit(2000000133.089:54803): avc:  denied  { node_bind } for  pid=23055 comm="syz.1.4380" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  405.803822][   T40] audit: type=1400 audit(2000000133.089:54804): avc:  denied  { allowed } for  pid=23055 comm="syz.1.4380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  405.812414][   T40] audit: type=1400 audit(2000000133.099:54805): avc:  denied  { create } for  pid=23055 comm="syz.1.4380" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  405.819780][   T40] audit: type=1400 audit(2000000133.099:54806): avc:  denied  { map } for  pid=23055 comm="syz.1.4380" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  405.827990][   T40] audit: type=1400 audit(2000000133.099:54807): avc:  denied  { read write } for  pid=23055 comm="syz.1.4380" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  405.844647][   T40] audit: type=1400 audit(2000000133.149:54808): avc:  denied  { create } for  pid=23060 comm="syz.1.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  405.845541][T23061] netlink: 344 bytes leftover after parsing attributes in process `syz.1.4381'.
[  405.851715][   T40] audit: type=1400 audit(2000000133.149:54809): avc:  denied  { write } for  pid=23060 comm="syz.1.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  405.862124][   T40] audit: type=1400 audit(2000000133.149:54810): avc:  denied  { nlmsg_write } for  pid=23060 comm="syz.1.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  405.868407][ T6021] usb usb7-port1: unable to enumerate USB device
[  405.890434][   T40] audit: type=1400 audit(2000000133.199:54811): avc:  denied  { ioctl } for  pid=23063 comm="syz.1.4382" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=113933 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  406.023830][T23070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4383'.
[  406.041989][T23070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4383'.
[  406.238477][ T6105] usb 5-1: USB disconnect, device number 39
[  406.494811][T23109] netlink: 'syz.0.4392': attribute type 15 has an invalid length.
[  406.497831][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'.
[  406.500810][T23109] netlink: 'syz.0.4392': attribute type 15 has an invalid length.
[  406.503345][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'.
[  406.530898][T23112] netlink: 'syz.0.4393': attribute type 1 has an invalid length.
[  406.687174][T23122] overlay: Unknown parameter 'subj_role'
[  407.326755][T23156] netlink: 'syz.1.4402': attribute type 25 has an invalid length.
[  407.426153][T23163] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4404'.
[  408.693583][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  408.698460][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  408.702800][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  408.707794][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  408.710883][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  408.800682][T23220] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4419'.
[  408.804600][T23220] nbd: socks must be embedded in a SOCK_ITEM attr
[  408.844854][T10486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.866288][T23221] xfrm0 speed is unknown, defaulting to 1000
[  408.976094][T10486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.989203][T23221] chnl_net:caif_netlink_parms(): no params data found
[  409.069704][T23221] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.072675][T23221] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.075397][T23221] bridge_slave_0: entered allmulticast mode
[  409.079267][T23221] bridge_slave_0: entered promiscuous mode
[  409.084320][T23221] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.087076][T23221] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.090853][T23221] bridge_slave_1: entered allmulticast mode
[  409.094608][T23221] bridge_slave_1: entered promiscuous mode
[  409.136687][T10486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.160166][T23221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.164905][T23221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.185313][T23221] team0: Port device team_slave_0 added
[  409.189234][T23221] team0: Port device team_slave_1 added
[  409.209607][T23221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.212602][T23221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.223608][T23221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.241694][T10486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.250161][T23221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.253126][T23221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.263730][T23221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.298307][T23221] hsr_slave_0: entered promiscuous mode
[  409.301305][T23221] hsr_slave_1: entered promiscuous mode
[  409.305102][T23221] debugfs: 'hsr0' already exists in 'hsr'
[  409.308032][T23221] Cannot create hsr debugfs directory
[  409.502526][T10486] bridge_slave_0: left allmulticast mode
[  409.504501][T10486] bridge_slave_0: left promiscuous mode
[  409.506406][T10486] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.822150][T10486] dvmrp6 (unregistering): left allmulticast mode
[  409.836040][T23504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4410'.
[  410.057072][T10486] bond2 (unregistering): (slave bridge3): Releasing active interface
[  410.165586][T10486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.201421][T10486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.218822][T10486] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  410.258859][T10486] bond0 (unregistering): Released all slaves
[  410.346912][T10486] bond1 (unregistering): Released all slaves
[  410.353682][T10486] bond2 (unregistering): Released all slaves
[  410.423931][T23525] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4423'.
[  410.434241][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4423'.
[  410.440929][T10486] tipc: Left network mode
[  410.565772][ T5947] Bluetooth: hci2: unexpected event for opcode 0x200d
[  410.634117][T23546] netlink: 'syz.0.4428': attribute type 1 has an invalid length.
[  410.660241][T23546] 8021q: adding VLAN 0 to HW filter on device bond6
[  410.711758][T23586] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  410.748347][ T5947] Bluetooth: hci3: command tx timeout
[  410.774384][T23586] syzkaller0: entered promiscuous mode
[  410.776757][T23586] syzkaller0: entered allmulticast mode
[  410.800437][   T40] kauditd_printk_skb: 186 callbacks suppressed
[  410.800452][   T40] audit: type=1400 audit(2000000138.109:54998): avc:  denied  { create } for  pid=23585 comm="syz.0.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  410.811869][   T40] audit: type=1400 audit(2000000138.109:54999): avc:  denied  { getopt } for  pid=23585 comm="syz.0.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  410.822653][T10486] hsr_slave_0: left promiscuous mode
[  410.825189][T10486] hsr_slave_1: left promiscuous mode
[  410.828361][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.831427][T10486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.834393][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.836912][T10486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.851741][T10486] veth1_macvtap: left promiscuous mode
[  410.853649][T10486] veth0_macvtap: left promiscuous mode
[  410.855597][T10486] veth1_vlan: left promiscuous mode
[  410.857762][T10486] veth0_vlan: left promiscuous mode
[  411.262600][T10486] team0 (unregistering): Port device team_slave_1 removed
[  411.292824][T10486] team0 (unregistering): Port device team_slave_0 removed
[  411.336802][   T40] audit: type=1400 audit(2000000138.639:55000): avc:  denied  { create } for  pid=23603 comm="syz.2.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  411.343720][   T40] audit: type=1400 audit(2000000138.639:55001): avc:  denied  { write } for  pid=23603 comm="syz.2.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  411.365987][   T40] audit: type=1400 audit(2000000138.669:55002): avc:  denied  { write } for  pid=23605 comm="syz.2.4431" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  411.380489][   T40] audit: type=1400 audit(2000000138.689:55003): avc:  denied  { create } for  pid=23605 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  411.389102][   T40] audit: type=1400 audit(2000000138.699:55004): avc:  denied  { bind } for  pid=23605 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  411.422126][   T40] audit: type=1400 audit(2000000138.729:55005): avc:  denied  { sys_module } for  pid=23605 comm="syz.2.4431" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  411.466509][   T40] audit: type=1400 audit(2000000138.769:55006): avc:  denied  { create } for  pid=23605 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  411.475590][   T40] audit: type=1400 audit(2000000138.779:55007): avc:  denied  { getopt } for  pid=23605 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  411.686106][T23221] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  411.691218][T23221] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  411.695707][T23221] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  411.703380][T23221] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  411.770238][T23221] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.778867][T23221] 8021q: adding VLAN 0 to HW filter on device team0
[  411.784526][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.787764][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.795580][T10485] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.798536][T10485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.906781][T23221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.996981][T23657] __nla_validate_parse: 2 callbacks suppressed
[  411.996992][T23657] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4434'.
[  412.010648][ T6001] libceph: connect (1)[c::]:6789 error -101
[  412.012861][ T6001] libceph: mon0 (1)[c::]:6789 connect error
[  412.065927][T23221] veth0_vlan: entered promiscuous mode
[  412.072762][T23221] veth1_vlan: entered promiscuous mode
[  412.089236][T23221] veth0_macvtap: entered promiscuous mode
[  412.093465][T23221] veth1_macvtap: entered promiscuous mode
[  412.103625][T23221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.110599][T23221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.116509][T10485] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.120949][T10485] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.124798][T10485] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.128561][T10485] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.150648][T23657] ceph: No mds server is up or the cluster is laggy
[  412.260819][ T4580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.263506][ T4580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.280850][T10485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.283137][T10485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.391030][T23696] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4418'.
[  412.399723][T23678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4440'.
[  412.435406][T23696] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4418'.
[  412.469792][T23706] netlink: 'syz.8.4443': attribute type 1 has an invalid length.
[  412.621812][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4444'.
[  412.694479][T23718] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4445'.
[  412.697826][T23718] 0�X���: renamed from caif0
[  412.729068][T23724] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:32789
[  412.737803][T23718] 0�X���: entered allmulticast mode
[  412.739687][T23718] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  412.774846][T23729] netlink: 'syz.8.4448': attribute type 58 has an invalid length.
[  412.802406][T23729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4448'.
[  412.805339][T23729] bridge_slave_1: left allmulticast mode
[  412.807963][T23729] bridge_slave_1: left promiscuous mode
[  412.809944][T23729] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.816383][T23729] bridge_slave_0: left allmulticast mode
[  412.819044][T23729] bridge_slave_0: left promiscuous mode
[  412.820979][T23729] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.827276][ T5947] Bluetooth: hci3: command tx timeout
[  413.092210][T23755] binder: 23754:23755 ioctl 80049367 200000000000 returned -22
[  413.103252][T23756] binder: 23754:23756 ioctl 4018620d 2000000002c0 returned -22
[  413.106777][T23757] binder: 23754:23757 ioctl 5608 0 returned -22
[  413.113213][T23756] binder: 23754:23756 ioctl c0306201 2000000003c0 returned -14
[  413.251747][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4453'.
[  413.270233][T23761] 8021q: adding VLAN 0 to HW filter on device bond7
[  413.274688][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'.
[  413.278920][T23761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4453'.
[  414.181429][T23819] o2cb: This node has not been configured.
[  414.184439][T23819] o2cb: Cluster check failed. Fix errors before retrying.
[  414.187701][T23819] (syz.8.4459,23819,3):user_dlm_register:674 ERROR: status = -22
[  414.191210][T23819] (syz.8.4459,23819,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0"
[  414.897471][ T5939] Bluetooth: hci3: command tx timeout
[  414.952431][T23834] trusted_key: encrypted_key: insufficient parameters specified
[  414.955938][T23835] trusted_key: encrypted_key: insufficient parameters specified
[  415.103372][T23840] binder: 23838:23840 ioctl c00464b4 200000000140 returned -22
[  415.143556][T23837] netlink: 'syz.2.4463': attribute type 10 has an invalid length.
[  415.149746][T23837] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.153696][T23837] bridge_slave_1: left allmulticast mode
[  415.156255][T23837] bridge_slave_1: left promiscuous mode
[  415.159950][T23837] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.170804][T23837] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  415.424914][T23879] .`: (slave syz_tun): Releasing backup interface
[  415.449261][T23879] bridge_slave_0: left allmulticast mode
[  415.451271][T23879] bridge_slave_0: left promiscuous mode
[  415.453343][T23879] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.461187][T23879] .`: (slave bridge_slave_1): Releasing backup interface
[  415.590146][T23879] .`: (slave bond_slave_0): Releasing backup interface
[  415.650854][T23879] .`: (slave bond_slave_1): Releasing backup interface
[  415.677431][ T6105] usb 7-1: new low-speed USB device number 38 using dummy_hcd
[  415.740553][T23879] team0: Port device team_slave_0 removed
[  415.743705][T23879] team0: Port device team_slave_1 removed
[  415.746008][T23879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.751229][T23879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.754605][T23879] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  415.820275][   T40] kauditd_printk_skb: 136 callbacks suppressed
[  415.820285][   T40] audit: type=1400 audit(2000000143.129:55144): avc:  denied  { ioctl } for  pid=23893 comm="syz.0.4475" path="socket:[117763]" dev="sockfs" ino=117763 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  415.834447][ T6105] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  415.837554][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  415.842345][ T6105] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  415.847213][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  415.851407][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  415.865070][ T6105] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  415.867764][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  415.871165][ T6105] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  415.875169][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  415.878848][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  415.883567][ T6105] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  415.886158][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  415.889638][ T6105] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  415.893334][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  415.896995][ T6105] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  415.903395][ T6105] usb 7-1: string descriptor 0 read error: -22
[  415.905491][ T6105] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  415.908515][ T6105] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.914476][ T6105] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  415.935549][   T40] audit: type=1400 audit(2000000143.239:55145): avc:  denied  { map } for  pid=23896 comm="syz.0.4476" path="socket:[116875]" dev="sockfs" ino=116875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  415.945370][   T40] audit: type=1400 audit(2000000143.249:55146): avc:  denied  { execmem } for  pid=23896 comm="syz.0.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  415.953020][   T40] audit: type=1400 audit(2000000143.249:55147): avc:  denied  { accept } for  pid=23896 comm="syz.0.4476" path="socket:[116875]" dev="sockfs" ino=116875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  415.979106][   T40] audit: type=1400 audit(2000000143.289:55148): avc:  denied  { map } for  pid=23906 comm="syz.0.4477" path="socket:[117771]" dev="sockfs" ino=117771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  415.987610][   T40] audit: type=1400 audit(2000000143.289:55149): avc:  denied  { accept } for  pid=23906 comm="syz.0.4477" path="socket:[117771]" dev="sockfs" ino=117771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  415.989667][T23907] netlink: 'syz.0.4477': attribute type 2 has an invalid length.
[  415.996251][   T40] audit: type=1400 audit(2000000143.299:55150): avc:  denied  { read } for  pid=23906 comm="syz.0.4477" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  416.006797][   T40] audit: type=1400 audit(2000000143.299:55151): avc:  denied  { open } for  pid=23906 comm="syz.0.4477" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  416.016231][   T40] audit: type=1400 audit(2000000143.299:55152): avc:  denied  { ioctl } for  pid=23906 comm="syz.0.4477" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  416.059125][   T40] audit: type=1400 audit(2000000143.369:55153): avc:  denied  { create } for  pid=23910 comm="syz.0.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  416.254566][ T5949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  416.261011][ T5949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  416.264158][ T5949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  416.269601][ T5949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  416.274699][ T5949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  416.296767][   T60] usb 7-1: USB disconnect, device number 38
[  416.297909][T23929] xfrm0 speed is unknown, defaulting to 1000
[  416.417799][ T6105] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  416.443299][ T5949] Bluetooth: hci3: unexpected event for opcode 0x200a
[  416.458685][T23929] chnl_net:caif_netlink_parms(): no params data found
[  416.511936][T23929] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.514808][T23929] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.518095][T23929] bridge_slave_0: entered allmulticast mode
[  416.522236][T23929] bridge_slave_0: entered promiscuous mode
[  416.525717][T23929] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.528674][T23929] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.531055][T23929] bridge_slave_1: entered allmulticast mode
[  416.533673][T23929] bridge_slave_1: entered promiscuous mode
[  416.551316][T23929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.556134][T23929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.572084][T23929] team0: Port device team_slave_0 added
[  416.575150][T23929] team0: Port device team_slave_1 added
[  416.589588][ T6105] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  416.592668][ T6105] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  416.595960][ T6105] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  416.598953][ T6105] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  416.602635][ T6105] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  416.607740][ T6105] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  416.610880][ T6105] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  416.613642][ T6105] usb 5-1: Product: syz
[  416.615031][ T6105] usb 5-1: Manufacturer: syz
[  416.619713][ T6105] cdc_wdm 5-1:1.0: skipping garbage
[  416.621473][ T6105] cdc_wdm 5-1:1.0: skipping garbage
[  416.624268][ T6105] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  416.626260][ T6105] cdc_wdm 5-1:1.0: Unknown control protocol
[  416.821663][   T60] usb 5-1: USB disconnect, device number 40
[  416.825419][T23929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.827856][T23929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.837083][T23929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.853296][T10481] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.863817][T23929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.866125][T23929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.874509][T23929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.980344][T10481] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.019377][T23929] hsr_slave_0: entered promiscuous mode
[  417.022842][T23929] hsr_slave_1: entered promiscuous mode
[  417.025853][T23929] debugfs: 'hsr0' already exists in 'hsr'
[  417.028422][T23929] Cannot create hsr debugfs directory
[  417.047389][T10481] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.154981][T23929] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.160168][T23929] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.175136][T10481] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.258966][T23929] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.263079][T23929] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.350874][T23929] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.353896][T24258] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4493'.
[  417.354854][T23929] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.401157][T10481] bridge_slave_1: left allmulticast mode
[  417.403111][T10481] bridge_slave_1: left promiscuous mode
[  417.405095][T10481] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.410843][T10481] bridge_slave_0: left allmulticast mode
[  417.413177][T10481] bridge_slave_0: left promiscuous mode
[  417.415331][T10481] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.487302][ T6021] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  417.639786][ T6021] usb 5-1: device descriptor read/64, error -71
[  417.688326][T10481] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  417.877103][T10481] team0: Port device bridge1 removed
[  417.877222][ T6021] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  418.022402][T10481] bond1 (unregistering): Released all slaves
[  418.028997][T10481] bond2 (unregistering): Released all slaves
[  418.028999][ T6021] usb 5-1: device descriptor read/64, error -71
[  418.123943][T10481] bond0 (unregistering): Released all slaves
[  418.137644][ T6021] usb usb5-port1: attempt power cycle
[  418.146623][T23929] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.150054][T23929] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.169230][T24297] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  418.173081][T24297] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  418.182061][ T5949] Bluetooth: hci0: unknown advertising packet type: 0x82
[  418.182110][ T5949] Bluetooth: hci0: Dropping invalid advertising data
[  418.195573][ T5949] Bluetooth: hci0: Malformed LE Event: 0x02
[  418.203162][T10481] : left promiscuous mode
[  418.275317][T10481] tipc: Disabling bearer <udp:syz2>
[  418.277515][T10481] tipc: Left network mode
[  418.337385][ T5949] Bluetooth: hci4: command tx timeout
[  418.395713][T23929] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  418.403717][T23929] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  418.411073][T23929] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  418.415421][T23929] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  418.428007][T10481] IPVS: stopping backup sync thread 18704 ...
[  418.478329][ T6021] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  418.508077][T24340] binder: 24339:24340 ioctl c0306201 200000000640 returned -22
[  418.511726][ T6021] usb 5-1: device descriptor read/8, error -71
[  418.582427][T24343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  418.589515][T23929] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.601904][T24343] tipc: Started in network mode
[  418.604128][T24343] tipc: Node identity eeca0bdd189f, cluster identity 4711
[  418.607629][T24343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.668722][T24343] tipc: Disabling bearer <eth:syzkaller0>
[  418.673721][T23929] 8021q: adding VLAN 0 to HW filter on device team0
[  418.679441][T10486] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.682146][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.690496][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.693094][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.749346][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4510'.
[  418.768564][T24366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4511'.
[  418.773359][ T6021] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  418.807979][ T6021] usb 5-1: device descriptor read/8, error -71
[  418.824849][T24369] binder: 24368:24369 ioctl c0306201 200000000440 returned -22
[  418.887811][T10481] hsr_slave_0: left promiscuous mode
[  418.892477][T10481] hsr_slave_1: left promiscuous mode
[  418.895207][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.898638][T10481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.903964][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.906984][T10481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.917581][ T6021] usb usb5-port1: unable to enumerate USB device
[  418.925600][T10481] veth1_macvtap: left promiscuous mode
[  418.927881][T10481] veth0_macvtap: left promiscuous mode
[  418.930182][T10481] veth1_vlan: left promiscuous mode
[  418.931984][T10481] veth0_vlan: left promiscuous mode
[  419.303229][T10481] team0 (unregistering): Port device team_slave_1 removed
[  419.345809][T10481] team0 (unregistering): Port device team_slave_0 removed
[  419.711389][T23929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.718567][T24404] Context (ID=0x0) not attached to queue pair (handle=0x4e3:0x0)
[  419.722651][T24404] netlink: 26040 bytes leftover after parsing attributes in process `syz.8.4515'.
[  419.943573][T23929] veth0_vlan: entered promiscuous mode
[  419.951810][T23929] veth1_vlan: entered promiscuous mode
[  419.961089][T24424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.968919][T23929] veth0_macvtap: entered promiscuous mode
[  419.975268][T23929] veth1_macvtap: entered promiscuous mode
[  420.005196][T23929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.013525][T23929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.021571][T10475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.028240][T10475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.036850][T10475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.049559][T10475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.105865][T18319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.117211][T18319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.191664][T10475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.194008][T10481] IPVS: stop unused estimator thread 0...
[  420.194277][T10475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.291395][T24456] netlink: 'syz.6.4481': attribute type 20 has an invalid length.
[  420.306774][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4481'.
[  420.312105][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4481'.
[  420.382539][T24463] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4526'.
[  420.386508][T24463] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4526'.
[  420.395662][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4526'.
[  420.408582][T24463] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  420.419217][ T5949] Bluetooth: hci4: command tx timeout
[  420.454589][T24467] netlink: 'syz.6.4527': attribute type 1 has an invalid length.
[  420.457424][T24467] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.4527'.
[  420.510965][ T5949] Bluetooth: hci0: unexpected event for opcode 0x2012
[  420.525933][T24470] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  420.842091][   T40] kauditd_printk_skb: 192 callbacks suppressed
[  420.842108][   T40] audit: type=1400 audit(2000000148.149:55346): avc:  denied  { create } for  pid=24494 comm="syz.2.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  420.844283][T24495] loop6: detected capacity change from 0 to 524287999
[  420.844806][   T40] audit: type=1400 audit(2000000148.149:55347): avc:  denied  { ioctl } for  pid=24494 comm="syz.2.4534" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=117277 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  420.846313][T24497] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '9'
[  420.856439][T24495] Dev loop6: unable to read RDB block 8
[  420.867742][   T40] audit: type=1400 audit(2000000148.149:55348): avc:  denied  { setopt } for  pid=24494 comm="syz.2.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  420.870488][T24495]  loop6: unable to read partition table
[  420.881899][T24495] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  420.956617][   T40] audit: type=1400 audit(2000000148.259:55349): avc:  denied  { set_context_mgr } for  pid=24503 comm="syz.2.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  420.962612][T24504] netlink: 'syz.2.4535': attribute type 9 has an invalid length.
[  420.963322][   T40] audit: type=1400 audit(2000000148.259:55350): avc:  denied  { create } for  pid=24503 comm="syz.2.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  420.973043][   T40] audit: type=1400 audit(2000000148.259:55351): avc:  denied  { ioctl } for  pid=24503 comm="syz.2.4535" path="socket:[117288]" dev="sockfs" ino=117288 ioctlcmd=0x42d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  421.011565][   T40] audit: type=1400 audit(2000000148.319:55352): avc:  denied  { bind } for  pid=24505 comm="syz.2.4536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  421.018373][   T40] audit: type=1400 audit(2000000148.319:55353): avc:  denied  { listen } for  pid=24505 comm="syz.2.4536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  421.028336][T24506] xfrm1: entered allmulticast mode
[  421.148070][   T40] audit: type=1400 audit(2000000148.459:55354): avc:  denied  { create } for  pid=24512 comm="syz.2.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  421.155197][   T40] audit: type=1400 audit(2000000148.459:55355): avc:  denied  { ioctl } for  pid=24512 comm="syz.2.4537" path="socket:[116332]" dev="sockfs" ino=116332 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  421.204342][T24518] nfs: Unknown parameter 'a#)���y�4t�nAѓG���]_S�y0�r���l����?��4L#X�v�"U>�g�E"O�ɫ{����"K�U�R�o��ˋ���/MGGv��SD��@'
[  421.299140][T24519] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode
[  421.335076][T24526] lo speed is unknown, defaulting to 1000
[  421.340390][T24526] lo speed is unknown, defaulting to 1000
[  421.343078][T24526] lo speed is unknown, defaulting to 1000
[  421.388157][T24531] ������: renamed from lo (while UP)
[  421.472275][   T24] ������ speed is unknown, defaulting to 1000
[  421.474780][T24526] infiniband s
z1: set active
[  421.477043][T24526] infiniband s
z1: added ������
[  421.517962][T24526] RDS/IB: s
z1: added
[  421.520332][T24526] smc: adding ib device s
z1 with port count 1
[  421.522466][T24526] smc:    ib device s
z1 port 1 has no pnetid
[  421.611555][   T24] ������ speed is unknown, defaulting to 1000
[  421.620341][T24526] ������ speed is unknown, defaulting to 1000
[  421.675432][T24553] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.4547' resets device
[  421.784622][T24526] ������ speed is unknown, defaulting to 1000
[  421.908613][T24526] ������ speed is unknown, defaulting to 1000
[  421.999715][T24526] ������ speed is unknown, defaulting to 1000
[  422.001399][T24583] program syz.8.4551 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  422.067841][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  422.070462][ T1115] ata1.00: irq_stat 0x40000000
[  422.072214][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT
[  422.074327][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 14
[  422.074327][ T1115]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  422.080001][ T1115] ata1.00: status: { DRDY ERR }
[  422.081741][ T1115] ata1.00: error: { ABRT }
[  422.082053][T24526] ������ speed is unknown, defaulting to 1000
[  422.083768][ T1115] ata1.00: device reported invalid CHS sector 0
[  422.185241][T24526] ������ speed is unknown, defaulting to 1000
[  422.270434][T24526] ������ speed is unknown, defaulting to 1000
[  422.350436][T24609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.368067][T24526] ������ speed is unknown, defaulting to 1000
[  422.461989][T24619] program syz.0.4564 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  422.497497][ T5949] Bluetooth: hci4: command tx timeout
[  422.559759][T24626] netlink: 'syz.6.4567': attribute type 29 has an invalid length.
[  422.621416][T24628] netlink: 'syz.6.4567': attribute type 29 has an invalid length.
[  422.686206][T24630] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  422.691372][T24630] loop5: detected capacity change from 0 to 7
[  422.701037][T24630] Dev loop5: unable to read RDB block 7
[  422.703002][T24630]  loop5: unable to read partition table
[  422.705121][T24630] loop5: partition table beyond EOD, truncated
[  422.707289][T24630] loop_reread_partitions: partition scan of loop5 (�������g�C�j̖�P=��!MX���	���%��`�搘ȵ4FLQk݊5) failed (rc=-5)
[  422.713079][T24633] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  422.791374][T24641] nbd: must specify a size in bytes for the device
[  422.969367][T24651] pim6reg9: entered allmulticast mode
[  423.217245][   T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  423.276915][T24670] xt_hashlimit: size too large, truncated to 1048576
[  423.378929][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.382896][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32768, setting to 1024
[  423.386934][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  423.391374][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  423.394429][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.399011][   T10] usb 7-1: config 0 descriptor??
[  423.608598][   T10] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd
[  423.629281][   T10] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  423.640637][   T10] usb 7-1: USB disconnect, device number 39
[  423.683886][T24728] CIFS: Unable to determine destination address
[  423.753386][T24736] QAT: failed to copy from user cfg_data.
[  423.987708][ T5949] Bluetooth: hci0: unexpected event for opcode 0x2023
[  424.012694][T24758] vlan0: entered allmulticast mode
[  424.015092][T24758] veth0_vlan: entered allmulticast mode
[  424.069392][T24765] xfrm0 speed is unknown, defaulting to 1000
[  424.075046][T24765] ������ speed is unknown, defaulting to 1000
[  424.179219][T24773] netlink: 'syz.2.4591': attribute type 16 has an invalid length.
[  424.182172][T24773] netlink: 'syz.2.4591': attribute type 17 has an invalid length.
[  424.277620][T24773] 0�X���: left allmulticast mode
[  424.279813][T24773] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  424.312502][T24787] syzkaller0: entered promiscuous mode
[  424.314787][T24787] syzkaller0: entered allmulticast mode
[  424.456607][T24815] netlink: 'syz.6.4596': attribute type 1 has an invalid length.
[  424.463363][T24815] 8021q: VLANs not supported on wg2
[  424.532860][T24821] __nla_validate_parse: 3 callbacks suppressed
[  424.532877][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4600'.
[  424.559328][T24822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer.
[  424.566119][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'.
[  424.566239][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4599'.
[  424.577300][ T5949] Bluetooth: hci4: command tx timeout
[  424.678957][T24834] nfs: Unknown parameter 'fsc	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	cy7z���	c
[  424.680823][T24834] ./file0: Can't open blockdev
[  424.749591][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.753819][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.758484][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.762733][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.767022][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.772285][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.776695][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.781501][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.785694][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.790114][T24854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25480 sclass=netlink_route_socket pid=24854 comm=syz.8.4604
[  424.933902][T24879] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4610'.
[  425.051542][T24890] 9pnet_fd: p9_fd_create_tcp (24890): problem connecting socket to 127.0.0.1
[  425.095413][T24898] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4614'.
[  425.122878][T24898] 9p: Bad value for 'rfdno'
[  425.254974][T24907] sd 0:0:0:0: PR command failed: 1026
[  425.256788][T24907] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  425.259533][T24907] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  425.574418][T24935] input: syz0 as /devices/virtual/input/input76
[  425.816504][T24953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4624'.
[  425.963713][   T40] kauditd_printk_skb: 180 callbacks suppressed
[  425.963728][   T40] audit: type=1400 audit(2000000153.269:55536): avc:  denied  { read } for  pid=24961 comm="syz.6.4625" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  425.977983][   T40] audit: type=1400 audit(2000000153.289:55537): avc:  denied  { setopt } for  pid=24961 comm="syz.6.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  426.058207][   T40] audit: type=1400 audit(2000000153.369:55538): avc:  denied  { mount } for  pid=24968 comm="syz.8.4627" name="/" dev="9p" ino=71827811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  426.068998][   T40] audit: type=1400 audit(2000000153.369:55539): avc:  denied  { mounton } for  pid=24968 comm="syz.8.4627" path="/78/file0/file0" dev="9p" ino=71827815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  426.079389][   T40] audit: type=1400 audit(2000000153.369:55540): avc:  denied  { add_name } for  pid=24968 comm="syz.8.4627" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  426.088507][   T40] audit: type=1400 audit(2000000153.369:55541): avc:  denied  { create } for  pid=24968 comm="syz.8.4627" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  426.095112][   T40] audit: type=1400 audit(2000000153.369:55542): avc:  denied  { associate } for  pid=24968 comm="syz.8.4627" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  426.102952][   T40] audit: type=1400 audit(2000000153.369:55543): avc:  denied  { mount } for  pid=24968 comm="syz.8.4627" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  426.110422][   T40] audit: type=1400 audit(2000000153.379:55544): avc:  denied  { read write } for  pid=23929 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  426.119042][   T40] audit: type=1400 audit(2000000153.379:55545): avc:  denied  { open } for  pid=23929 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  426.504582][T25002] fuse: Bad value for 'fd'
[  426.507492][ T5949] Bluetooth: hci2: Malformed HCI Event
[  426.541061][T25005] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4636'.
[  426.714747][T25018] xfrm0 speed is unknown, defaulting to 1000
[  426.718192][T25018] ������ speed is unknown, defaulting to 1000
[  426.872766][T25052] ip6t_srh: unknown srh invflags 51E8
[  426.962943][T25055] pimreg: entered allmulticast mode
[  427.067234][   T10] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  427.227382][   T10] usb 13-1: Using ep0 maxpacket: 8
[  427.231563][   T10] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  427.236057][   T10] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  427.240558][   T10] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  427.244873][   T10] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  427.251005][   T10] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  427.255042][   T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.464651][   T10] usb 13-1: GET_CAPABILITIES returned 0
[  427.467308][   T10] usbtmc 13-1:16.0: can't read capabilities
[  427.671097][   T10] usb 13-1: USB disconnect, device number 2
[  427.702867][T25051] pimreg: left allmulticast mode
[  427.914004][T25115] can0: slcan on ttyS3.
[  427.987438][T25113] can0 (unregistered): slcan off ttyS3.
[  428.173771][T25141] jfs: Unknown parameter 'discardm'
[  428.638413][T25189] netlink: 'syz.2.4669': attribute type 4 has an invalid length.
[  428.827722][T25243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4678'.
[  428.868180][T25249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4681'.
[  428.874213][T25249] bond0: entered promiscuous mode
[  428.876022][T25249] bond_slave_0: entered promiscuous mode
[  428.878108][T25249] bond_slave_1: entered promiscuous mode
[  428.880107][T25249] bridge_slave_1: entered promiscuous mode
[  428.883106][T25249] gretap0: entered promiscuous mode
[  428.885411][T25249] debugfs: 'hsr0' already exists in 'hsr'
[  428.887697][T25249] Cannot create hsr debugfs directory
[  428.889717][T25249] hsr0: entered promiscuous mode
[  429.034025][T25272] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4686'.
[  429.177357][T17360] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  429.217986][T25272] nbd3: detected capacity change from 0 to 63
[  429.223051][ T5949] block nbd3: Receive control failed (result -32)
[  429.337268][T17360] usb 7-1: Using ep0 maxpacket: 8
[  429.343064][T17360] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  429.346814][T17360] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  429.350270][T17360] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  429.353702][T17360] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  429.358615][T17360] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  429.361715][T17360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.437355][   T76] usb 5-1: new low-speed USB device number 45 using dummy_hcd
[  429.492749][T25310] openvswitch: netlink: IP tunnel dst address not specified
[  429.496152][T25310] 9pnet_fd: Insufficient options for proto=fd
[  429.567363][   T76] usb 5-1: device descriptor read/64, error -71
[  429.570620][T17360] usb 7-1: GET_CAPABILITIES returned 0
[  429.572569][T17360] usbtmc 7-1:16.0: can't read capabilities
[  429.774634][T25258] netlink: 'syz.2.4683': attribute type 7 has an invalid length.
[  429.778545][   T10] usb 7-1: USB disconnect, device number 40
[  429.827420][   T76] usb 5-1: new low-speed USB device number 46 using dummy_hcd
[  429.967233][   T76] usb 5-1: device descriptor read/64, error -71
[  430.077595][   T76] usb usb5-port1: attempt power cycle
[  430.271230][T25368] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4702'.
[  430.323031][T25371] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4703'.
[  430.328990][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4703'.
[  430.417301][   T76] usb 5-1: new low-speed USB device number 47 using dummy_hcd
[  430.438206][   T76] usb 5-1: device descriptor read/8, error -71
[  430.677763][   T76] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[  430.697898][   T76] usb 5-1: device descriptor read/8, error -71
[  430.808569][   T76] usb usb5-port1: unable to enumerate USB device
[  430.946618][T25415] binder: 25414:25415 ioctl c0306201 2000000003c0 returned -22
[  430.972474][T25415] ALSA: seq fatal error: cannot create timer (-19)
[  430.979552][   T40] kauditd_printk_skb: 186 callbacks suppressed
[  430.979568][   T40] audit: type=1400 audit(2000000158.289:55732): avc:  denied  { read } for  pid=25418 comm="syz.2.4714" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  430.992426][   T40] audit: type=1400 audit(2000000158.289:55733): avc:  denied  { open } for  pid=25418 comm="syz.2.4714" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  431.002362][   T40] audit: type=1400 audit(2000000158.289:55734): avc:  denied  { ioctl } for  pid=25418 comm="syz.2.4714" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  431.040171][   T40] audit: type=1400 audit(2000000158.349:55735): avc:  denied  { write } for  pid=25418 comm="syz.2.4714" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  431.175408][   T40] audit: type=1400 audit(2000000158.479:55736): avc:  denied  { map } for  pid=25426 comm="syz.6.4716" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  431.207245][   T40] audit: type=1400 audit(2000000158.479:55737): avc:  denied  { execute } for  pid=25426 comm="syz.6.4716" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  431.215737][   T40] audit: type=1400 audit(2000000158.479:55738): avc:  denied  { execmem } for  pid=25426 comm="syz.6.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  431.225422][   T40] audit: type=1400 audit(2000000158.519:55739): avc:  denied  { create } for  pid=25430 comm="syz.2.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  431.233340][   T40] audit: type=1400 audit(2000000158.519:55740): avc:  denied  { write } for  pid=25430 comm="syz.2.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  431.240777][   T40] audit: type=1400 audit(2000000158.539:55741): avc:  denied  { allowed } for  pid=25432 comm="syz.6.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  431.258274][T25433] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4718'.
[  431.272883][T25438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.276368][T25438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.507542][ T6020] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  431.647390][ T6020] usb 7-1: device descriptor read/64, error -71
[  431.701767][T25460] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4723'.
[  431.701903][ T5949] Bluetooth: hci3: Unable to find connection for big 0x00
[  431.849422][T25466] gre1: entered promiscuous mode
[  431.907077][T25466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'.
[  431.907716][ T6020] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  432.047706][ T6020] usb 7-1: device descriptor read/64, error -71
[  432.158109][ T6020] usb usb7-port1: attempt power cycle
[  432.220504][T25496] netlink: 'syz.6.4728': attribute type 7 has an invalid length.
[  432.446367][T25539] binder: BINDER_SET_CONTEXT_MGR already set
[  432.449245][T25539] binder: 25536:25539 ioctl 4018620d 200000000100 returned -16
[  432.479918][T25533] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  432.507286][ T6020] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  432.538856][ T6020] usb 7-1: device descriptor read/8, error -71
[  432.777505][ T6020] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  432.799335][ T6020] usb 7-1: device descriptor read/8, error -71
[  432.799481][T25577] nbd: couldn't find device at index 33622534
[  432.854251][T25578] overlayfs: failed to resolve '/����������������������������������������������������������������������������������������������������P': -2
[  432.865382][T25578] SELinux:  policydb magic number 0xc0 does not match expected magic number 0xf97cff8c
[  432.869360][T25578] SELinux: failed to load policy
[  432.919266][ T6020] usb usb7-port1: unable to enumerate USB device
[  433.157616][ T6020] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  433.309236][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  433.314042][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  433.318643][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  433.326046][ T6020] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  433.337199][ T6020] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.340787][ T6020] usb 11-1: Product: syz
[  433.342689][ T6020] usb 11-1: Manufacturer: syz
[  433.344826][ T6020] usb 11-1: SerialNumber: syz
[  433.349885][ T6020] usb 11-1: config 0 descriptor??
[  433.517321][T25604] program syz.0.4749 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  433.558935][ T6020] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  433.730274][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4752'.
[  433.757292][ T6020] usb 11-1: USB disconnect, device number 10
[  433.994566][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4754'.
[  434.141504][T25656] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  434.276890][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  434.281722][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: kworker/u33:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  434.281756][ T5949] Tainted: [L]=SOFTLOCKUP
[  434.281763][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  434.281778][ T5949] Workqueue: hci3 hci_rx_work
[  434.281823][ T5949] Call Trace:
[  434.281830][ T5949]  <TASK>
[  434.281838][ T5949]  dump_stack_lvl+0x16c/0x1f0
[  434.281866][ T5949]  sysfs_warn_dup+0x7f/0xa0
[  434.281897][ T5949]  sysfs_create_dir_ns+0x24b/0x2b0
[  434.281920][ T5949]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  434.281943][ T5949]  ? find_held_lock+0x2b/0x80
[  434.281980][ T5949]  ? do_raw_spin_unlock+0x172/0x230
[  434.282010][ T5949]  kobject_add_internal+0x2c4/0x9d0
[  434.282044][ T5949]  kobject_add+0x16e/0x240
[  434.282077][ T5949]  ? __pfx_kobject_add+0x10/0x10
[  434.282110][ T5949]  ? kobject_put+0xaf/0x6f0
[  434.282134][ T5949]  ? _raw_spin_unlock+0x28/0x50
[  434.282165][ T5949]  device_add+0x288/0x1980
[  434.282187][ T5949]  ? __pfx_dev_set_name+0x10/0x10
[  434.282212][ T5949]  ? __pfx_device_add+0x10/0x10
[  434.282235][ T5949]  ? mgmt_send_event_skb+0x2fb/0x460
[  434.282267][ T5949]  hci_conn_add_sysfs+0x1a8/0x260
[  434.282292][ T5949]  le_conn_complete_evt+0x11ed/0x1fa0
[  434.282322][ T5949]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  434.282352][ T5949]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[  434.282376][ T5949]  ? skb_pull_data+0x166/0x210
[  434.282399][ T5949]  hci_le_meta_evt+0x357/0x610
[  434.282422][ T5949]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  434.282448][ T5949]  hci_event_packet+0x685/0x1210
[  434.282470][ T5949]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  434.282495][ T5949]  ? __pfx_hci_event_packet+0x10/0x10
[  434.282519][ T5949]  ? kcov_remote_start+0x399/0x680
[  434.282542][ T5949]  ? lockdep_hardirqs_on+0x7c/0x110
[  434.282573][ T5949]  hci_rx_work+0x2c9/0x1020
[  434.282600][ T5949]  process_one_work+0x9ba/0x1b20
[  434.282637][ T5949]  ? __pfx_process_one_work+0x10/0x10
[  434.282685][ T5949]  ? assign_work+0x1a0/0x250
[  434.282713][ T5949]  worker_thread+0x6c8/0xf10
[  434.282768][ T5949]  ? __kthread_parkme+0x19e/0x250
[  434.282791][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  434.282816][ T5949]  kthread+0x3c5/0x780
[  434.282839][ T5949]  ? __pfx_kthread+0x10/0x10
[  434.282865][ T5949]  ? rcu_is_watching+0x12/0xc0
[  434.282884][ T5949]  ? __pfx_kthread+0x10/0x10
[  434.282908][ T5949]  ret_from_fork+0x983/0xb10
[  434.282932][ T5949]  ? __pfx_ret_from_fork+0x10/0x10
[  434.282956][ T5949]  ? __switch_to+0x7af/0x10d0
[  434.282982][ T5949]  ? __pfx_kthread+0x10/0x10
[  434.283006][ T5949]  ret_from_fork_asm+0x1a/0x30
[  434.283050][ T5949]  </TASK>
[  434.283081][ T5949] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  434.285919][T25667] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4759'.
[  434.288043][ T5949] Bluetooth: hci3: failed to register connection device
[  434.308599][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4760'.
[  434.529694][T25819] usb usb8: usbfs: process 25819 (syz.6.4764) did not claim interface 16 before use
[  434.585489][T25828] selinux_netlink_send: 55 callbacks suppressed
[  434.585501][T25828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=25828 comm=syz.8.4768
[  434.652327][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  434.656543][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  434.662471][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  434.666171][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  434.673675][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  434.690450][T25847] cgroup: noprefix used incorrectly
[  434.698652][T25837] xfrm0 speed is unknown, defaulting to 1000
[  434.701729][T25837] ������ speed is unknown, defaulting to 1000
[  434.783703][T25844] bridge0: entered promiscuous mode
[  434.903447][T25837] chnl_net:caif_netlink_parms(): no params data found
[  434.993362][T25837] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.996056][T25837] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.999266][T25837] bridge_slave_0: entered allmulticast mode
[  435.002278][T25837] bridge_slave_0: entered promiscuous mode
[  435.005805][T25837] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.008309][T25837] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.010793][T25837] bridge_slave_1: entered allmulticast mode
[  435.013572][T25837] bridge_slave_1: entered promiscuous mode
[  435.045717][T25837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.050555][T25837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.066871][T25837] team0: Port device team_slave_0 added
[  435.070437][T25837] team0: Port device team_slave_1 added
[  435.106297][T25837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.108911][T25837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.117258][T25837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.121790][T25837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.124092][T25837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.133167][T25837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.163373][T25837] hsr_slave_0: entered promiscuous mode
[  435.165747][T25837] hsr_slave_1: entered promiscuous mode
[  435.169132][T25837] debugfs: 'hsr0' already exists in 'hsr'
[  435.171038][T25837] Cannot create hsr debugfs directory
[  435.245237][T26091] bond0: entered promiscuous mode
[  435.249096][T26091] bond_slave_0: entered promiscuous mode
[  435.251759][T26091] bond_slave_1: entered promiscuous mode
[  435.255126][T26091] batadv0: entered promiscuous mode
[  435.257901][T26091] 8021q: adding VLAN 0 to HW filter on device hsr1
[  435.261077][T26091] bond0: left promiscuous mode
[  435.262798][T26091] bond_slave_0: left promiscuous mode
[  435.264730][T26091] bond_slave_1: left promiscuous mode
[  435.267576][T26091] batadv0: left promiscuous mode
[  435.511807][T26158] __nla_validate_parse: 3 callbacks suppressed
[  435.511819][T26158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4778'.
[  435.638578][T26175] netlink: 'syz.8.4781': attribute type 6 has an invalid length.
[  435.653551][T26175] netlink: 'syz.8.4781': attribute type 7 has an invalid length.
[  435.656291][T26175] netlink: 'syz.8.4781': attribute type 8 has an invalid length.
[  435.667375][ T6105] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  435.838773][ T6105] usb 11-1: config index 0 descriptor too short (expected 23569, got 27)
[  435.841609][ T6105] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.845718][ T6105] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  435.848823][ T6105] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  435.851502][ T6105] usb 11-1: Manufacturer: syz
[  435.854554][ T6105] usb 11-1: config 0 descriptor??
[  435.907192][ T6105] rc_core: IR keymap rc-hauppauge not found
[  435.909375][ T6105] Registered IR keymap rc-empty
[  435.911926][ T6105] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0
[  435.916302][ T6105] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input77
[  436.059937][   T40] kauditd_printk_skb: 132 callbacks suppressed
[  436.059949][   T40] audit: type=1400 audit(2000000163.369:55874): avc:  denied  { bind } for  pid=26151 comm="syz.6.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  436.068388][   T40] audit: type=1400 audit(2000000163.369:55875): avc:  denied  { name_bind } for  pid=26151 comm="syz.6.4777" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  436.075553][   T40] audit: type=1400 audit(2000000163.369:55876): avc:  denied  { node_bind } for  pid=26151 comm="syz.6.4777" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  436.082773][   T40] audit: type=1400 audit(2000000163.369:55877): avc:  denied  { write } for  pid=26151 comm="syz.6.4777" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  436.089823][   T40] audit: type=1400 audit(2000000163.369:55878): avc:  denied  { connect } for  pid=26151 comm="syz.6.4777" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  436.097435][   T40] audit: type=1400 audit(2000000163.369:55879): avc:  denied  { name_connect } for  pid=26151 comm="syz.6.4777" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  436.106839][   T40] audit: type=1400 audit(2000000163.409:55880): avc:  denied  { read write } for  pid=26151 comm="syz.6.4777" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  436.110857][ T6001] usb 11-1: USB disconnect, device number 11
[  436.115922][   T40] audit: type=1400 audit(2000000163.409:55881): avc:  denied  { open } for  pid=26151 comm="syz.6.4777" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  436.127211][   T40] audit: type=1400 audit(2000000163.419:55882): avc:  denied  { ioctl } for  pid=26151 comm="syz.6.4777" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  436.213303][T10475] .` (unregistering): Released all slaves
[  436.303512][T10475] bond1 (unregistering): Released all slaves
[  436.310501][T10475] bond2 (unregistering): Released all slaves
[  436.317604][T10475] bond3 (unregistering): Released all slaves
[  436.410788][T10475] bond0 (unregistering): Released all slaves
[  436.417661][T10475] bond4 (unregistering): Released all slaves
[  436.424821][T10475] bond5 (unregistering): Released all slaves
[  436.516100][T10475] bond6 (unregistering): Released all slaves
[  436.609040][T10475] bond7 (unregistering): Released all slaves
[  436.648557][T26172] ip6gretap0: entered promiscuous mode
[  436.657672][   T40] audit: type=1400 audit(2000000163.969:55883): avc:  denied  { read } for  pid=26206 comm="syz.6.4782" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  436.657889][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4780'.
[  436.724427][T10475] tipc: Left network mode
[  436.741902][ T5949] Bluetooth: hci1: command tx timeout
[  436.761320][T10475] IPVS: stopping backup sync thread 17002 ...
[  436.870089][T26224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4786'.
[  437.032926][ T6105] IPVS: starting estimator thread 0...
[  437.117360][T26241] IPVS: using max 44 ests per chain, 105600 per kthread
[  437.184893][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'.
[  437.235890][T25837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  437.241268][T25837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  437.245422][T25837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  437.251372][T25837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  437.334941][T25837] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.346815][T25837] 8021q: adding VLAN 0 to HW filter on device team0
[  437.356976][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.359493][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.383355][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.386208][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.425751][T10475] hsr_slave_0: left promiscuous mode
[  437.429429][T10475] hsr_slave_1: left promiscuous mode
[  437.432583][T10475] batman_adv: batadv0: Removing interface: macsec1
[  437.580133][T26286] netlink: 'syz.2.4796': attribute type 11 has an invalid length.
[  437.583597][T26286] netlink: 'syz.2.4796': attribute type 11 has an invalid length.
[  437.586626][T26286] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4796'.
[  437.639689][T26298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  438.387386][T25837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.450638][T25837] veth0_vlan: entered promiscuous mode
[  438.456433][T25837] veth1_vlan: entered promiscuous mode
[  438.476597][T25837] veth0_macvtap: entered promiscuous mode
[  438.490902][T25837] veth1_macvtap: entered promiscuous mode
[  438.501516][T25837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.510662][T25837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.517260][T10486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.520964][T10486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.525111][T10486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.528828][T10486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.628800][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.631683][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.656913][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.664663][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.678218][T26381] IPv6: sit1: Disabled Multicast RS
[  438.704314][T10475] IPVS: stop unused estimator thread 0...
[  438.749264][T26393] usb usb8: usbfs: process 26393 (syz.0.4766) did not claim interface 0 before use
[  438.753862][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'.
[  438.757946][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4819'.
[  438.757964][T26389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4819'.
[  438.758122][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4819'.
[  438.758136][T26389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4819'.
[  438.781734][T26393] geneve2: entered promiscuous mode
[  438.784242][T26393] geneve2: entered allmulticast mode
[  438.796025][T26399] openvswitch: netlink: IP tunnel dst address not specified
[  438.800349][T26399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7508 sclass=netlink_route_socket pid=26399 comm=syz.8.4820
[  438.803612][T26393] macvtap1: entered promiscuous mode
[  438.818618][ T5949] Bluetooth: hci1: command tx timeout
[  438.819921][T26393] macvtap1: entered allmulticast mode
[  438.823176][T26393] team0: Device macvtap1 is already an upper device of the team interface
[  438.869852][T26412] vcan0: tx drop: invalid da for name 0x0000000000000003
[  438.872742][T26412] vcan0: tx drop: invalid da for name 0x0000000000000003
[  438.973895][T26433] overlayfs: failed to resolve './file1': -2
[  438.984456][T26433] overlay: ./file0 is not a directory
[  439.010316][T26421] overlayfs: statfs failed on './file0'
[  439.040042][T26438] binder: 26437:26438 unknown command 0
[  439.042641][T26438] binder: 26437:26438 ioctl c0306201 2000000004c0 returned -22
[  439.046620][T26438] binder: 26437:26438 ioctl c0306201 200000000180 returned -11
[  439.122036][T26446] netlink: 'syz.2.4830': attribute type 12 has an invalid length.
[  439.367675][T26482] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  439.369788][T26479] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  439.371708][T26482] overlayfs: overlapping lowerdir path
[  439.376092][T26479] overlayfs: overlapping lowerdir path
[  439.407337][ T6021] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  439.412401][T26538] netlink: 'syz.6.4836': attribute type 1 has an invalid length.
[  439.417190][T26538] netlink: 'syz.6.4836': attribute type 10 has an invalid length.
[  439.464294][T26538] team0: Port device geneve0 added
[  439.557699][ T6021] usb 5-1: Using ep0 maxpacket: 32
[  439.562804][T26546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=26546 comm=syz.6.4837
[  439.565094][ T6021] usb 5-1: unable to get BOS descriptor or descriptor too short
[  439.570558][ T6021] usb 5-1: unable to read config index 0 descriptor/start: -71
[  439.573210][ T6021] usb 5-1: can't read configurations, error -71
[  440.106828][T26564] netlink: 'syz.0.4840': attribute type 30 has an invalid length.
[  440.118149][T10484] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  440.121489][T10484] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  440.124369][T10484] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  440.128012][T10484] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  440.191592][T26578] SELinux:  policydb magic number 0x30ffffff does not match expected magic number 0xf97cff8c
[  440.195078][T26578] SELinux: failed to load policy
[  440.503117][T26626] openvswitch: netlink: IPv4 tunnel dst address is zero
[  440.845184][T26650] __nla_validate_parse: 12 callbacks suppressed
[  440.845196][T26650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4862'.
[  440.851072][T26650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4862'.
[  440.897862][ T5949] Bluetooth: hci1: command tx timeout
[  441.047214][   T29] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  441.147205][ T6021] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  441.211584][   T29] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  441.215158][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.218306][   T29] usb 7-1: Product: syz
[  441.220031][   T29] usb 7-1: Manufacturer: syz
[  441.221886][   T29] usb 7-1: SerialNumber: syz
[  441.299137][ T6021] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  441.310122][ T6021] usb 5-1: config 0 interface 0 has no altsetting 0
[  441.314273][ T6021] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  441.318189][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  441.321612][ T6021] usb 5-1: Product: syz
[  441.323432][ T6021] usb 5-1: Manufacturer: syz
[  441.325408][ T6021] usb 5-1: SerialNumber: syz
[  441.329669][ T6021] usb 5-1: config 0 descriptor??
[  441.336151][ T6021] usb 5-1: selecting invalid altsetting 0
[  441.339120][   T40] kauditd_printk_skb: 230 callbacks suppressed
[  441.339135][   T40] audit: type=1400 audit(2000000168.649:56114): avc:  denied  { read write } for  pid=26665 comm="syz.8.4865" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  441.350494][   T40] audit: type=1400 audit(2000000168.649:56115): avc:  denied  { open } for  pid=26665 comm="syz.8.4865" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  441.359273][   T40] audit: type=1400 audit(2000000168.659:56116): avc:  denied  { setopt } for  pid=26665 comm="syz.8.4865" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  441.366340][   T40] audit: type=1400 audit(2000000168.659:56117): avc:  denied  { mount } for  pid=26665 comm="syz.8.4865" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  441.380029][   T40] audit: type=1400 audit(2000000168.689:56118): avc:  denied  { unmount } for  pid=23221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  441.431182][   T40] audit: type=1400 audit(2000000168.739:56119): avc:  denied  { name_bind } for  pid=26640 comm="syz.2.4860" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  441.431765][T26641] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  441.446951][T26641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4860'.
[  441.453207][   T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  441.456704][   T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  441.460432][   T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  441.468590][   T29] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  441.473560][   T29] usb 7-1: USB disconnect, device number 45
[  441.477542][T26688] vxcan1: entered allmulticast mode
[  441.483482][   T40] audit: type=1400 audit(2000000168.789:56120): avc:  denied  { create } for  pid=26686 comm="syz.8.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  441.491862][   T40] audit: type=1400 audit(2000000168.789:56121): avc:  denied  { ioctl } for  pid=26686 comm="syz.8.4868" path="socket:[124423]" dev="sockfs" ino=124423 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  441.502354][   T40] audit: type=1400 audit(2000000168.789:56122): avc:  denied  { create } for  pid=26686 comm="syz.8.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  441.510705][   T40] audit: type=1400 audit(2000000168.789:56123): avc:  denied  { connect } for  pid=26686 comm="syz.8.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  441.535894][ T6021] usb 5-1: USB disconnect, device number 51
[  441.787349][   T60] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  441.967707][   T60] usb 11-1: Using ep0 maxpacket: 16
[  441.972031][   T60] usb 11-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  441.975670][   T60] usb 11-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.977266][ T6021] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  441.979344][   T60] usb 11-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  441.986274][   T60] usb 11-1: config 7 interface 0 has no altsetting 0
[  441.989468][   T60] usb 11-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  441.992967][   T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.107286][ T6021] usb 5-1: device descriptor read/64, error -71
[  442.347257][ T6021] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  442.408308][   T60] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:7.0/0003:0458:5010.0018/input/input79
[  442.471068][   T60] kye 0003:0458:5010.0018: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0
[  442.477227][ T6021] usb 5-1: device descriptor read/64, error -71
[  442.587618][ T6021] usb usb5-port1: attempt power cycle
[  442.751447][   T60] usb 11-1: USB disconnect, device number 12
[  442.937255][ T6021] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  442.961362][ T6021] usb 5-1: device descriptor read/8, error -71
[  442.988287][ T5949] Bluetooth: hci1: command tx timeout
[  443.197349][ T6021] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  443.218248][ T6021] usb 5-1: device descriptor read/8, error -71
[  443.328525][ T6021] usb usb5-port1: unable to enumerate USB device
[  443.833712][T26829] loop2: detected capacity change from 0 to 7
[  443.837470][T26829] Dev loop2: unable to read RDB block 7
[  443.839934][T26829]  loop2: AHDI p1 p2 p3 p4
[  443.841988][T26829] loop2: partition table partially beyond EOD, truncated
[  443.845176][T26829] loop2: p1 start 1601398130 is beyond EOD, truncated
[  443.848735][T26829] loop2: p2 start 1702059890 is beyond EOD, truncated
[  443.851849][T26829] loop2: p3 start 2097152 is beyond EOD, truncated
[  443.919902][T26836] netlink: 'syz.6.4885': attribute type 7 has an invalid length.
[  443.924018][T26836] netlink: 'syz.6.4885': attribute type 7 has an invalid length.
[  443.964318][T26849] program syz.0.4887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  444.049833][T26864] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4891'.
[  444.089915][T26870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  444.155104][T26880] program syz.6.4895 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  444.266305][T26887] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  444.266676][T26889] overlayfs: overlapping lowerdir path
[  444.269800][T26887] overlayfs: overlapping lowerdir path
[  444.493803][T26915] sp0: Synchronizing with TNC
[  444.717231][   T76] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  444.763792][T26925] nvme_fabrics: unknown parameter or missing value 'ELF9�' in ctrl creation request
[  444.769123][T26925] netlink: 'syz.0.4903': attribute type 7 has an invalid length.
[  444.772300][T26925] netlink: 'syz.0.4903': attribute type 7 has an invalid length.
[  444.867206][   T76] usb 11-1: Using ep0 maxpacket: 16
[  444.874926][   T76] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  444.878966][   T76] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  444.882668][   T76] usb 11-1: Product: syz
[  444.884675][   T76] usb 11-1: Manufacturer: syz
[  444.886782][   T76] usb 11-1: SerialNumber: syz
[  444.892466][   T76] usb 11-1: config 0 descriptor??
[  445.027245][ T5922] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  445.107203][ T5949] Bluetooth: hci4: unexpected event 0x32 length: 12 > 9
[  445.187322][ T5922] usb 5-1: Using ep0 maxpacket: 16
[  445.192515][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  445.197245][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  445.200207][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.202892][ T5922] usb 5-1: Product: syz
[  445.204275][ T5922] usb 5-1: Manufacturer: syz
[  445.205799][ T5922] usb 5-1: SerialNumber: syz
[  445.209139][ T5922] usb 5-1: config 0 descriptor??
[  445.212645][ T5922] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  445.215696][ T5922] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  445.220247][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  445.302810][T26903] [U] �
[  445.422734][T26956] Bluetooth: MGMT ver 1.23
[  445.424298][T26956] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  445.459228][T26956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4904'.
[  445.487539][ T5922] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  445.550687][ T5922] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  445.553327][ T5922] em28xx 5-1:0.0: board has no eeprom
[  445.617213][ T5922] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  445.620819][ T5922] em28xx 5-1:0.0: dvb set to bulk mode.
[  445.623481][T26925] em28xx 5-1:0.0: writing to i2c device at 0x202 failed (error=-5)
[  445.623579][ T6001] em28xx 5-1:0.0: Binding DVB extension
[  445.633435][ T5922] usb 5-1: USB disconnect, device number 56
[  445.636519][ T5922] em28xx 5-1:0.0: Disconnecting em28xx
[  445.663238][ T6001] em28xx 5-1:0.0: Registering input extension
[  445.665416][ T5922] em28xx 5-1:0.0: Closing input extension
[  445.671655][ T5922] em28xx 5-1:0.0: Freeing device
[  445.877250][ T6001] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  446.037296][ T6001] usb 13-1: Using ep0 maxpacket: 32
[  446.043119][ T6001] usb 13-1: config index 0 descriptor too short (expected 6683, got 27)
[  446.046925][ T6001] usb 13-1: config 0 has an invalid interface number: 85 but max is 0
[  446.050568][ T6001] usb 13-1: config 0 has no interface number 0
[  446.053448][ T6001] usb 13-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  446.058588][ T6001] usb 13-1: config 0 interface 85 has no altsetting 0
[  446.064031][ T6001] usb 13-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  446.068151][ T6001] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.071656][ T6001] usb 13-1: Product: syz
[  446.073517][ T6001] usb 13-1: Manufacturer: syz
[  446.075676][ T6001] usb 13-1: SerialNumber: syz
[  446.080201][ T6001] usb 13-1: config 0 descriptor??
[  446.174762][T26997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.188924][T26997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.485084][ T6001] appletouch 13-1:0.85: Failed to read mode from device.
[  446.487940][ T6001] appletouch 13-1:0.85: probe with driver appletouch failed with error -5
[  446.493284][ T6001] usb 13-1: USB disconnect, device number 3
[  446.502905][   T40] kauditd_printk_skb: 110 callbacks suppressed
[  446.502915][   T40] audit: type=1400 audit(2000000173.809:56234): avc:  denied  { egress } for  pid=6020 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  446.512791][   T40] audit: type=1400 audit(2000000173.809:56235): avc:  denied  { sendto } for  pid=6020 comm="kworker/1:3" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  446.693544][   T40] audit: type=1400 audit(2000000173.999:56236): avc:  denied  { override_creds } for  pid=26970 comm="syz.8.4906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  446.731516][   T40] audit: type=1400 audit(2000000174.039:56237): avc:  denied  { getopt } for  pid=27009 comm="syz.0.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  446.769089][   T40] audit: type=1400 audit(2000000174.079:56238): avc:  denied  { read write } for  pid=27014 comm="syz.0.4909" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  446.777318][   T40] audit: type=1400 audit(2000000174.079:56239): avc:  denied  { open } for  pid=27014 comm="syz.0.4909" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  446.785907][   T40] audit: type=1400 audit(2000000174.079:56240): avc:  denied  { bind } for  pid=27014 comm="syz.0.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  446.797634][   T40] audit: type=1400 audit(2000000174.079:56241): avc:  denied  { allowed } for  pid=27014 comm="syz.0.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  446.804678][   T40] audit: type=1400 audit(2000000174.079:56242): avc:  denied  { create } for  pid=27014 comm="syz.0.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  446.812175][   T40] audit: type=1400 audit(2000000174.079:56243): avc:  denied  { getopt } for  pid=27014 comm="syz.0.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  446.905121][T27025] 9p: Bad value for 'debug'
[  447.018312][   T76] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  447.163470][T27037] program syz.2.4913 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  447.184892][   T76] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  447.189720][   T76] usb 5-1: config 0 interface 0 has no altsetting 0
[  447.195922][   T76] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  447.200146][   T76] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  447.203565][   T76] usb 5-1: Product: syz
[  447.205320][   T76] usb 5-1: Manufacturer: syz
[  447.207071][   T76] usb 5-1: SerialNumber: syz
[  447.212380][   T76] usb 5-1: config 0 descriptor??
[  447.218228][   T76] usb 5-1: selecting invalid altsetting 0
[  447.455926][   T76] usb 5-1: USB disconnect, device number 57
[  447.659419][   T29] usb 11-1: USB disconnect, device number 13
[  448.057329][T27103] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4919'.
[  448.060400][T27103] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  448.166220][T27112] overlayfs: missing 'lowerdir'
[  448.189149][T27116] Context (ID=0x4d6) not attached to queue pair (handle=0x1:0x3)
[  448.231909][T27120] xfrm0 speed is unknown, defaulting to 1000
[  448.235872][T27120] ������ speed is unknown, defaulting to 1000
[  448.281667][T27126] netlink: 'syz.0.4923': attribute type 4 has an invalid length.
[  448.284465][T27126] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4923'.
[  448.288320][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4924'.
[  448.617506][ T6105] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  448.757255][ T6001] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  448.777217][ T6105] usb 7-1: Using ep0 maxpacket: 8
[  448.781121][ T6105] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  448.783810][ T6105] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  448.786532][ T6105] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  448.790034][ T6105] usb 7-1: config 250 has no interface number 0
[  448.792160][ T6105] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  448.796301][ T6105] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  448.800067][ T6105] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  448.803870][ T6105] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  448.808519][ T6105] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  448.814585][ T6105] usb 7-1: config 250 interface 228 has no altsetting 0
[  448.819334][ T6105] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  448.823119][ T6105] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  448.826598][ T6105] usb 7-1: Product: syz
[  448.828593][ T6105] usb 7-1: SerialNumber: syz
[  448.835129][ T6105] hub 7-1:250.228: bad descriptor, ignoring hub
[  448.837715][ T6105] hub 7-1:250.228: probe with driver hub failed with error -5
[  448.887518][ T6001] usb 5-1: device descriptor read/64, error -71
[  449.039015][ T6105] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 46 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  449.058470][ T6105] usb 7-1: USB disconnect, device number 46
[  449.063646][ T6105] usblp0: removed
[  449.127620][ T6001] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  449.267275][ T6001] usb 5-1: device descriptor read/64, error -71
[  449.387852][ T6001] usb usb5-port1: attempt power cycle
[  449.413080][T27224] binder: 27223:27224 ioctl c0306201 200000000540 returned -14
[  449.482166][T27221] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI
[  449.487373][T27221] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f]
[  449.490841][T27221] CPU: 3 UID: 0 PID: 27221 Comm: syz.8.4935 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.494697][T27221] Tainted: [L]=SOFTLOCKUP
[  449.496609][T27221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  449.500809][T27221] RIP: 0010:simple_xattrs_free+0x60/0x1e0
[  449.502699][T27221] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b
[  449.510414][T27221] RSP: 0018:ffffc9000e22f680 EFLAGS: 00010202
[  449.513101][T27221] RAX: dffffc0000000000 RBX: ffff888034f49b40 RCX: ffffffff826a4375
[  449.516470][T27221] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038
[  449.519888][T27221] RBP: ffff888034f49bd8 R08: 0000000000000005 R09: 0000000000000000
[  449.523281][T27221] R10: 00000000ffffffea R11: ffff888029f654b0 R12: 1ffff92001c45edf
[  449.526741][T27221] R13: 0000000000000000 R14: ffff888125f5f320 R15: 0000000000000038
[  449.530184][T27221] FS:  00007fd1511756c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000
[  449.533348][T27221] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  449.535769][T27221] CR2: 00007f52ef7acf98 CR3: 000000005cd3b000 CR4: 0000000000352ef0
[  449.538743][T27221] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  449.541569][T27221] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  449.544549][T27221] Call Trace:
[  449.545850][T27221]  <TASK>
[  449.546866][T27221]  __kernfs_new_node+0x7b4/0x990
[  449.548677][T27221]  ? __pfx___kernfs_new_node+0x10/0x10
[  449.551046][T27221]  ? find_held_lock+0x2b/0x80
[  449.553162][T27221]  ? kernfs_root+0xee/0x2a0
[  449.555161][T27221]  kernfs_new_node+0x13c/0x1e0
[  449.557252][T27221]  __kernfs_create_file+0x53/0x350
[  449.559410][T27221]  cgroup_addrm_files+0x546/0xc20
[  449.561600][T27221]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  449.563936][T27221]  ? find_held_lock+0x2b/0x80
[  449.566014][T27221]  ? online_fair_sched_group+0x22c/0x780
[  449.567959][T27221]  css_populate_dir+0x169/0x570
[  449.569608][T27221]  cgroup_apply_control_enable+0x3f3/0xbb0
[  449.571571][T27221]  cgroup_subtree_control_write+0xb47/0xef0
[  449.573534][T27221]  ? kernfs_get_parent_dentry+0x1b0/0x2b0
[  449.575419][T27221]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  449.577500][T27221]  ? kernfs_root+0xf8/0x2a0
[  449.579065][T27221]  cgroup_file_write+0x1ef/0x7a0
[  449.580715][T27221]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  449.582873][T27221]  ? __pfx_cgroup_file_write+0x10/0x10
[  449.584663][T27221]  kernfs_fop_write_iter+0x3af/0x570
[  449.586543][T27221]  ? __pfx_cgroup_file_write+0x10/0x10
[  449.588565][T27221]  vfs_write+0x7d3/0x11d0
[  449.590044][T27221]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  449.591972][T27221]  ? __pfx_vfs_write+0x10/0x10
[  449.593515][T27221]  ksys_write+0x12a/0x250
[  449.594936][T27221]  ? __pfx_ksys_write+0x10/0x10
[  449.596591][T27221]  do_syscall_64+0xcd/0xf80
[  449.598227][T27221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.600612][T27221] RIP: 0033:0x7fd15038f7c9
[  449.602049][T27221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.608383][T27221] RSP: 002b:00007fd151175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  449.611332][T27221] RAX: ffffffffffffffda RBX: 00007fd1505e5fa0 RCX: 00007fd15038f7c9
[  449.614691][T27221] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005
[  449.617998][T27221] RBP: 00007fd150413f91 R08: 0000000000000000 R09: 0000000000000000
[  449.620945][T27221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.623485][T27221] R13: 00007fd1505e6038 R14: 00007fd1505e5fa0 R15: 00007ffc04544ee8
[  449.626007][T27221]  </TASK>
[  449.627035][T27221] Modules linked in:
[  449.628745][T27221] ---[ end trace 0000000000000000 ]---
[  449.632004][T27221] RIP: 0010:simple_xattrs_free+0x60/0x1e0
[  449.634468][T27221] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b
[  449.641669][T27221] RSP: 0018:ffffc9000e22f680 EFLAGS: 00010202
[  449.643771][T27221] RAX: dffffc0000000000 RBX: ffff888034f49b40 RCX: ffffffff826a4375
[  449.646357][T27221] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038
[  449.654482][T27221] RBP: ffff888034f49bd8 R08: 0000000000000005 R09: 0000000000000000
[  449.658472][T27221] R10: 00000000ffffffea R11: ffff888029f654b0 R12: 1ffff92001c45edf
[  449.662136][T27221] R13: 0000000000000000 R14: ffff888125f5f320 R15: 0000000000000038
[  449.665548][T27221] FS:  00007fd1511756c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000
[  449.669525][T27221] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  449.672508][T27221] CR2: 00007fa6c7fb7198 CR3: 000000005cd3b000 CR4: 0000000000352ef0
[  449.675973][T27221] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  449.679372][T27221] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  449.682791][T27221] Kernel panic - not syncing: Fatal exception
[  449.686233][T27221] Kernel Offset: disabled
[  449.688151][T27221] Rebooting in 86400 seconds..